Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: yVu+T4sAr9ugAIXHIMullgiwwykR7u9UULuV/knuXEs=
Subject key identifier: E4:35:2B:0D:0F:AD:9A:4D:93:D8:24:C1:3E:CC:E2:82:08:62:BC:3E
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 01A0CCD9DD47163DA1414B41B793CDECA1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0EF8
Signing time: Wed 23 Sep 2026 06:00:24 +0000
Manifest this update: Wed 23 Sep 2026 06:00:24 +0000
Manifest next update: Thu 24 Sep 2026 06:00:24 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: u93ExlPgu/deIL18ubkwhIbaoJvbxGETW6ffcCejLP0=)
2: WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa (hash: eWCCmbbu8zh+FEmFkCBwJkZKgrWzGjOAichsxrS7Hww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:dd:47:16:3d:a1:41:4b:41:b7:93:cd:ec:a1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Sep 23 06:00:24 2026 GMT
Not After : Sep 24 06:00:24 2026 GMT
Subject: CN=e4352b0d0fad9a4d93d824c13ecce2820862bc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:46:93:85:9d:d4:09:72:48:80:40:c4:0f:
57:86:30:b9:3d:1e:75:97:41:6f:c0:00:91:83:94:
1f:cc:96:16:63:a8:3c:0a:9a:ee:b6:bf:77:cc:1f:
d3:6b:90:20:84:6c:60:d0:7b:56:ed:e7:c8:62:e5:
56:cc:ec:b4:70:32:23:f8:6e:4b:8b:0f:b4:89:5f:
44:e2:47:e1:66:0c:e2:54:4e:ec:7d:99:1d:bb:9a:
c7:64:90:41:f7:15:d4:8f:2d:f7:e8:6f:02:a8:e7:
3b:4b:f3:1a:78:5e:29:dc:07:cc:a2:18:e8:fc:1e:
97:8f:63:42:94:c2:12:4c:42:a9:95:f4:83:6b:06:
25:a9:5f:5d:ae:e5:c7:e1:9d:3f:d1:f6:53:f2:42:
3e:81:e8:56:a2:2c:67:69:dc:0b:92:1b:4a:c5:af:
57:e0:03:8a:aa:52:73:ab:f5:cf:26:87:70:cb:3e:
7e:4e:11:6d:24:5b:12:c8:1e:f6:11:ee:ed:87:25:
56:62:56:86:84:4d:40:58:66:41:07:07:9c:49:9f:
30:d3:ef:5b:67:c8:cc:1e:77:79:7e:09:96:73:02:
14:3e:55:de:8c:f1:f2:7c:c5:c0:a5:47:2a:95:56:
08:1e:c5:66:b7:b6:32:26:45:60:7c:cb:37:68:9e:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:35:2B:0D:0F:AD:9A:4D:93:D8:24:C1:3E:CC:E2:82:08:62:BC:3E
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:86:e9:3f:0e:3c:87:3b:13:39:ff:fc:25:77:a6:7d:89:a3:
b1:d6:de:6c:b8:93:94:ed:a6:64:2a:11:e4:76:24:d9:76:92:
ff:38:37:e6:55:9f:a4:67:10:5a:00:c7:eb:aa:89:62:bc:af:
ee:08:c0:64:72:d2:90:9f:0e:dc:50:e5:16:b7:d1:50:ed:97:
b8:9a:4d:68:82:6c:fd:16:3d:a2:a0:8e:79:77:98:93:a6:a3:
f5:db:9c:aa:dc:09:16:ba:de:60:5a:ed:e5:8f:63:63:5f:28:
cb:41:e0:c0:ba:25:fc:c5:15:b0:d5:13:16:08:f0:a0:33:7d:
98:13:a8:f0:9d:44:88:93:b8:e4:5f:67:28:46:89:27:7c:82:
a0:d0:3a:89:be:e9:99:38:ef:0f:0a:af:40:df:32:90:25:90:
3b:14:5a:4a:e6:8d:48:70:35:67:06:5d:e3:66:57:e6:bd:99:
3e:33:64:b3:7d:05:fe:41:9d:af:cb:3a:f0:42:e4:87:e4:24:
4f:11:6c:62:45:48:55:84:e8:03:18:82:27:01:67:0b:61:fb:
fa:c6:45:c2:0f:8d:07:23:d4:cb:e5:69:4d:13:10:b2:5c:bc:
69:e7:1b:ca:20:28:8f:c1:b4:e5:1c:fb:2e:0b:5c:e8:cf:00:
d4:8d:b7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:25:15 2026 by rpki-client