Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier: 8Fy3CVjOvc0RNhaiWYCF1Wzi5OCvKhEK9A1IPbBmOo8=
Subject key identifier: 97:C4:28:C3:E5:69:80:85:95:05:3C:BF:AF:47:39:53:73:D3:A2:A1
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 019D265F84D2BD0A3A8955E4096BD48B40CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number: 16E5
Signing time: Wed 25 Mar 2026 19:01:27 +0000
Manifest this update: Wed 25 Mar 2026 19:01:27 +0000
Manifest next update: Thu 26 Mar 2026 19:01:27 +0000
Files and hashes: 1: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: BEa724Sk8KcObkfBpHM0IK/xsjOv5bmzmMOWa/CK4zQ=)
2: pFus08PMDQCfPbxZAkSpS82Y4PY.roa (hash: lAjRzwyi3k9OQRK/TA2meKEJxn+Uz1ODnyqv3gesdQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:84:d2:bd:0a:3a:89:55:e4:09:6b:d4:8b:40:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Mar 25 19:01:27 2026 GMT
Not After : Mar 26 19:01:27 2026 GMT
Subject: CN=97c428c3e569808595053cbfaf47395373d3a2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:22:ce:6e:25:04:b3:ef:2c:52:53:b5:07:
a8:73:3b:6e:d0:1f:cd:7c:5a:99:70:3b:ef:d1:d2:
38:f6:7e:ee:aa:16:a5:64:02:9f:2d:fe:8a:00:d8:
b3:48:fc:d2:f3:94:6b:53:56:cf:80:15:ea:17:75:
77:96:24:74:ad:59:4c:91:72:42:26:7e:6e:55:89:
77:b3:5a:87:48:67:89:7b:27:7c:14:2e:d2:96:46:
44:16:95:cd:4d:6c:7a:66:bd:11:6d:71:d7:84:ba:
6f:69:c8:b5:cb:ee:76:ec:b1:2e:ba:4e:28:c1:04:
d7:c7:76:8a:77:d6:c9:13:f6:f5:84:3f:ed:f5:87:
74:b1:14:a9:43:f1:fc:22:88:0c:38:22:a9:92:00:
45:3d:34:82:6b:da:84:89:f8:46:cd:b7:59:f0:66:
c4:ed:a0:d1:23:2e:72:8f:5c:74:19:0b:20:9b:46:
3e:82:86:00:3b:ad:18:96:65:f1:70:d6:f9:20:42:
60:6a:be:93:ad:43:a8:76:76:3a:ce:8f:87:ce:8a:
18:45:ef:dd:c5:82:50:37:aa:2a:2d:ed:7a:c9:ad:
06:5b:c7:2a:7b:d7:05:2d:3b:47:c7:0e:a6:69:27:
b9:0e:7f:22:e9:9b:7c:ce:e9:70:da:60:27:0d:66:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:28:C3:E5:69:80:85:95:05:3C:BF:AF:47:39:53:73:D3:A2:A1
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:57:91:5d:db:44:c7:c8:a1:bf:9e:a2:cd:9f:f4:9e:33:9c:
9c:b8:83:7b:e1:41:30:d4:a5:c2:5e:d9:dd:88:b0:4b:e5:2e:
82:80:24:20:cb:fc:e4:c1:75:35:53:4c:42:72:2a:41:ac:49:
5c:c6:06:0a:40:dd:0e:8b:9c:cf:08:61:ac:95:22:fa:66:9f:
48:f9:b8:c2:30:51:18:1e:29:9f:2a:d8:a1:fa:80:7c:e7:a1:
dd:d2:e4:24:6a:43:a4:82:b0:42:3c:57:e6:72:9f:a3:07:d0:
e0:f0:03:49:1d:5a:5e:6c:7d:b8:3e:ef:e9:1e:11:13:97:8b:
6a:45:cd:4c:4d:0b:d3:48:46:5b:ef:0e:e8:1c:76:e0:5f:bc:
9c:8e:aa:4c:2c:19:1e:46:cd:c3:8d:17:43:07:07:af:2a:81:
7d:e8:b1:9c:4a:94:4e:48:8c:99:d9:2a:58:15:35:45:7c:07:
a2:5c:fd:44:98:1b:a6:37:2c:d0:8b:87:d9:3f:d2:da:e1:44:
82:2d:55:fe:f7:75:69:98:ab:2f:cd:3d:78:ad:32:e1:36:27:
55:5f:f7:38:fe:43:e3:eb:d1:c0:38:f7:89:9e:1d:f2:8c:bc:
c6:1f:a0:1d:9e:3c:3b:69:cb:b6:37:d5:15:97:b8:b3:06:3e:
10:0b:a4:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX4TSvQo6iVXkCWvUi0DNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMGM4MDMxODE3N2JjMTZiNzIzODNmOGUwOTJkNTJhM2Fl
MTMzYjQwHhcNMjYwMzI1MTkwMTI3WhcNMjYwMzI2MTkwMTI3WjAzMTEwLwYDVQQD
Eyg5N2M0MjhjM2U1Njk4MDg1OTUwNTNjYmZhZjQ3Mzk1MzczZDNhMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEcizm4lBLPvLFJTtQeocztu0B/N
fFqZcDvv0dI49n7uqhalZAKfLf6KANizSPzS85RrU1bPgBXqF3V3liR0rVlMkXJC
Jn5uVYl3s1qHSGeJeyd8FC7SlkZEFpXNTWx6Zr0RbXHXhLpvaci1y+527LEuuk4o
wQTXx3aKd9bJE/b1hD/t9Yd0sRSpQ/H8IogMOCKpkgBFPTSCa9qEifhGzbdZ8GbE
7aDRIy5yj1x0GQsgm0Y+goYAO60YlmXxcNb5IEJgar6TrUOodnY6zo+HzooYRe/d
xYJQN6oqLe16ya0GW8cqe9cFLTtHxw6maSe5Dn8i6Zt8zulw2mAnDWZtawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfEKMPlaYCFlQU8v69HOVNz06KhMB8GA1UdIwQY
MBaAFG0MgDGBd7wWtyOD+OCS1So64TO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmIt
Nzk0MjQwNDAxNmYzLzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zMWJkMDctOWExZi00MzQ1LWE2NmItNzk0MjQwNDAxNmYz
LzEvYlF5QU1ZRjN2QmEzSTRQNDRKTFZLanJoTTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEleRXdtE
x8ihv56izZ/0njOcnLiDe+FBMNSlwl7Z3YiwS+UugoAkIMv85MF1NVNMQnIqQaxJ
XMYGCkDdDouczwhhrJUi+mafSPm4wjBRGB4pnyrYofqAfOeh3dLkJGpDpIKwQjxX
5nKfowfQ4PADSR1aXmx9uD7v6R4RE5eLakXNTE0L00hGW+8O6Bx24F+8nI6qTCwZ
HkbNw40XQwcHryqBfeixnEqUTkiMmdkqWBU1RXwHolz9RJgbpjcs0IuH2T/S2uFE
gi1V/vd1aZirL809eK0y4TYnVV/3OP5D4+vRwDj3iZ4d8oy8xh+gHZ48O2nLtjfV
FZe4swY+EAukZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:44 2026 by rpki-client