Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
File: BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft (raw, json)
Hash identifier: u37ve7IFc1OvBnGIeFdkmOPL7p9S4h6aNDZD+i8ARe4=
Subject key identifier: E7:40:86:8D:C8:B5:43:9A:40:8E:8F:AB:23:E6:90:0F:16:3D:45:4A
Authority key identifier: 05:0A:FC:9A:98:D7:C1:79:71:69:D7:53:E6:FA:F4:22:19:90:42:84
Certificate issuer: /CN=050afc9a98d7c1797169d753e6faf42219904284
Certificate serial: 019F8FEC6E01317A2A4FF159F37FD7FA4BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
Manifest number: 0200
Signing time: Thu 23 Jul 2026 17:01:04 +0000
Manifest this update: Thu 23 Jul 2026 17:01:04 +0000
Manifest next update: Fri 24 Jul 2026 17:01:04 +0000
Files and hashes: 1: BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl (hash: eH2IbJmob0Ta8LmiZQrpBKMlKfaspaXRBhIuzLVuZ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:6e:01:31:7a:2a:4f:f1:59:f3:7f:d7:fa:4b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050afc9a98d7c1797169d753e6faf42219904284
Validity
Not Before: Jul 23 17:01:04 2026 GMT
Not After : Jul 24 17:01:04 2026 GMT
Subject: CN=e740868dc8b5439a408e8fab23e6900f163d454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:50:3d:d2:e1:30:ba:9d:ae:f9:98:9d:1d:
77:11:fb:70:6b:77:ce:35:d7:25:51:38:2d:e1:c0:
c7:aa:5b:53:31:84:01:17:6d:d7:a5:ad:e0:d5:4b:
04:99:2b:b7:be:2e:2d:8a:c3:ac:52:d5:db:e7:34:
ee:2a:a5:cf:6b:a8:10:45:52:6a:30:0d:fe:37:01:
0e:47:c4:c7:03:aa:4a:26:b8:16:22:44:57:36:3a:
10:4d:af:af:9c:b2:f7:a4:e7:1c:2f:9a:2b:fb:79:
1d:7a:f0:ec:ab:d1:05:a6:70:91:8e:5f:5d:17:b7:
97:4a:d1:a7:5c:10:8f:ad:0b:70:87:77:22:72:94:
d8:04:03:02:18:3a:1c:4b:b3:e0:d3:a5:2c:56:ee:
7c:0a:f2:1a:10:d3:d0:e5:bd:69:98:57:55:2d:81:
f1:a4:9c:92:77:b8:1c:c2:03:5e:4a:50:6b:d6:72:
e3:35:19:c8:22:2e:c1:49:62:86:c2:5e:99:2a:70:
6a:db:e8:0b:a7:5a:c8:78:c2:c1:9e:f3:6e:dd:5e:
4f:6b:02:dd:34:4d:0f:01:cf:3b:65:08:d7:37:53:
f4:5f:e7:8c:82:57:80:e9:d2:9d:4f:04:7d:a5:cf:
35:1b:4f:d4:8b:c3:ff:e4:48:f8:6c:d5:33:aa:ae:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:40:86:8D:C8:B5:43:9A:40:8E:8F:AB:23:E6:90:0F:16:3D:45:4A
X509v3 Authority Key Identifier:
keyid:05:0A:FC:9A:98:D7:C1:79:71:69:D7:53:E6:FA:F4:22:19:90:42:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:98:95:d4:55:ff:a1:4a:87:c3:c4:3d:62:9c:93:4f:1a:fb:
b8:00:79:5e:9e:9c:58:ad:d4:f1:6f:79:1f:75:c7:01:f6:de:
4e:e5:83:f0:49:3b:7f:ab:0a:de:99:60:4e:1d:a4:6a:48:22:
31:6d:96:93:48:97:4b:34:f8:8d:a5:17:26:9a:29:5d:21:df:
3b:1f:5a:0a:0a:1a:44:c3:e8:14:18:27:43:c4:d2:57:e0:e3:
07:c2:6a:db:ec:bd:41:eb:b3:a9:05:e9:a3:79:17:e1:b7:cf:
8f:60:2d:66:6c:17:c2:60:a2:d2:7f:cd:8d:d1:27:5c:10:36:
15:5d:5f:14:03:dd:2f:68:31:ef:44:70:12:d4:2e:06:4b:62:
2f:7c:23:5e:3b:d1:2f:09:00:77:84:ff:49:1a:4e:38:f6:93:
34:f0:4a:32:9c:19:68:58:3e:78:c0:22:4e:1a:37:18:3f:71:
c8:f9:e2:cc:d2:10:20:34:1f:a1:3e:b6:86:8f:62:7a:9b:08:
d9:bd:fc:04:17:58:eb:71:f7:30:d8:9f:a0:70:43:05:64:25:
cf:a6:84:31:23:c6:32:7d:92:5f:8f:79:50:2b:20:3c:65:9c:
f9:7b:35:54:c9:ed:76:a9:36:ad:c0:2d:8c:84:78:f5:f6:98:
41:fa:49:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:25 2026 by rpki-client