Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json)
Hash identifier: 50uIfHLTsHZ97iCtYByxCDq56aIzVpPAYu8/f3r0T0Y=
Subject key identifier: E5:EB:86:38:BC:8B:47:30:EA:94:F7:1A:4E:72:4F:57:92:7E:7D:F9
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 01A0B3F6699D9766BB34D70B7EA330DC8D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
Manifest number: 0D81
Signing time: Fri 18 Sep 2026 10:01:05 +0000
Manifest this update: Fri 18 Sep 2026 10:01:05 +0000
Manifest next update: Sat 19 Sep 2026 10:01:05 +0000
Files and hashes: 1: RxkQzIFpbR8h5Y7GlER0QvlZ_xo.roa (hash: QyQ3uZNSoqX601+GHgavM056pTz7tYKjCe54YFu8AJg=)
2: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: msvpOoyPxXNNIiyramai+CmfHPTN+hD9+WWgc5o1H7M=)
3: wWjDyLdGjiwzrevYapeX3h8xqMk.roa (hash: 0pYJcne1SC7egmiI51CMk3J9I9z03oaLbg318uqx+S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:f6:69:9d:97:66:bb:34:d7:0b:7e:a3:30:dc:8d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Sep 18 10:01:05 2026 GMT
Not After : Sep 19 10:01:05 2026 GMT
Subject: CN=e5eb8638bc8b4730ea94f71a4e724f57927e7df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:98:76:39:47:cb:2c:b0:ad:c3:7d:c2:64:
1b:86:3d:ce:5f:59:7e:17:7c:f8:79:89:46:ce:c1:
5d:66:49:32:f5:8e:d6:b3:2d:6d:86:41:10:b7:73:
94:5d:38:7d:04:af:cf:b3:8a:0b:ab:fa:30:c3:af:
fc:f4:dc:94:9f:16:82:5d:f2:94:7d:7f:06:b8:cc:
4d:9d:35:70:bb:98:7b:a8:11:e4:13:82:d2:00:2c:
93:13:b0:e5:c6:53:9f:72:01:3d:05:8a:d7:75:98:
a0:2e:de:4a:d6:e1:54:b0:9e:34:0c:15:18:09:40:
96:74:87:52:8b:6a:6d:e1:09:51:ee:19:49:c8:32:
4e:4a:e8:95:fa:dc:90:73:c5:56:b6:75:8e:a0:e8:
29:c2:82:d4:e3:dd:2f:57:ec:ad:39:b3:07:18:7c:
97:ef:90:80:d1:0e:68:46:74:d7:e7:15:ed:88:60:
bd:42:90:8c:4e:53:f2:0a:ff:03:98:2d:4b:e3:bd:
f6:69:ce:e3:5f:d4:95:15:40:f1:9d:b0:49:15:78:
14:52:2f:e2:5a:5f:67:af:2b:79:08:7b:a4:c4:ca:
ba:88:89:aa:90:f4:23:d8:2c:8d:35:5f:45:5e:48:
a8:eb:dc:28:c7:83:31:f0:58:e6:39:aa:68:3a:ce:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EB:86:38:BC:8B:47:30:EA:94:F7:1A:4E:72:4F:57:92:7E:7D:F9
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:81:af:fd:2b:6e:66:bb:51:e3:5b:b2:8f:c6:e6:06:18:1d:
b5:d2:81:3d:0b:b2:dc:5e:41:93:a0:89:34:28:b2:0d:50:8c:
62:8a:cc:c4:7d:87:c3:c3:f1:86:9b:e8:56:ac:7d:23:d9:0d:
35:12:6c:68:56:67:23:aa:1c:b5:50:c0:ab:2c:c1:b0:7e:a8:
f8:26:e3:4e:7c:5e:5b:2f:a0:f4:3d:b3:c0:7f:0d:12:f4:e1:
7d:76:e4:02:df:b1:9b:f1:a1:a6:a2:50:4a:77:db:a7:d6:e6:
a7:89:8b:ef:39:fb:59:20:d7:45:52:f7:c9:1a:9c:bf:f3:a3:
7b:1c:3a:1f:d2:2b:17:19:5a:bd:83:e9:73:f7:1f:aa:19:d7:
f4:60:f4:4d:b9:d4:e1:df:3e:1a:ea:2c:83:79:fb:81:d8:f1:
c5:22:8f:ba:dc:45:ab:1b:d4:df:fc:d8:c9:be:88:14:fc:58:
8d:e4:5f:0b:94:55:aa:f0:e7:89:2b:1d:8e:17:44:93:25:bd:
09:00:33:c8:69:66:2c:bc:cf:cd:03:d7:4b:86:3e:f6:6a:b3:
2d:a9:9f:21:ea:1d:46:ec:89:06:3b:50:3c:df:20:f4:a6:9f:
67:4c:a7:7a:26:f1:65:a7:3e:1a:11:17:b3:88:a7:2a:c0:d2:
7a:43:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:05:26 2026 by rpki-client