Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
File: BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft (raw, json)
Hash identifier: w91NnIUwNwKj8qxLkmzO2z4MjYtOcvNZwmO6pGR5+ww=
Subject key identifier: D8:56:EE:6F:8E:C2:F8:D4:28:62:0E:24:76:87:FC:88:82:DE:BD:58
Authority key identifier: 05:0A:FC:9A:98:D7:C1:79:71:69:D7:53:E6:FA:F4:22:19:90:42:84
Certificate issuer: /CN=050afc9a98d7c1797169d753e6faf42219904284
Certificate serial: 019D27DFF08D9F5B6165C507A7A04952E739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
Manifest number: C1
Signing time: Thu 26 Mar 2026 02:01:20 +0000
Manifest this update: Thu 26 Mar 2026 02:01:20 +0000
Manifest next update: Fri 27 Mar 2026 02:01:20 +0000
Files and hashes: 1: BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl (hash: f5FbYCDf3eWZZo1BF7mUTq+Fr4gMTFMukLUXtSCLvWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f0:8d:9f:5b:61:65:c5:07:a7:a0:49:52:e7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050afc9a98d7c1797169d753e6faf42219904284
Validity
Not Before: Mar 26 02:01:20 2026 GMT
Not After : Mar 27 02:01:20 2026 GMT
Subject: CN=d856ee6f8ec2f8d428620e247687fc8882debd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:3d:87:24:1a:54:cb:05:c9:ea:1d:ba:0c:
51:15:7f:6a:41:54:fb:cc:bb:41:d2:5f:d4:47:9d:
85:ef:4a:24:d4:ca:e0:24:e8:69:ee:4f:8b:76:7c:
29:d3:6a:31:aa:ae:db:9b:62:cd:56:b7:5d:66:eb:
3a:b4:5f:92:c6:47:f3:ce:21:27:49:2e:46:05:4b:
8c:8c:11:22:4d:2c:42:b7:69:8a:34:65:6b:8e:d2:
18:44:ee:ec:2c:8c:04:33:55:c1:ea:c3:06:6e:8e:
25:48:70:16:1d:01:38:90:e1:21:55:4a:3c:12:51:
1f:82:4d:8b:69:64:34:6a:e6:91:c0:8f:51:fa:8b:
76:1e:ac:14:17:74:04:a8:dc:0b:aa:48:71:2e:20:
03:4f:4a:41:df:a7:8a:0e:47:40:d9:84:66:08:b5:
de:aa:9d:34:9a:66:fc:84:f5:af:0b:bf:fe:0d:75:
07:33:a1:28:5e:54:aa:18:01:6a:55:3f:03:c4:76:
06:f0:62:ba:f0:72:01:fc:1f:83:65:bd:e3:83:04:
9a:36:75:c9:cb:5d:51:64:f1:17:1a:e0:9e:66:3a:
f6:ca:14:c5:c6:cc:f2:58:8a:56:9a:71:c5:54:66:
22:33:55:93:30:e2:2c:b5:70:9e:b7:eb:02:6c:c0:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:EE:6F:8E:C2:F8:D4:28:62:0E:24:76:87:FC:88:82:DE:BD:58
X509v3 Authority Key Identifier:
keyid:05:0A:FC:9A:98:D7:C1:79:71:69:D7:53:E6:FA:F4:22:19:90:42:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1b:ab:d6:18:3a:b8:79:63:b1:20:b9:6c:9a:2e:18:46:40:
a7:ef:43:f0:2e:b8:82:dc:3d:40:9a:f9:2c:6c:c9:ea:bb:a1:
cf:15:87:37:b9:fe:17:50:47:24:4d:41:dd:63:2f:49:11:8f:
0f:29:b2:1f:ea:f2:22:fe:bb:df:89:48:24:02:21:5f:e6:96:
72:d2:fb:3a:92:b5:6e:61:78:74:19:55:16:99:25:73:bb:b7:
ec:66:87:d9:a2:ce:19:9b:86:48:ce:c4:04:92:58:a0:d2:e8:
f8:54:2c:8f:d5:e4:fa:79:8e:89:a2:77:b3:9c:6e:74:22:15:
1c:0d:88:8f:ba:58:a5:84:fe:cc:e5:78:4c:77:6e:34:84:48:
03:a5:b6:64:ca:82:46:e5:29:1a:10:bc:9b:6c:17:dc:f0:68:
1a:5a:9e:53:b3:0c:16:b2:9a:37:ae:2b:1b:17:14:58:7c:80:
1e:f9:b4:b7:c2:e7:68:f2:e9:c8:b6:76:b5:07:a4:32:81:34:
2e:34:27:8d:90:22:0e:39:b9:6e:79:f5:2e:b5:da:26:ed:cd:
1c:4b:8a:8a:71:24:14:2f:c4:fb:2c:5e:67:82:4a:57:24:bd:
46:b1:42:05:7c:60:aa:07:64:bb:62:f5:79:14:18:2e:5e:38:
85:89:dd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:51 2026 by rpki-client