Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: z1p/cpdwABqDuWAJwal/a1Pgju5s4sh6njlBEHyGNU4=
Subject key identifier: DC:5D:60:FC:B7:4B:1A:41:A1:7F:29:18:56:88:FE:B5:52:65:B7:66
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 019F902324D54A1C7A3888DF43091762EACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0E54
Signing time: Thu 23 Jul 2026 18:00:49 +0000
Manifest this update: Thu 23 Jul 2026 18:00:49 +0000
Manifest next update: Fri 24 Jul 2026 18:00:49 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: VBsPS3VRbfDHw3edxJx0VASymOzv0+Mrcpq9F70Rn14=)
2: WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa (hash: eWCCmbbu8zh+FEmFkCBwJkZKgrWzGjOAichsxrS7Hww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:24:d5:4a:1c:7a:38:88:df:43:09:17:62:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Jul 23 18:00:49 2026 GMT
Not After : Jul 24 18:00:49 2026 GMT
Subject: CN=dc5d60fcb74b1a41a17f29185688feb55265b766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:89:0f:d2:a5:2e:1f:61:0a:08:54:fa:61:
6b:a9:8e:a3:f0:5d:5e:ed:78:40:fe:4f:5f:b1:b3:
ad:32:4d:8f:31:80:88:4f:3d:e9:92:06:c0:10:66:
0f:0c:72:2e:96:14:12:d9:e5:78:95:62:94:66:b2:
d0:f8:7a:92:7f:42:59:28:ea:ae:14:9e:d1:7c:c7:
f1:df:53:25:20:b7:30:04:f0:dc:ba:5f:35:21:c9:
73:4c:d8:2b:34:0b:32:54:ea:21:1b:34:03:6d:ca:
97:e4:ee:62:33:bb:f5:d4:26:fa:27:29:15:75:20:
65:12:d7:fa:3a:7e:71:44:9b:55:f0:ba:70:46:9c:
0a:2a:12:1c:4d:59:ec:f1:23:ee:93:88:db:b2:a9:
ac:6e:d2:f2:89:ce:a7:5b:8c:b3:ff:20:d0:af:12:
96:45:2d:30:67:87:16:42:6a:db:b4:8c:9f:ce:bb:
f1:95:3f:2f:a2:a0:59:5c:1e:ad:2b:e4:43:44:ca:
f9:f4:35:f6:53:be:6c:43:5b:50:07:8e:39:61:c6:
87:71:bc:57:9b:50:2d:4c:33:4a:5f:2d:6e:97:e5:
3d:4d:8c:0f:b7:81:2a:00:fe:ba:e5:d8:a3:8c:e8:
64:be:3f:08:de:14:61:a8:95:1f:d5:3a:78:3e:2a:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:60:FC:B7:4B:1A:41:A1:7F:29:18:56:88:FE:B5:52:65:B7:66
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ca:48:51:26:a6:09:71:74:56:16:52:36:23:66:8e:d7:65:
fc:aa:75:7f:3c:7a:be:44:6a:e6:fa:4e:04:05:cd:2d:c9:4b:
e5:49:76:a2:da:b1:66:6c:84:dd:aa:43:11:f8:de:3f:b2:3a:
68:93:91:2b:c1:3d:12:e3:c4:48:6c:32:87:41:c7:08:c1:1a:
0d:aa:f1:fd:2e:f9:aa:86:66:93:c6:ee:d5:fa:d7:0a:a6:40:
d3:c2:c9:a1:83:65:a6:52:1b:b0:51:46:de:d6:f8:58:3c:60:
72:5b:1e:09:6b:fe:b4:ac:d3:f7:16:39:87:1c:ec:2c:4b:46:
49:95:19:b8:05:3c:55:c1:9d:6a:18:4d:62:44:1a:51:a0:b5:
15:53:0b:76:c3:f8:17:4c:e1:ab:69:bf:d7:c9:c4:fd:28:55:
6f:95:fc:2f:47:96:5f:5d:88:ba:a1:97:74:8a:41:03:70:db:
1b:fb:20:93:a9:47:5d:f2:9a:a6:b7:4e:23:31:ac:51:eb:da:
b2:a7:c3:d7:00:ec:7f:71:8b:24:fe:65:50:ef:8d:8b:a3:a7:
2e:f7:ac:b2:b3:b5:45:c1:e8:eb:25:87:3e:96:ac:24:0a:3a:
87:e6:b0:50:e1:e1:5c:4c:12:d1:0b:d0:34:10:df:7a:62:72:
d5:00:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:43 2026 by rpki-client