Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: vGSKJP60rc5BvySElfcFja+mD9EE5t8P5kvUWB8zvVQ=
Subject key identifier: 6D:F9:76:4D:B9:2E:0F:9E:52:26:D4:96:24:57:D8:B1:BB:CD:EE:6C
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 019D2816DE787E9145075A0C523F40A07852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0D15
Signing time: Thu 26 Mar 2026 03:01:20 +0000
Manifest this update: Thu 26 Mar 2026 03:01:20 +0000
Manifest next update: Fri 27 Mar 2026 03:01:20 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: 7EViwdAqG9I/C/OcnArp4jW45D1ypTSBXuV8X2DnAL0=)
2: WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa (hash: eWCCmbbu8zh+FEmFkCBwJkZKgrWzGjOAichsxrS7Hww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:de:78:7e:91:45:07:5a:0c:52:3f:40:a0:78:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Mar 26 03:01:20 2026 GMT
Not After : Mar 27 03:01:20 2026 GMT
Subject: CN=6df9764db92e0f9e5226d4962457d8b1bbcdee6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:c3:25:ea:e6:25:63:0e:dd:9b:55:7a:80:
fb:4f:70:f8:fb:89:b3:ec:87:b6:5e:da:3e:15:7e:
a8:4a:81:a9:c0:da:a6:0f:98:04:ee:cb:0d:19:cf:
16:f5:ec:ef:2e:df:fa:1f:52:dc:61:e9:3f:79:37:
64:6f:ca:05:94:57:8e:0e:50:fb:56:5d:39:1f:3c:
67:7c:cd:c0:18:a1:0b:3b:f4:1a:d1:fc:ba:0d:48:
6a:e4:ff:ba:40:c7:ce:a0:4d:b9:a2:1b:89:92:13:
52:50:ba:f7:01:1b:dc:ac:b6:83:1c:06:ef:6f:da:
67:18:24:85:0b:c4:3e:31:33:5b:aa:2d:53:78:e4:
b5:8b:8f:e8:1d:7a:f0:c9:66:ff:8a:b6:0c:d4:5b:
7a:76:1e:77:79:8e:7d:36:55:62:6e:2f:45:b1:fe:
c3:13:e5:23:9c:0b:fd:f8:10:b7:71:df:61:9e:7d:
2e:fb:ec:a7:ca:12:1c:56:c9:24:d5:d0:1e:24:0e:
72:8d:d8:af:10:5d:9c:f9:f6:cb:ed:15:31:ee:22:
db:1d:ac:d0:9c:36:0a:35:13:17:1e:20:55:91:57:
9d:2a:e5:b0:68:78:da:ef:91:53:d1:da:5d:68:14:
d0:d5:b5:e5:79:7d:b9:a7:90:6c:fb:23:7f:a7:59:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F9:76:4D:B9:2E:0F:9E:52:26:D4:96:24:57:D8:B1:BB:CD:EE:6C
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b5:d5:20:8c:e3:a1:dd:f6:8c:28:aa:f7:55:96:b4:98:bd:
af:5a:24:56:0c:a6:83:b9:c6:9f:3b:90:e9:1c:0d:cd:fb:89:
04:62:54:fb:ee:ea:81:ee:6b:dc:15:f3:22:04:aa:9b:99:1e:
0c:6c:3d:ad:64:64:17:74:41:80:4f:4e:bf:93:57:25:1b:bd:
c7:fa:f0:74:bd:48:8e:fa:00:e0:38:4c:33:5a:34:2a:84:bf:
5a:e4:25:91:8f:8a:d2:4c:dc:e2:07:5d:70:94:e7:48:6d:29:
1d:4c:82:16:06:d0:ff:f7:d1:a4:1a:d1:d3:6c:43:13:9a:10:
95:80:f1:dd:2d:38:ed:7e:a8:68:71:5c:a8:a6:d4:aa:21:a7:
b5:37:8c:a6:ea:ba:93:d5:fa:79:42:e3:a9:e0:ee:6a:63:6f:
67:e8:2f:c9:a5:63:2f:d7:e2:8b:58:90:40:97:67:16:c1:33:
10:f9:3c:73:d7:04:62:16:03:90:dd:44:03:f5:72:82:18:cf:
7e:d2:e5:c7:aa:5a:ba:cd:15:02:18:37:ce:57:a1:37:a3:02:
8c:8d:68:db:4f:09:08:d2:ee:72:d4:1a:2c:0a:05:cf:83:a1:
7a:17:87:04:3e:8b:e4:ac:98:43:d1:ae:74:92:a1:79:da:e6:
d4:48:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:43 2026 by rpki-client