Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: i3WMwfaFn+WN+3i6mMAlIRDtnXNqzkZ5gjfBdRYM3Pk=
Subject key identifier: 3D:02:B4:C1:66:74:B7:5C:B5:3A:05:48:12:CA:75:D7:28:EC:9F:5D
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 01A0D804328DC3E91749444487C92CB3B93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 10:02:28 +0000
Manifest this update: Fri 25 Sep 2026 10:02:28 +0000
Manifest next update: Sat 26 Sep 2026 10:02:28 +0000
Files and hashes: 1: 2owrDtSSdVfxvYXAxMiLovDSXEU.roa (hash: 9L5ssgJ0+ShYxgpGMGCzPMDxEovXXE+mzE0m/NaKh/k=)
2: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: zUdiN0pq7KTQ0p5TuOK3gnL4s38X/h/tFOS1jskUXvA=)
3: J_ltO4IY-zslK2HzdFODfkjQNtE.asa (hash: Vj0jAxwKfiBhKsc+pYPJJ3wR9tPHQ0qcCAKE+u9mInI=)
4: W2dqeQoexNzO-eZu-b3E0MsHT4I.roa (hash: xbkqBY08vRM/01LJVRXUSH6oRqaCojszvq1SR3phsH0=)
5: cqgUAYp6Ct2GmV82YKdcCzBkMZI.asa (hash: CHbZCVVD9C5mKoyLTLmnjjwnKPQeNc2ARB2LqZbSLRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:32:8d:c3:e9:17:49:44:44:87:c9:2c:b3:b9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Sep 25 10:02:28 2026 GMT
Not After : Sep 26 10:02:28 2026 GMT
Subject: CN=3d02b4c16674b75cb53a054812ca75d728ec9f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:f8:b5:ff:a8:70:01:ee:15:82:ba:e5:85:
0e:5e:4a:ad:4d:37:9f:bd:47:c6:42:b3:4f:d2:f4:
9c:13:e5:93:a9:c8:dd:0e:56:3d:6f:35:e3:23:98:
f5:a0:5b:e9:e4:a5:d4:d8:06:10:10:e7:ce:c7:95:
aa:b4:19:4a:f9:04:79:42:80:af:8c:28:33:4a:56:
61:52:c2:b9:1e:e0:02:e8:a5:c6:e8:95:ae:da:f3:
a4:95:46:c4:aa:4f:9d:de:a9:bb:73:22:03:32:0b:
f2:1e:57:5d:c5:8e:2d:3f:77:2e:d4:d1:47:38:7b:
8f:0b:25:0d:e4:87:7c:81:38:0f:3d:45:21:f3:71:
0e:44:14:52:a0:53:d1:32:1e:64:74:07:5f:0d:2b:
1e:b7:61:0a:84:96:cb:0b:e3:3b:b1:f4:4e:70:70:
bd:5a:b0:46:b7:08:dd:13:2f:b8:6e:9d:c9:20:48:
6f:7d:fe:5f:09:28:f1:84:f4:82:ea:51:41:c6:d6:
ec:4b:de:43:dd:99:c5:b5:bd:9e:a7:c0:96:e3:76:
6a:91:6a:91:c1:4b:32:1c:26:89:03:d7:44:a0:29:
e7:db:5e:74:56:77:5f:f9:c2:ec:6a:b3:4e:d6:cd:
b5:09:d5:aa:41:e0:d0:b2:cf:33:6d:b0:92:cd:a8:
36:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:02:B4:C1:66:74:B7:5C:B5:3A:05:48:12:CA:75:D7:28:EC:9F:5D
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:a0:96:a5:48:a3:98:ac:2a:f7:de:73:2f:7c:47:a6:0f:
00:0b:50:9b:7d:a4:2f:69:17:5a:ee:28:5d:76:34:0e:56:fc:
18:1d:57:a9:5d:42:13:5d:8e:b9:ae:c1:11:ba:f7:b8:20:98:
39:2c:7b:17:4e:dd:9f:70:45:ef:ec:a2:22:d5:ec:0c:e7:0d:
41:73:39:04:35:fe:63:21:ed:4e:1a:b1:64:12:15:22:15:a7:
8a:cb:e7:ec:6e:7b:6a:89:eb:6e:fb:ab:b7:77:11:60:78:f5:
d7:a1:e9:0a:61:23:53:34:44:75:de:f3:96:c2:83:57:42:a9:
42:0a:ee:61:82:86:64:3f:92:4f:1b:cb:20:e6:65:f8:88:b1:
b0:19:e7:07:e3:ac:c5:bd:86:0c:e9:35:dd:aa:b1:66:ba:8e:
a2:f4:17:07:3d:23:73:9c:c8:30:e2:8b:0b:08:f6:0c:9d:1f:
f6:ed:f2:ca:de:62:04:f5:e4:4a:e9:d5:01:9b:10:b4:d3:38:
ac:5e:6c:f3:43:96:35:c2:c1:9f:7f:07:2d:af:5f:67:c6:f1:
97:67:34:79:16:42:ce:1b:0f:79:c9:ea:99:4b:d0:20:35:52:
e1:7c:4c:8b:89:81:f4:ca:4a:97:2c:cf:e9:3b:66:85:a3:0d:
70:29:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:24:40 2026 by rpki-client