Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
File: BQ867ltqqRtsCUJRHgGsuhnnijk.mft (raw, json)
Hash identifier: vU3rSf07EmdsgyF++M+70LNe/H6ULe0j++lVupmVPak=
Subject key identifier: 0E:06:F9:0A:E0:56:DE:E2:B0:7E:03:98:E8:02:87:A0:D8:0D:08:A8
Authority key identifier: 05:0F:3A:EE:5B:6A:A9:1B:6C:09:42:51:1E:01:AC:BA:19:E7:8A:39
Certificate issuer: /CN=050f3aee5b6aa91b6c0942511e01acba19e78a39
Certificate serial: 01A0D237544151B449F95E11343216ADB716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ867ltqqRtsCUJRHgGsuhnnijk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
Manifest number: 27
Signing time: Thu 24 Sep 2026 07:00:36 +0000
Manifest this update: Thu 24 Sep 2026 07:00:36 +0000
Manifest next update: Fri 25 Sep 2026 07:00:36 +0000
Files and hashes: 1: BQ867ltqqRtsCUJRHgGsuhnnijk.crl (hash: g8ub47OO8xTMtjFoBpve7hLaxV/ZJ/5oe6ajGQsMoHc=)
2: ChG4Yj-7xo0fiewB8yaAUWU01Ms.asa (hash: fXWaCSxM8wHBYkUaaTNdf6219McvjQ8qX1GvLGW14vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ867ltqqRtsCUJRHgGsuhnnijk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:54:41:51:b4:49:f9:5e:11:34:32:16:ad:b7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050f3aee5b6aa91b6c0942511e01acba19e78a39
Validity
Not Before: Sep 24 07:00:36 2026 GMT
Not After : Sep 25 07:00:36 2026 GMT
Subject: CN=0e06f90ae056dee2b07e0398e80287a0d80d08a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:d1:ac:b8:f4:5b:c0:82:cd:fc:ce:f5:a0:
ca:a8:af:0e:e8:f8:f8:79:22:30:d7:1d:eb:c6:93:
a3:2b:96:b2:b9:80:8e:29:cf:2a:2c:64:ed:ba:a8:
03:a3:fb:58:ca:59:f4:da:5f:34:ea:c3:f8:c0:e8:
fa:a2:54:14:f6:dc:a3:0d:82:49:b8:ab:24:f2:f0:
56:dd:94:5c:dc:81:40:1f:65:08:e2:c8:4f:9c:aa:
ee:b9:c0:6c:72:cd:e9:7a:57:2a:c1:c2:b0:ba:5e:
bc:28:5c:0b:b4:de:2a:f3:15:e9:1e:0f:09:28:c6:
16:d0:e9:eb:95:4a:24:6a:c3:84:57:c8:12:eb:5c:
ce:b7:b7:ce:ba:a3:44:f5:2b:1e:d1:b7:db:00:62:
35:a0:4e:af:a1:d3:09:f4:95:69:56:0a:c4:90:4a:
c0:b0:fb:8c:d1:27:51:3c:85:da:eb:a3:73:75:a5:
8b:30:3e:c2:4d:04:9b:5a:27:17:11:2e:a5:e5:27:
45:52:f9:65:21:a2:dd:87:b5:bd:72:42:34:02:a8:
02:b0:1e:14:5d:7f:49:7c:0b:cb:f1:da:1e:28:45:
b5:58:86:d9:59:7d:f1:6e:48:3e:e0:d6:3c:79:49:
1f:71:07:a8:1d:5e:2b:3e:db:cc:02:9d:3b:6f:bc:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:F9:0A:E0:56:DE:E2:B0:7E:03:98:E8:02:87:A0:D8:0D:08:A8
X509v3 Authority Key Identifier:
keyid:05:0F:3A:EE:5B:6A:A9:1B:6C:09:42:51:1E:01:AC:BA:19:E7:8A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ867ltqqRtsCUJRHgGsuhnnijk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:29:1f:b5:a9:dd:d5:fe:5e:3d:7d:d8:a9:af:de:e1:bc:
fe:87:c5:b3:25:73:49:7e:a6:34:36:43:01:be:d7:fa:7a:62:
45:83:92:72:d1:ec:a5:00:4e:02:d3:34:46:8e:d9:32:3d:79:
c5:e1:ab:16:31:d6:26:3e:c2:f4:0e:c6:48:80:93:1b:ac:41:
87:bf:fb:6f:ff:28:e4:e9:53:8d:3f:8f:43:4d:b1:6b:6c:1b:
6d:7b:aa:81:3f:c7:32:78:6e:03:7c:0d:a7:c9:78:93:61:dc:
1f:18:7d:ce:2b:b5:0d:37:7f:12:a1:90:2a:10:a6:de:ea:a2:
3a:67:03:dd:4d:da:50:10:c1:2a:90:8f:41:d4:20:e4:72:36:
ed:37:c6:e1:4c:36:44:1b:02:03:a3:b6:af:c7:ef:14:ad:88:
15:1b:c4:47:24:5b:1c:a4:03:6b:07:18:1e:11:25:e3:38:6b:
04:00:02:c3:ef:0c:1a:87:4d:9b:a6:3f:57:ad:d6:c8:b8:0b:
1d:bd:3e:bf:e3:92:29:e4:78:c4:f3:e6:7e:b3:17:99:a8:ed:
8c:8f:10:b1:c7:78:a5:d0:f5:fd:b1:9c:a0:f6:bf:2e:a7:24:
47:d8:51:2e:46:ce:80:e7:ca:c4:b3:57:8c:70:cc:dc:b8:6e:
99:86:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:25:49 2026 by rpki-client