
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: E0pJNEUE4AWYuSwQGrdxc985B2CdcI8Qvyt3Tt12woQ=
Subject key identifier: 3C:83:B7:C2:79:B6:A5:7B:12:B6:6C:8F:0A:FF:F4:EC:9A:0A:F9:DF
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 019F71E1794040158239D9FD1A84CE1225CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 05DB
Signing time: Fri 17 Jul 2026 21:00:29 +0000
Manifest this update: Fri 17 Jul 2026 21:00:29 +0000
Manifest next update: Sat 18 Jul 2026 21:00:29 +0000
Files and hashes: 1: 5v9iEqqw9h8Wg3xh2Nok2-eNQQM.roa (hash: 3N4L/xDAzZWmVmC1vE/Ib8W3ZzU4rXZkkHgA9mF0qSI=)
2: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: 03HEjN0JdrUt5J7ekYOzPcpKU3vj0HGN4179bQUiJwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:e1:79:40:40:15:82:39:d9:fd:1a:84:ce:12:25:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Jul 17 21:00:29 2026 GMT
Not After : Jul 18 21:00:29 2026 GMT
Subject: CN=3c83b7c279b6a57b12b66c8f0afff4ec9a0af9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:38:97:d8:bd:79:65:fb:f9:70:0a:22:09:58:
17:96:0b:c9:31:3c:48:ef:66:64:b4:bd:31:9b:d4:
07:a5:f2:e8:85:7a:f5:c4:9b:2e:11:0e:13:1d:a7:
5e:d7:d6:0e:48:38:94:74:a0:33:45:46:74:e5:24:
1e:68:9d:1a:eb:9e:f8:0d:ef:94:2b:28:15:95:ae:
ba:7b:7f:0a:e0:00:db:87:14:65:5d:c4:85:b2:6d:
53:54:62:be:46:5f:93:03:22:95:21:31:64:cf:c1:
45:c7:d6:fb:77:5c:63:4e:06:b0:18:e3:05:3c:ca:
d7:7f:68:50:2e:c6:ab:98:02:a6:d8:28:b2:04:d2:
95:43:01:55:79:87:d0:93:d0:e5:5d:cd:4f:d9:1c:
23:33:48:35:60:d9:72:35:57:db:c2:84:fb:48:89:
26:ba:5a:31:b3:70:c2:bf:8a:56:67:1b:3c:c8:78:
e3:fd:ed:d0:fe:1f:ec:91:e1:72:b9:40:0f:2c:36:
6e:95:96:f0:3a:7d:fc:7a:2c:f9:38:ce:d5:0e:80:
40:38:b4:f4:1b:fd:78:41:0b:9a:8a:cc:76:19:73:
78:a4:c6:e6:5d:06:8a:3b:88:2b:b3:46:94:d3:c4:
d5:ee:12:29:a1:73:03:9a:07:25:45:b5:f4:d1:44:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:83:B7:C2:79:B6:A5:7B:12:B6:6C:8F:0A:FF:F4:EC:9A:0A:F9:DF
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8a:8d:86:01:f9:59:ab:72:f8:70:ad:0f:f5:90:89:4e:57:
ea:4e:6b:1c:cf:9d:72:82:76:8b:21:4a:40:a8:4c:6e:c9:96:
2a:f5:6b:e4:37:34:93:38:3f:7c:11:c0:f1:d7:dc:82:83:4e:
c4:90:04:bc:bd:49:36:ee:39:d2:49:33:81:a3:33:4f:54:f3:
09:29:0d:b6:6f:30:88:10:c6:89:91:50:20:85:8b:cc:8a:32:
eb:54:47:d5:c9:30:65:1e:79:99:25:5a:2a:2c:94:96:d0:53:
27:9b:6b:b4:85:69:40:d5:86:9f:64:2a:88:b6:43:a0:ba:b8:
07:32:ba:61:9f:66:a2:1c:00:94:e2:55:03:cd:72:01:de:e4:
31:bd:1b:35:0d:61:d5:cf:6a:2b:b2:89:1e:1a:75:2e:bf:47:
4c:85:81:8d:82:4b:d7:f6:58:f6:c5:82:67:af:6f:0d:2b:40:
cb:17:0b:1a:89:dd:80:27:6d:ad:75:1d:76:1f:43:35:2d:37:
48:07:9a:48:cd:30:52:3f:ee:d9:98:a9:91:7c:c9:6a:d2:de:
50:58:12:e1:fd:9b:09:fd:fe:9f:62:32:0b:ae:57:12:d6:1a:
9e:8d:05:e6:59:cf:e5:9e:14:56:ed:c1:79:0d:b9:2a:e5:5a:
f2:8b:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:03:39 2026 by rpki-client