Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: w/OjOV12VbapVKKBA23sRL0fe3Za2NDYeD4vHMYJJPs=
Subject key identifier: 82:50:0B:A1:63:DB:CD:66:27:10:99:75:DF:B5:0C:1A:A5:75:1D:A8
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 019D386605A3832ED32A0F46722021269645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 0C54
Signing time: Sun 29 Mar 2026 07:01:43 +0000
Manifest this update: Sun 29 Mar 2026 07:01:43 +0000
Manifest next update: Mon 30 Mar 2026 07:01:43 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: nItQNRwDHp3lQcQ9T46UtW1mQfL11/btXUIn0VNWrY0=)
2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:05:a3:83:2e:d3:2a:0f:46:72:20:21:26:96:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Mar 29 07:01:43 2026 GMT
Not After : Mar 30 07:01:43 2026 GMT
Subject: CN=82500ba163dbcd6627109975dfb50c1aa5751da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:98:b2:49:25:4f:b8:73:3c:b0:8d:9e:ca:
39:a6:71:eb:46:88:dd:49:ef:8b:64:9d:00:f7:62:
be:49:28:8b:e9:11:47:8d:37:15:62:e4:64:a6:c9:
f5:dd:5d:f4:00:e8:21:ba:cf:8c:60:93:a2:f2:61:
cc:40:ce:43:d6:39:c7:de:3b:75:a6:3f:d1:55:31:
55:74:90:d7:f9:b1:d1:87:0d:a1:3c:be:94:6c:11:
da:f7:d8:df:b0:ec:f2:0f:7c:fa:78:f7:22:7e:45:
4c:04:5d:f6:73:f4:cb:8d:88:66:05:2d:26:ee:7f:
4d:c8:b2:ad:cd:f7:e1:8c:d9:af:1e:ec:52:53:11:
2e:70:dd:32:e6:4b:b4:ab:93:1a:70:ff:de:51:15:
54:51:3d:3e:df:3d:1e:2b:46:51:7b:4f:47:07:c0:
59:04:f4:16:d5:6c:65:db:85:9a:d8:0f:36:74:44:
79:03:07:70:f0:ac:a7:00:d8:bc:fa:3b:ee:88:94:
fb:2e:c6:45:02:7b:72:a1:75:29:0c:ec:2a:c3:57:
03:0f:3f:1b:dc:f4:8e:f4:f9:18:78:6e:4b:b4:fd:
99:cd:79:93:39:4a:41:13:df:52:67:3b:b6:5c:73:
64:d2:b7:04:2d:8e:c3:42:46:15:2f:e6:13:76:11:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:50:0B:A1:63:DB:CD:66:27:10:99:75:DF:B5:0C:1A:A5:75:1D:A8
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:24:6f:fd:dd:93:0d:45:3f:be:27:0c:10:52:fd:8e:f1:5d:
ee:c9:b0:9f:c2:3b:89:02:65:e3:72:ff:88:3b:e9:f4:58:70:
af:54:41:af:22:ed:79:6d:e1:f6:44:76:aa:d1:36:73:8f:ee:
be:41:5e:e9:57:b0:ff:b0:43:9a:9f:ef:56:07:42:00:14:fb:
22:ba:72:7c:3d:42:1a:e8:9e:a8:12:c4:ac:8c:b9:e9:f1:75:
e2:00:9a:fd:8f:57:2e:e3:60:a6:0a:3e:3f:82:fd:aa:d1:13:
77:fd:37:69:d2:e7:34:b3:4a:14:b3:00:b7:01:d6:a2:a1:f6:
d8:cc:a7:0f:a9:ad:9e:b4:48:d7:48:0f:d2:2b:0b:a9:7a:68:
7b:b1:88:e7:4b:eb:93:b9:bd:7b:df:8b:04:91:22:45:d2:67:
db:ca:0a:15:ab:14:23:27:84:10:f5:29:c4:78:c5:3d:95:8b:
00:b3:e3:16:21:22:a5:2c:07:25:30:b2:aa:92:0b:f1:f0:bc:
15:88:94:a2:ca:a1:2b:2c:e0:8d:5d:ac:33:b2:69:da:19:2a:
8c:30:05:31:57:b3:01:aa:28:10:cc:ff:67:8b:b5:66:94:29:
05:c0:1b:87:3a:e3:91:f4:d6:d8:67:55:f4:dd:bc:0d:00:70:
1f:0d:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:43 2026 by rpki-client