Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: 262fyIO9mjERmtKPDfIwL4WqnkdxSwIUiKnmIGEEjQM=
Subject key identifier: F7:37:68:86:69:CA:19:77:01:19:E6:57:BE:36:FD:5A:2C:7A:56:BF
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 019E1D59851CE722115325B0646C86094EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0D94
Signing time: Tue 12 May 2026 18:01:06 +0000
Manifest this update: Tue 12 May 2026 18:01:06 +0000
Manifest next update: Wed 13 May 2026 18:01:06 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: e0jr4CaqaHrmDNnN8HH1kIWaCw3q+5cCJEuVaEbHexs=)
2: WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa (hash: eWCCmbbu8zh+FEmFkCBwJkZKgrWzGjOAichsxrS7Hww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:85:1c:e7:22:11:53:25:b0:64:6c:86:09:4e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: May 12 18:01:06 2026 GMT
Not After : May 13 18:01:06 2026 GMT
Subject: CN=f737688669ca19770119e657be36fd5a2c7a56bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:45:4f:65:57:e8:4f:43:c0:c3:b3:02:91:
15:6b:e7:c7:12:bf:be:41:71:4b:80:ff:cc:a5:a1:
56:7f:98:69:e5:a7:27:aa:28:94:96:9c:da:78:e4:
46:95:2d:b4:e1:f7:e9:ea:8c:21:d2:b9:53:d9:00:
e8:24:01:9f:ce:0e:b9:9a:28:78:e1:40:94:e3:f4:
e4:ce:a0:d4:af:69:17:7a:a8:4f:16:44:56:69:5e:
2d:81:72:d7:b6:a5:30:af:eb:7c:81:1a:d5:d4:84:
4a:48:b6:7d:13:fa:1d:91:c4:0c:be:53:01:e2:2b:
42:81:4e:ed:d9:53:20:08:32:e2:af:b6:f3:28:e2:
90:b2:96:83:be:c5:cf:11:44:a9:bd:78:e1:47:93:
f5:5f:46:87:cb:70:d9:f1:b1:f8:23:60:91:d9:d3:
f5:ab:f7:e4:ee:8e:0c:f3:8f:2e:8d:c7:e0:34:6b:
85:ef:ad:b6:37:21:4d:a2:9c:4b:fd:6a:89:2a:f8:
1e:d8:ac:73:b7:67:2b:c9:8c:97:ce:bd:6a:55:ac:
b8:7e:ab:55:ca:63:f8:48:9d:f6:02:88:a3:78:cb:
5f:90:55:fd:c5:9a:21:b2:53:36:50:dd:b7:5d:5a:
2f:14:40:59:10:32:e9:66:a4:28:88:84:fb:f3:ab:
5e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:37:68:86:69:CA:19:77:01:19:E6:57:BE:36:FD:5A:2C:7A:56:BF
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e0:f0:2d:59:c9:35:0d:aa:e8:f3:96:7e:ee:71:39:ef:4e:
f5:14:78:f5:6d:b8:d9:28:c2:fe:34:d0:a5:13:89:a1:5b:af:
fb:88:52:23:22:07:a4:ce:24:9c:cd:37:c8:72:6b:f4:2f:06:
ed:b7:3d:35:bb:14:46:72:10:76:84:20:cb:26:64:31:2f:dd:
16:b2:26:56:c5:0f:66:ab:e6:6b:f5:2c:6f:a4:97:ad:81:0d:
fe:30:04:47:35:4c:d1:ab:bd:ba:ce:7a:23:b4:79:e7:3a:78:
23:c3:4c:57:83:76:07:2f:51:ea:ca:ae:38:79:55:98:7a:7a:
70:fa:ff:02:46:80:61:46:2a:45:20:0d:3c:6f:5f:b7:c5:13:
41:bf:ad:2f:ef:8b:4c:f7:d7:23:31:29:89:3b:b9:be:26:40:
04:29:f9:4b:5b:fe:48:c1:91:b0:99:9f:4b:13:f4:77:c5:29:
5d:86:aa:e3:b6:ba:73:78:4c:a9:d2:53:be:85:27:55:eb:d6:
b1:8c:ab:6f:20:90:9b:86:f1:ec:25:06:62:8f:6b:44:67:5b:
47:82:38:ef:d8:92:16:d9:52:83:7d:e8:95:ed:26:b3:d6:21:
ba:7e:b5:1c:5d:ce:2a:05:f8:37:c6:b8:49:70:11:f7:97:03:
39:5e:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:20 2026 by rpki-client