Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: AdzgB0eaneMED14lSzoPmQdRuyvFsuQNu3jkUw8OjC0=
Subject key identifier: BA:11:88:19:E5:A3:07:1B:59:89:2E:27:E3:BA:07:FA:4D:1D:35:6E
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 019E29CB99548452A8F32F3302DA411F075F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 0CD1
Signing time: Fri 15 May 2026 04:01:09 +0000
Manifest this update: Fri 15 May 2026 04:01:09 +0000
Manifest next update: Sat 16 May 2026 04:01:09 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: boGHb0OM5BxrI88Rd0Gtllxh/KOlYXy+KqeWLZsV2Ao=)
2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:99:54:84:52:a8:f3:2f:33:02:da:41:1f:07:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: May 15 04:01:09 2026 GMT
Not After : May 16 04:01:09 2026 GMT
Subject: CN=ba118819e5a3071b59892e27e3ba07fa4d1d356e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:7b:9a:ee:d9:8e:6a:39:6e:0a:71:69:83:
99:ea:2b:56:96:e1:ad:02:8c:ca:a7:b4:e0:63:e2:
61:da:58:13:a4:7e:4f:6d:8f:1e:1f:07:0d:68:df:
17:b4:45:71:1d:fe:82:bc:ca:40:55:af:4e:de:3a:
b9:c6:c3:3a:46:a4:40:29:d7:c4:99:e3:a9:59:56:
72:ae:35:6d:c6:b8:69:59:9a:94:6c:ff:7b:7d:e6:
f9:e8:ec:4c:5f:9f:38:fe:28:5f:13:d8:3b:13:a8:
d5:3b:4e:2c:68:16:a5:0c:a8:38:11:05:f4:a4:ec:
ae:0f:e5:a8:2d:96:37:57:ad:1e:92:d3:85:4e:6c:
f0:8a:ef:f9:e8:e6:3d:bb:7e:af:77:45:9f:73:0d:
58:93:8f:b5:26:f9:97:61:79:35:53:dd:df:ef:11:
7e:9d:1b:73:1d:69:af:98:a8:df:f5:24:7f:fe:e8:
ec:ef:48:74:51:98:5d:dd:5e:cb:16:8e:e1:7a:60:
ea:1d:31:15:b6:80:8d:2b:d6:91:87:61:99:16:a7:
d5:40:5a:53:7d:0d:2b:ca:0d:93:18:d9:39:c2:e6:
69:18:21:92:ee:77:a6:25:cf:10:9d:44:d3:da:07:
af:26:08:6b:6a:b5:f8:d2:79:2a:04:a2:a2:71:1f:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:11:88:19:E5:A3:07:1B:59:89:2E:27:E3:BA:07:FA:4D:1D:35:6E
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:c1:6a:35:0d:b0:ca:0b:8c:1f:f3:87:75:41:ee:dd:95:04:
af:2f:61:59:89:5d:8d:ff:ee:5b:c4:9a:4d:10:1c:21:c3:ca:
fb:e7:64:2e:73:df:e4:d6:8a:4f:eb:3a:ac:1c:f2:35:7f:e8:
92:db:f0:02:a3:93:35:fe:96:5a:2e:1f:35:5c:e3:fe:55:81:
19:b9:38:f7:98:0e:ed:1e:1e:58:18:e5:de:4e:65:1f:74:69:
fa:eb:66:ad:05:f7:44:b0:7a:a3:d9:51:61:7a:0a:95:1f:74:
1e:92:3f:2e:0e:cd:f7:66:06:92:e6:ba:af:fa:84:67:71:7d:
eb:f2:c7:af:49:6c:e9:23:0d:cc:77:9c:35:95:a6:6b:0c:52:
24:96:36:47:2e:da:44:a3:76:20:0d:d7:27:b7:56:40:a3:d9:
8c:e3:ac:2e:2d:0b:fa:4a:23:19:a5:34:dc:e3:42:f1:80:74:
78:28:1f:a0:0b:b3:e8:80:5e:f8:05:44:0a:4e:e2:e7:15:43:
cf:50:fa:07:e0:19:dd:26:6c:af:94:3c:cd:54:c6:b4:87:9c:
ac:70:b4:e4:ab:04:05:b2:c9:18:5f:42:e9:67:ee:3b:3a:45:
10:93:9a:d6:11:ba:55:ae:12:ee:9e:43:2f:30:ae:7f:c7:fb:
72:83:83:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4py5lUhFKo8y8zAtpBHwdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYWYxNmRjYzU1MGNmODFlY2YwZjgxOTUyMTc5YTA0ODEz
MDg3N2EwHhcNMjYwNTE1MDQwMTA5WhcNMjYwNTE2MDQwMTA5WjAzMTEwLwYDVQQD
EyhiYTExODgxOWU1YTMwNzFiNTk4OTJlMjdlM2JhMDdmYTRkMWQzNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTp7mu7Zjmo5bgpxaYOZ6itWluGt
AozKp7TgY+Jh2lgTpH5PbY8eHwcNaN8XtEVxHf6CvMpAVa9O3jq5xsM6RqRAKdfE
meOpWVZyrjVtxrhpWZqUbP97feb56OxMX584/ihfE9g7E6jVO04saBalDKg4EQX0
pOyuD+WoLZY3V60ektOFTmzwiu/56OY9u36vd0Wfcw1Yk4+1JvmXYXk1U93f7xF+
nRtzHWmvmKjf9SR//ujs70h0UZhd3V7LFo7hemDqHTEVtoCNK9aRh2GZFqfVQFpT
fQ0ryg2TGNk5wuZpGCGS7nemJc8QnUTT2gevJghrarX40nkqBKKicR/DewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoRiBnlowcbWYkuJ+O6B/pNHTVuMB8GA1UdIwQY
MBaAFG6vFtzFUM+B7PD4GVIXmgSBMId6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEt
NGZhMzQ4MWE0N2UxLzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEtNGZhMzQ4MWE0N2Ux
LzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0MFqNQ2w
yguMH/OHdUHu3ZUEry9hWYldjf/uW8SaTRAcIcPK++dkLnPf5NaKT+s6rBzyNX/o
ktvwAqOTNf6WWi4fNVzj/lWBGbk495gO7R4eWBjl3k5lH3Rp+utmrQX3RLB6o9lR
YXoKlR90HpI/Lg7N92YGkua6r/qEZ3F96/LHr0ls6SMNzHecNZWmawxSJJY2Ry7a
RKN2IA3XJ7dWQKPZjOOsLi0L+kojGaU03ONC8YB0eCgfoAuz6IBe+AVECk7i5xVD
z1D6B+AZ3SZsr5Q8zVTGtIecrHC05KsEBbLJGF9C6WfuOzpFEJOa1hG6Va4S7p5D
LzCuf8f7coODdw==
-----END CERTIFICATE-----
Generated at Fri May 15 07:38:08 2026 by rpki-client