Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: XqGAxJu5Q0ayn2r2MAH1hhm7ikCW2EQljvV6CdOxedY=
Subject key identifier: A9:1B:D3:8F:1E:9F:1D:B3:C4:5A:C6:12:C2:6B:43:4F:DE:14:F2:43
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 019D07B005ED89D10C08BEB0A1BA8A450ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: 04D1
Signing time: Thu 19 Mar 2026 20:01:09 +0000
Manifest this update: Thu 19 Mar 2026 20:01:09 +0000
Manifest next update: Fri 20 Mar 2026 20:01:09 +0000
Files and hashes: 1: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: bqDI+/jnxiYh+hNpihQfOySAcnem00ECpCA1i9Gry7M=)
2: zLQM5UGUZQZaDaXLLIq2Cs9lTG4.roa (hash: lEMGpphC2f316K3X8TeGMMDyruycSyCxjomy+Oc5l4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:b0:05:ed:89:d1:0c:08:be:b0:a1:ba:8a:45:0a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Mar 19 20:01:09 2026 GMT
Not After : Mar 20 20:01:09 2026 GMT
Subject: CN=a91bd38f1e9f1db3c45ac612c26b434fde14f243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:ea:a2:a5:41:5a:03:7a:0f:af:71:bf:1c:
1d:59:97:db:92:34:0b:37:ab:aa:db:6b:cf:47:0c:
95:16:3d:4a:e0:31:29:20:a9:fc:d1:6c:c4:55:e4:
66:0f:d2:b7:9c:0e:b8:40:5c:cb:a0:73:dc:cb:de:
ab:32:30:9c:26:df:47:66:59:0b:b9:af:c0:3b:0c:
ba:9c:fa:c0:ac:56:f8:0c:47:5b:89:dd:1c:66:f6:
92:20:69:4d:3f:0c:70:94:58:99:6e:2e:a1:b1:6f:
d1:d9:fa:74:f4:14:48:bd:98:c2:b6:21:2d:70:86:
31:d7:2c:7f:4d:26:d5:db:53:77:36:a6:a4:8c:3a:
f4:27:e2:c6:0c:c1:1f:d0:6f:6e:11:bb:55:b8:34:
52:de:1a:72:91:10:df:a6:a8:5a:b3:3f:17:d1:33:
51:17:17:6b:1e:bc:c2:d4:4d:59:4d:cd:10:61:67:
d6:ce:03:44:57:53:07:7a:93:23:9e:e4:d3:62:f2:
e3:15:8c:e0:09:24:be:56:d2:3d:bb:35:e3:bc:69:
9c:a8:a1:16:ed:c3:6a:eb:1d:d9:07:be:fb:dc:47:
fb:a5:2d:4f:8b:f8:77:aa:39:86:ea:92:e1:e6:22:
b6:8d:7c:91:4c:cf:e8:d6:26:18:c8:d3:06:06:19:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:D3:8F:1E:9F:1D:B3:C4:5A:C6:12:C2:6B:43:4F:DE:14:F2:43
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:30:da:33:5a:ba:01:8a:2b:c2:1a:c1:a6:40:e3:3e:3d:88:
ae:51:a8:e5:cc:8f:63:17:39:cb:6a:ed:5c:54:81:7a:6a:f1:
a0:e0:16:8f:cf:06:15:62:92:37:1d:f6:84:80:d2:e2:7d:f0:
3c:82:c7:fc:c1:b0:c7:76:29:fc:86:f5:6a:23:27:d4:c6:30:
cb:82:fa:8a:ae:90:52:48:55:ac:7f:b6:cb:13:26:68:13:bd:
10:48:7e:f6:a7:9a:49:d5:ab:f9:b7:ce:f5:30:b7:6b:77:db:
32:06:24:60:f0:88:b6:fe:6d:6e:64:d6:90:55:81:d5:bd:c6:
de:27:d1:53:f8:b4:5a:a8:72:84:8b:70:03:f9:f3:5b:47:c2:
79:90:61:37:c5:aa:b6:64:98:23:32:e6:69:94:36:ba:4a:13:
52:9d:c7:c8:b1:5d:b8:f0:68:7f:ce:6d:c9:37:5e:bf:9f:fc:
7e:13:09:ed:67:b2:75:40:8c:e1:1e:ad:50:d0:f8:85:5b:db:
28:2c:7b:bc:d5:c0:ed:cc:cc:9e:f9:02:75:23:77:73:5b:21:
7e:7d:09:05:d0:95:a8:78:54:80:e8:8e:8d:67:d1:50:84:d2:
ab:dc:41:4e:24:8a:86:cb:9e:a4:59:a4:58:85:bb:4c:88:dc:
e5:54:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:33:55 2026 by rpki-client