Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json)
Hash identifier: /z13vfLWkPQGlboVJnF7Y8l2KiTwdz9D6KoigAZMIrk=
Subject key identifier: A1:21:E8:3A:73:DA:8D:53:D9:CE:C7:B5:62:60:0C:F2:1E:6E:E1:08
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 01A1A74AE7D5FCC9B057E6A3C8E59C104E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
Manifest number: 0DFF
Signing time: Wed 04 Nov 2026 16:01:06 +0000
Manifest this update: Wed 04 Nov 2026 16:01:06 +0000
Manifest next update: Thu 05 Nov 2026 16:01:06 +0000
Files and hashes: 1: RxkQzIFpbR8h5Y7GlER0QvlZ_xo.roa (hash: QyQ3uZNSoqX601+GHgavM056pTz7tYKjCe54YFu8AJg=)
2: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: 5UagBPEaI1ISFrHFgzmuZEQgse5HF0eUG62YIokmdD8=)
3: wWjDyLdGjiwzrevYapeX3h8xqMk.roa (hash: 0pYJcne1SC7egmiI51CMk3J9I9z03oaLbg318uqx+S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:4a:e7:d5:fc:c9:b0:57:e6:a3:c8:e5:9c:10:4e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Nov 4 16:01:06 2026 GMT
Not After : Nov 5 16:01:06 2026 GMT
Subject: CN=a121e83a73da8d53d9cec7b562600cf21e6ee108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:37:e4:18:34:88:08:e8:74:29:27:66:62:
1a:d6:8c:22:fa:21:07:91:51:e6:74:12:7e:b2:12:
58:50:c5:dc:3d:0f:7f:09:ba:b4:c5:0b:7d:b5:11:
27:a5:0d:29:2e:21:56:95:bc:fb:f0:4b:15:a4:f4:
86:58:37:c3:70:8a:5b:d8:e8:17:b0:d8:0b:69:d8:
09:3f:49:54:00:81:aa:3e:a2:04:9a:2f:f3:fc:10:
a5:d0:42:22:04:b0:ac:f1:38:63:b8:8f:88:a0:eb:
38:4f:61:f6:f9:a1:65:31:32:24:af:43:d5:75:56:
42:82:cd:c4:9b:1c:0f:d5:55:4e:e8:92:af:07:34:
ac:1a:33:d6:a2:0a:f2:92:df:0d:eb:d6:bd:f8:9b:
41:e0:05:da:55:98:f8:9b:9c:f0:be:70:22:34:5e:
2c:89:2c:57:4e:aa:90:bc:eb:f1:55:ad:3f:bd:8f:
fb:ae:30:ec:ac:bd:a0:e0:79:8a:70:b0:3b:0d:c4:
d1:e3:f5:75:4c:79:af:01:9b:89:49:0b:92:63:e2:
6e:79:c5:7c:1a:02:df:21:52:cd:8f:cd:06:15:b5:
e7:2c:7e:6d:19:68:f0:4b:14:b8:0f:48:06:66:f0:
bf:75:2e:9a:78:48:a3:21:f7:e2:4b:a9:c4:2d:b0:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:21:E8:3A:73:DA:8D:53:D9:CE:C7:B5:62:60:0C:F2:1E:6E:E1:08
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b8:b7:e4:38:2f:02:87:8b:20:ca:d3:e3:da:3c:50:97:58:
b8:12:a2:3b:c6:28:2a:03:02:90:4a:51:b7:53:b1:4e:de:35:
59:b9:5d:d1:f1:25:b8:99:35:a9:00:a1:31:67:1a:ab:5d:4a:
3c:e5:79:45:a5:6a:f2:90:70:18:6f:ff:6e:11:2d:6a:6d:77:
cb:4f:e4:ed:b3:4a:ca:d2:6b:71:5b:7c:6f:bd:76:56:eb:44:
0e:5e:0f:20:d5:12:52:ff:ff:b4:b4:46:e0:df:29:61:a8:30:
ff:e0:f1:79:54:f8:23:81:92:1c:f9:9d:92:1d:5b:d3:d0:82:
70:5b:de:ee:d5:ef:e0:ab:6f:23:3a:75:97:b8:d3:f5:be:2d:
9c:3c:ed:b2:45:64:43:07:80:d3:09:79:b1:0e:23:02:fe:52:
39:a0:d3:d7:4f:39:13:ff:d9:c0:c7:c5:9e:88:e7:61:21:be:
d5:89:3e:1a:17:d2:b0:57:c1:d9:df:dc:1b:54:12:0e:8b:84:
c9:58:cf:91:80:ac:99:10:cb:e6:d1:12:d7:6c:24:df:bd:7e:
b1:ea:d6:7d:56:d5:90:f5:12:1c:52:18:6e:7d:78:85:61:34:
a5:66:c4:25:29:da:0b:33:ad:1c:fe:8d:e4:e2:7e:30:97:3e:
db:4d:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:58:52 2026 by rpki-client