Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: nnFxkRElJe06fslo7xepkFax7gYfl/8X5pYzKlmDq+o=
Subject key identifier: B9:DF:3F:95:97:C9:8E:13:74:51:2C:2A:4B:17:11:D8:F3:03:60:84
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 019D3A1CE24CBCBA86D30BDE508532430374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 1769
Signing time: Sun 29 Mar 2026 15:01:04 +0000
Manifest this update: Sun 29 Mar 2026 15:01:04 +0000
Manifest next update: Mon 30 Mar 2026 15:01:04 +0000
Files and hashes: 1: YyGPobwhIHB6BpaWiHqwNWGrgVQ.roa (hash: 5zuMdHhiIbs7RssXaE/NxcNIb7ZtP/iMz7WzclxfqOE=)
2: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: SodO426JsbaJeanaiiSV+Ug7VuY63hXA60Ta/QOcLa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:e2:4c:bc:ba:86:d3:0b:de:50:85:32:43:03:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Mar 29 15:01:04 2026 GMT
Not After : Mar 30 15:01:04 2026 GMT
Subject: CN=b9df3f9597c98e1374512c2a4b1711d8f3036084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:89:84:61:93:7f:2b:40:eb:20:7d:c3:8d:
87:13:0a:72:65:b1:c5:a2:de:d4:c5:38:14:6e:d6:
5b:9f:27:25:c1:c6:d1:72:e0:2c:77:ae:db:80:92:
95:02:a1:a4:b0:95:5a:73:50:3b:7f:8f:f0:16:ee:
34:0f:17:46:58:bf:e6:29:55:b8:62:9d:46:2c:57:
2c:02:ea:ec:91:12:05:12:b4:17:46:91:db:e3:6b:
d5:98:c4:8d:2e:06:dd:63:ab:7a:19:ac:1b:33:40:
d0:cc:cf:55:c4:a4:e8:47:cd:3a:a4:e4:3e:72:ec:
aa:df:cb:63:f4:cb:e3:4b:ae:57:4f:c9:8c:9b:01:
be:48:2a:8c:e7:7c:62:99:0f:5c:fc:4d:71:6c:6a:
6d:72:c0:3c:c2:18:f0:13:68:cd:d9:5b:df:0a:0b:
83:83:bb:89:ed:85:87:8f:67:22:46:de:6b:2c:98:
b9:63:64:8d:6d:b1:1f:52:69:05:30:ef:99:d2:d2:
7b:fc:a7:63:8a:55:43:07:b1:44:b3:02:d4:c3:b0:
9f:0c:18:88:55:7b:49:a2:ad:a2:db:5f:a1:02:bd:
a9:95:4b:08:2e:8d:1b:25:61:77:70:c3:e8:a6:bb:
bb:8d:40:9a:60:dc:d6:bd:1a:16:55:08:c1:b6:5f:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:3F:95:97:C9:8E:13:74:51:2C:2A:4B:17:11:D8:F3:03:60:84
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:64:f7:21:2d:11:f8:28:29:bf:0e:58:5a:83:48:61:7b:63:
c7:38:40:36:26:99:3e:d9:71:7c:dc:1f:78:92:03:66:d5:90:
5a:16:b7:97:c4:b3:9f:bf:a0:54:de:c5:e5:62:79:ac:d4:6c:
5c:49:b5:d0:ac:65:28:33:99:34:35:18:4b:0f:73:dd:04:f1:
26:fd:cf:17:32:9a:70:92:11:80:6c:11:41:e1:d2:27:fc:d9:
29:51:63:0b:26:c2:f7:db:be:c8:7c:84:cc:ac:6d:25:7a:64:
64:9a:d4:d7:74:96:e2:d5:f5:bd:b3:f9:9e:0f:cf:79:74:52:
8a:c8:c6:fc:36:b0:83:81:7f:5a:3b:db:a2:c8:63:23:1b:0c:
ae:5c:66:eb:97:19:e6:02:69:2e:29:51:b6:8f:e1:48:f4:da:
03:a5:e7:01:a5:55:94:db:57:47:af:e9:f6:3b:23:41:78:17:
6d:97:64:f7:e6:94:55:7b:01:f4:6e:5a:9b:94:91:16:c7:6c:
f9:74:e6:8a:83:9d:4b:f7:f5:d5:f6:95:36:d3:8a:6c:c0:4f:
78:e9:c3:c4:ec:d6:96:ff:1c:bf:f7:2a:f1:bc:56:42:6c:a9:
22:e9:bb:f9:39:65:03:af:b8:ae:7b:1e:f1:73:10:46:c1:74:
9e:62:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:52 2026 by rpki-client