Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: KnXW4JOo47cW1WNdTvoPzEJwnjinnMDTCPbQpOyyc28=
Subject key identifier: 2F:1E:90:61:93:E1:A0:F4:D8:24:BA:BF:BD:B6:AE:5D:B9:00:A1:13
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 019D3A5371ED6A85322E1FF32B4E50792081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 16:00:40 +0000
Manifest this update: Sun 29 Mar 2026 16:00:40 +0000
Manifest next update: Mon 30 Mar 2026 16:00:40 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: wUjHCEbndesRHYG/tZ7C0qZHyIC4QE9+715bY571CyY=)
2: G2r9KsUTtbxHKB5JKNC2RVQtxUM.roa (hash: tpJ2/AVYhiDqHmd6oabX9AFZV9PFSJLtrHg1I6lP9Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:71:ed:6a:85:32:2e:1f:f3:2b:4e:50:79:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Mar 29 16:00:40 2026 GMT
Not After : Mar 30 16:00:40 2026 GMT
Subject: CN=2f1e906193e1a0f4d824babfbdb6ae5db900a113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:c8:e3:a3:7c:56:ba:73:8a:62:c9:76:16:
bf:96:b8:ec:cc:65:3e:ea:41:05:aa:2e:d1:65:c0:
e2:7d:9b:95:02:fa:43:f8:a3:d2:38:86:77:f8:18:
e4:e1:c0:d5:aa:06:bc:63:1f:82:4d:f2:1b:4d:32:
b6:36:c1:b5:6e:62:eb:73:08:45:dd:26:36:ab:1a:
db:ec:e8:42:c6:9d:55:dc:24:1f:42:c3:a4:43:ac:
fe:49:cf:0e:d6:60:19:3f:9b:d8:d4:86:d8:40:5f:
20:12:37:1d:a3:a4:e1:d5:7c:f9:1a:a3:f6:79:e7:
04:27:3b:06:68:a1:7b:3b:f4:a5:c1:aa:04:94:9f:
9e:8a:27:a0:85:2f:30:84:68:1c:f4:a5:97:32:da:
98:ee:c6:b4:cd:62:02:78:c7:63:15:a7:1b:b8:5f:
31:2d:76:51:b9:d1:56:da:bd:78:62:11:00:b2:89:
1f:3a:aa:32:7e:ca:8e:24:35:6b:10:fc:10:d9:fb:
41:06:83:9a:3e:be:00:c7:ab:c2:f4:27:9d:3b:46:
e8:10:3b:7c:74:25:61:d7:f5:ea:6c:d4:ab:25:d6:
e3:fc:28:f7:8e:d0:fb:c2:bd:40:2e:57:2a:b7:a5:
80:95:c3:42:14:f4:a5:77:f4:a2:d4:67:cb:cc:57:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1E:90:61:93:E1:A0:F4:D8:24:BA:BF:BD:B6:AE:5D:B9:00:A1:13
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:97:9d:00:bd:36:44:8b:27:c3:d7:bf:ad:32:af:3b:ca:36:
05:ed:e1:2d:e1:6b:bf:05:a3:12:15:c5:65:69:bf:8c:05:6e:
bb:ca:f7:ef:e8:a2:32:1b:a0:ee:80:af:fc:62:3c:dc:f0:d8:
1c:48:67:99:3d:02:dc:d0:7c:cd:d5:78:e2:4b:3a:41:d7:5b:
8f:5c:a0:10:15:63:6a:3f:dd:b9:5d:0f:99:ab:75:f5:83:bb:
0d:c9:6c:42:4e:df:fe:a6:1f:5e:91:ed:e6:c1:01:34:a7:4b:
7b:f0:e9:dc:5d:a7:c1:eb:a7:a3:42:3d:ef:8b:09:71:1a:a3:
22:85:5a:65:bb:12:3c:d0:89:9e:42:4b:f1:e5:63:af:f2:c0:
ca:18:ca:e7:f9:be:a6:e1:a8:e5:4d:a9:b9:db:bf:97:bc:11:
2a:38:2a:dd:ce:d4:34:39:c0:8c:10:8d:ad:78:94:a3:93:84:
31:41:8b:29:87:74:18:67:a8:7c:c0:01:76:14:41:d0:c1:68:
a2:28:8c:3a:49:7d:86:dc:7d:c9:f3:27:cf:9f:36:56:a5:c0:
f2:22:8d:97:88:6a:82:e1:6a:ce:d7:2e:e0:a6:38:44:32:c2:
61:be:02:c4:eb:7a:5f:95:26:8d:46:35:42:dc:4d:ff:22:fe:
58:91:08:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:54 2026 by rpki-client