Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: evPy3NAtyBNnoaP1TqryhbRQeIy5wSetppr2TiJMnto=
Subject key identifier: 29:AF:F1:95:F2:04:98:3D:8C:CA:F8:A6:30:71:49:75:99:18:2F:12
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019F9090EA4877A159C6CC458289DEC71DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 041C
Signing time: Thu 23 Jul 2026 20:00:43 +0000
Manifest this update: Thu 23 Jul 2026 20:00:43 +0000
Manifest next update: Fri 24 Jul 2026 20:00:43 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: tT88wxSUC566pjlxY29RFyij76+bOq2+IEKSuvOb9/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ea:48:77:a1:59:c6:cc:45:82:89:de:c7:1d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Jul 23 20:00:43 2026 GMT
Not After : Jul 24 20:00:43 2026 GMT
Subject: CN=29aff195f204983d8ccaf8a63071497599182f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:15:98:74:e7:c5:83:4a:ab:e1:25:18:0d:
68:b1:b9:f0:be:d2:e8:2e:c3:8c:46:07:6f:32:65:
d4:fc:c6:56:ca:de:36:f6:3d:60:bd:5a:0e:f1:27:
f6:a8:a7:be:b0:61:bd:df:1a:f4:db:21:44:f1:be:
89:da:b4:ed:74:a0:72:4e:bf:33:3f:eb:d9:67:4b:
cc:e8:dd:a7:bc:20:f1:9d:e8:e0:5d:b3:78:55:cd:
5f:bc:0a:b8:11:be:7e:87:98:24:82:29:bb:72:78:
7b:0d:56:0e:ed:a9:54:1d:c6:d4:14:8d:0e:d2:a6:
78:fc:4b:11:4b:d8:f4:24:3a:db:6d:20:7c:90:70:
c7:9b:fc:a4:64:96:af:98:22:5e:8f:7c:8f:c9:35:
eb:07:3b:05:7f:b8:7e:8c:3f:e1:5c:f2:75:8a:49:
f2:60:4e:3a:5a:03:33:9a:8c:91:e2:cd:e5:aa:31:
ca:2e:79:01:16:aa:b1:99:f6:88:c3:a5:fa:1d:f2:
43:29:d3:97:ab:80:89:ec:b7:63:c0:f7:bf:c4:c9:
60:48:64:4b:4c:5a:8b:39:37:cd:4d:ca:c3:c6:2c:
88:08:e4:f3:74:ef:f1:1d:08:80:41:84:8c:72:61:
13:16:f8:9e:ed:2d:6a:4b:38:bd:d7:8f:64:d1:a5:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:F1:95:F2:04:98:3D:8C:CA:F8:A6:30:71:49:75:99:18:2F:12
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b4:96:41:b3:ae:a2:9d:23:f1:dd:f1:f2:94:ee:d2:23:4b:
22:b7:03:ad:bc:d0:0f:1c:37:fb:9e:e6:41:3f:42:ac:2d:24:
67:36:4d:53:05:cb:94:71:c1:3a:12:08:29:97:bc:5f:73:3e:
91:59:2a:b8:88:c7:fe:e4:58:bf:b8:09:61:e6:60:d6:56:3e:
ba:ac:6a:ee:2e:c1:26:99:b3:11:56:58:0e:cf:59:28:09:9f:
c4:a8:31:30:15:2d:22:e7:35:2c:e2:04:9d:a2:21:8e:e2:d4:
14:1c:2d:8f:d9:9a:09:7a:86:22:38:ad:91:ef:cf:63:7e:9a:
0d:fb:1a:7c:90:b4:35:9c:03:0b:f7:da:5c:13:79:f4:63:20:
41:80:1a:dc:ce:e5:b0:21:6c:72:5c:9e:74:df:fa:4f:21:8a:
71:58:86:97:eb:97:1b:5d:2b:6c:e2:53:54:7d:29:54:ec:0e:
be:9c:fe:38:d6:3a:92:9f:54:7a:8b:fc:da:54:83:ff:4d:ef:
eb:97:4c:30:ae:cc:e7:96:34:ef:e2:fd:15:bc:be:26:a1:f1:
f8:c8:98:ce:39:0d:38:a8:7b:0e:47:1d:6e:3d:e5:5a:1b:8b:
94:46:83:84:69:0f:b6:1c:07:c8:7f:fe:71:01:7b:70:e4:5f:
90:1d:86:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkOpId6FZxsxFgonexx3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTlmYTg0ODVmZjBmNGI4NWM3ZDRlZjQ3OGY5ODYwOTNk
OWVjY2IwHhcNMjYwNzIzMjAwMDQzWhcNMjYwNzI0MjAwMDQzWjAzMTEwLwYDVQQD
EygyOWFmZjE5NWYyMDQ5ODNkOGNjYWY4YTYzMDcxNDk3NTk5MTgyZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgYVmHTnxYNKq+ElGA1osbnwvtLo
LsOMRgdvMmXU/MZWyt429j1gvVoO8Sf2qKe+sGG93xr02yFE8b6J2rTtdKByTr8z
P+vZZ0vM6N2nvCDxnejgXbN4Vc1fvAq4Eb5+h5gkgim7cnh7DVYO7alUHcbUFI0O
0qZ4/EsRS9j0JDrbbSB8kHDHm/ykZJavmCJej3yPyTXrBzsFf7h+jD/hXPJ1ikny
YE46WgMzmoyR4s3lqjHKLnkBFqqxmfaIw6X6HfJDKdOXq4CJ7LdjwPe/xMlgSGRL
TFqLOTfNTcrDxiyICOTzdO/xHQiAQYSMcmETFvie7S1qSzi9149k0aWUwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmv8ZXyBJg9jMr4pjBxSXWZGC8SMB8GA1UdIwQY
MBaAFAap+oSF/w9LhcfU70ePmGCT2ezLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQt
MmE0NjQwOTEzNTZiLzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQtMmE0NjQwOTEzNTZi
LzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbSWQbOu
op0j8d3x8pTu0iNLIrcDrbzQDxw3+57mQT9CrC0kZzZNUwXLlHHBOhIIKZe8X3M+
kVkquIjH/uRYv7gJYeZg1lY+uqxq7i7BJpmzEVZYDs9ZKAmfxKgxMBUtIuc1LOIE
naIhjuLUFBwtj9maCXqGIjitke/PY36aDfsafJC0NZwDC/faXBN59GMgQYAa3M7l
sCFsclyedN/6TyGKcViGl+uXG10rbOJTVH0pVOwOvpz+ONY6kp9Ueov82lSD/03v
65dMMK7M55Y07+L9Fby+JqHx+MiYzjkNOKh7Dkcdbj3lWhuLlEaDhGkPthwHyH/+
cQF7cORfkB2G3Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:59 2026 by rpki-client