Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: B04aw9ABMebDF/bj04NL2P9i6Bi+yAqkO1aO2IDZj9s=
Subject key identifier: B7:30:F6:9C:A6:B0:B4:6E:95:29:B5:ED:90:FF:08:70:A8:D3:E3:9F
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 01A1DF1543AAF7D5FE3FD31C3CD3AA381C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0F86
Signing time: Sun 15 Nov 2026 12:01:14 +0000
Manifest this update: Sun 15 Nov 2026 12:01:14 +0000
Manifest next update: Mon 16 Nov 2026 12:01:14 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: g1Yv3iHr8IpLUNLE/knLbQK2BQ40PN3jSS3TmAw4n5g=)
2: WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa (hash: eWCCmbbu8zh+FEmFkCBwJkZKgrWzGjOAichsxrS7Hww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:43:aa:f7:d5:fe:3f:d3:1c:3c:d3:aa:38:1c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Nov 15 12:01:14 2026 GMT
Not After : Nov 16 12:01:14 2026 GMT
Subject: CN=b730f69ca6b0b46e9529b5ed90ff0870a8d3e39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:fd:52:be:fc:50:3c:ff:4d:a8:e7:82:23:
d0:97:e2:55:e9:ee:f1:0e:2a:60:94:fa:11:6d:14:
3a:17:02:e9:ef:c9:f6:79:19:ae:13:22:f0:e4:86:
82:4e:d9:08:6a:7a:93:fb:e6:f7:31:11:56:1a:06:
41:8e:4d:c0:89:9f:b4:5c:df:9f:94:95:61:ce:e4:
5a:bb:56:1a:da:c1:00:fa:ab:3b:9e:16:8c:a7:6c:
a8:55:73:68:d6:50:33:10:c2:e3:1c:0a:7e:74:e1:
9a:85:42:b0:f3:73:52:55:d6:d6:58:3b:2f:46:f7:
03:b5:ed:d5:0b:e7:92:24:8b:ce:67:79:ff:86:0e:
9c:41:3a:49:13:33:cc:76:92:7c:1f:62:d8:7f:cc:
3a:5a:6e:73:23:8a:01:46:c5:07:5b:ca:e6:67:45:
91:34:01:e1:43:45:e2:d8:3d:69:f8:66:0e:90:8e:
36:99:b3:90:2f:ee:be:3f:55:e4:67:76:7f:c8:01:
2f:50:a4:21:70:e0:fd:fe:86:8b:b0:95:93:b8:3f:
bc:2c:12:fd:3a:7c:37:0b:66:3f:c0:98:56:e6:57:
b3:ed:e8:c0:fd:26:0d:de:18:8f:73:1d:5b:18:2c:
4b:b6:fb:e1:91:b4:5d:92:77:6d:a4:b7:9d:dd:bf:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:30:F6:9C:A6:B0:B4:6E:95:29:B5:ED:90:FF:08:70:A8:D3:E3:9F
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:db:16:de:e1:84:e0:8f:fc:57:29:78:de:66:e4:23:2f:21:
ae:58:78:5a:f8:64:66:83:05:64:ed:ea:9e:e7:85:f3:09:0f:
b2:f4:b9:7a:73:7b:39:60:79:4c:ae:c5:69:95:5a:a0:57:31:
dd:36:4e:c3:b1:cc:00:c7:e7:56:c7:b6:2f:c8:3a:f2:29:52:
87:47:28:b9:45:24:55:43:da:2f:a6:0e:42:0c:5b:41:fa:3f:
4c:c2:82:12:97:5b:12:a9:b1:1b:06:24:2a:02:2e:4e:40:12:
e8:f1:14:ce:1b:95:1d:77:17:b1:d1:b3:85:e3:ac:65:92:b9:
e6:16:47:9b:f5:a9:e1:15:1f:94:b3:09:ce:39:a2:93:4d:b3:
b9:56:1a:c3:44:60:e5:af:25:de:a5:fb:78:32:76:db:d3:3d:
cc:38:93:43:6b:3a:de:be:06:bc:63:84:3d:b9:d9:c8:6c:07:
44:f2:71:cf:99:4b:3e:6a:a9:f0:10:cd:1f:cf:66:c4:a9:15:
93:8c:aa:0c:29:14:cb:85:cc:d9:57:81:aa:03:7a:0a:89:c4:
60:0d:10:03:3a:d5:b3:71:99:24:5d:2a:0f:8b:ce:bc:98:27:
71:60:a7:99:19:db:b7:ea:dc:40:34:a4:c8:d9:88:b6:85:1d:
23:4f:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:12:48 2026 by rpki-client