Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: dGOnKyL/KuMPXIFUOFsGL+Hd/NxcyQ/ofpP9ajma4Qk=
Subject key identifier: 12:1F:9F:4B:04:EB:48:94:24:65:9C:D3:A2:81:DE:23:1C:73:90:02
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 019D37C079806435942A24DBE7E06DBACBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 04B3
Signing time: Sun 29 Mar 2026 04:00:54 +0000
Manifest this update: Sun 29 Mar 2026 04:00:54 +0000
Manifest next update: Mon 30 Mar 2026 04:00:54 +0000
Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: +QyDFkURq30qaDZqVkLmJeBryrJsrUwWj4jvhz3LSsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:79:80:64:35:94:2a:24:db:e7:e0:6d:ba:cb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Mar 29 04:00:54 2026 GMT
Not After : Mar 30 04:00:54 2026 GMT
Subject: CN=121f9f4b04eb489424659cd3a281de231c739002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:05:90:12:a5:14:7f:11:54:2e:cd:7f:cb:
d1:d1:a5:9d:e3:a0:4e:58:89:14:44:74:27:d5:36:
2b:19:be:bd:62:92:72:c3:a3:e7:e4:39:c6:0d:9c:
e2:35:9c:61:31:63:94:5d:a0:7b:43:59:82:53:e5:
4d:0a:c6:70:c0:12:1a:cb:44:84:62:ae:9a:1a:23:
5f:2d:da:5c:ac:1c:cc:68:5b:c4:76:84:7f:56:a9:
c6:23:9d:c6:cc:72:4d:d9:1a:92:4c:55:17:e6:53:
e2:dd:ed:70:bd:de:27:61:e5:02:ef:1c:83:e2:9a:
ef:31:da:e5:a7:83:00:f6:a4:55:45:e3:36:44:95:
92:0a:14:a4:20:8c:8e:e7:81:dd:a8:f7:76:8e:e8:
b5:d3:2f:67:c9:ca:84:99:dd:0e:63:31:ed:88:8a:
bc:35:70:47:2f:75:a7:78:9c:1a:e1:54:47:f9:78:
0e:80:d1:a1:66:bb:52:c6:d1:53:d7:c4:00:c3:6c:
6f:f2:19:7b:bd:e7:d8:54:85:05:36:bd:94:58:bd:
1b:a5:60:95:83:8d:58:81:91:ca:dd:f6:6c:7e:32:
7f:b4:25:a2:68:11:a5:48:ae:29:9c:9b:d1:52:fc:
c8:8c:72:c9:57:99:bc:d4:13:c9:bb:3d:fb:79:bf:
ec:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:9F:4B:04:EB:48:94:24:65:9C:D3:A2:81:DE:23:1C:73:90:02
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:a0:60:36:3a:db:3e:63:de:1b:60:73:d1:21:bc:5e:38:
b5:57:d9:46:3f:8b:1b:6f:93:33:16:15:fc:ab:8c:80:92:fa:
7e:1b:1c:15:31:2b:db:8c:07:50:0e:6a:ce:4b:a2:d1:34:41:
86:37:cb:c5:e8:e8:a8:c9:46:71:5a:74:60:0a:f8:e3:2b:c2:
08:9d:58:04:b2:96:ea:c2:d8:b6:a5:95:90:c4:e4:9a:c7:6f:
d2:de:ec:3f:70:d6:1a:59:6a:41:1f:26:60:6b:fc:b5:83:4e:
bb:84:ac:85:4e:1e:94:8c:0d:ca:9c:dd:be:35:b0:e5:a1:74:
f2:ce:f6:04:1e:44:93:c3:6c:1b:8d:49:c5:5e:4e:75:4e:be:
1d:df:d9:c3:43:b0:46:51:02:cb:ca:36:c8:91:bd:7f:47:c0:
c6:ce:32:7a:9b:7c:3b:57:a8:70:bb:32:b2:85:d4:1e:6e:de:
9f:b7:80:d1:38:d2:b1:f7:2c:cb:3a:c7:85:6d:bd:f9:94:4e:
df:0f:c5:b2:4f:36:f5:45:94:3e:14:4e:21:7f:f8:aa:94:9f:
ff:5e:0d:2c:79:4e:a7:ff:d1:58:8e:44:18:49:c1:55:ff:be:
ed:db:1b:12:fe:d9:83:d1:e5:a2:82:01:a8:a1:84:32:52:a4:
8f:b8:9c:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wHmAZDWUKiTb5+Btusu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDA1MTk4Yjc0NTcyYTE1NmFiNjNmMjMwODU4OTdiZDNj
Y2Q0MWIwHhcNMjYwMzI5MDQwMDU0WhcNMjYwMzMwMDQwMDU0WjAzMTEwLwYDVQQD
EygxMjFmOWY0YjA0ZWI0ODk0MjQ2NTljZDNhMjgxZGUyMzFjNzM5MDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuMFkBKlFH8RVC7Nf8vR0aWd46BO
WIkURHQn1TYrGb69YpJyw6Pn5DnGDZziNZxhMWOUXaB7Q1mCU+VNCsZwwBIay0SE
Yq6aGiNfLdpcrBzMaFvEdoR/VqnGI53GzHJN2RqSTFUX5lPi3e1wvd4nYeUC7xyD
4prvMdrlp4MA9qRVReM2RJWSChSkIIyO54HdqPd2jui10y9nycqEmd0OYzHtiIq8
NXBHL3WneJwa4VRH+XgOgNGhZrtSxtFT18QAw2xv8hl7vefYVIUFNr2UWL0bpWCV
g41YgZHK3fZsfjJ/tCWiaBGlSK4pnJvRUvzIjHLJV5m81BPJuz37eb/s2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIfn0sE60iUJGWc06KB3iMcc5ACMB8GA1UdIwQY
MBaAFG0AUZi3RXKhVqtj8jCFiXvTzNQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEt
Mjg0ZTUxMjNlMjlmLzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEtMjg0ZTUxMjNlMjlm
LzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbk+gYDY6
2z5j3htgc9EhvF44tVfZRj+LG2+TMxYV/KuMgJL6fhscFTEr24wHUA5qzkui0TRB
hjfLxejoqMlGcVp0YAr44yvCCJ1YBLKW6sLYtqWVkMTkmsdv0t7sP3DWGllqQR8m
YGv8tYNOu4SshU4elIwNypzdvjWw5aF08s72BB5Ek8NsG41JxV5OdU6+Hd/Zw0Ow
RlECy8o2yJG9f0fAxs4yept8O1eocLsysoXUHm7en7eA0TjSsfcsyzrHhW29+ZRO
3w/Fsk829UWUPhROIX/4qpSf/14NLHlOp//RWI5EGEnBVf++7dsbEv7Zg9HlooIB
qKGEMlKkj7icCQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:00 2026 by rpki-client