Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
File: bvqMD-YuxUrMveNcYL2K1LkBT_c.mft (raw, json)
Hash identifier: ilHb1HjpUy+cnfHCqJGPHv31IwEOZE4W5glre1t+BPM=
Subject key identifier: 33:EF:8F:0F:92:40:B6:B1:E1:DF:D3:6B:44:D7:44:74:DD:75:FE:9B
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Certificate issuer: /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial: 019D389C185B28F5D97F64037119B8748350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
Manifest number: 172D
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: bvqMD-YuxUrMveNcYL2K1LkBT_c.crl (hash: Xw6tdqUv6oWPuWlXnj34MfSic/qgNMWhoY6DcDVbqBg=)
2: d_SE2F6RTJ8Qa9XuTgPK7e07Afw.roa (hash: 8R+LohTGNLLIRGmEbwOKrhdf1Fobv+r39Rz/f173jc0=)
3: imiFSwewnn3eKlCdz9DBi55AbP4.roa (hash: gkW9o1cFmQilOBYv4BahCLyXi9azbfTOyovm/UvsWbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:18:5b:28:f5:d9:7f:64:03:71:19:b8:74:83:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=33ef8f0f9240b6b1e1dfd36b44d74474dd75fe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:e9:f2:55:db:d6:90:6c:6b:2d:65:92:03:
ff:e5:61:46:a2:36:37:4a:43:6a:1f:f3:e3:1c:66:
f8:52:55:e0:b7:d1:07:79:95:22:70:f8:0b:92:6b:
8a:12:39:8c:e4:7b:f1:42:41:f6:ab:eb:4d:a7:8d:
26:f6:72:b8:88:02:ab:c5:8a:3f:48:46:0b:df:a0:
8e:f1:d5:04:68:f0:66:35:29:e1:21:55:6a:1a:43:
26:f1:03:bb:70:05:73:4c:df:ea:9d:7f:a8:16:5a:
e4:67:2c:62:31:76:8d:78:ae:14:11:16:59:bc:2e:
a8:41:67:bd:c7:f6:a4:a0:46:1e:a7:53:03:d6:20:
1f:25:9d:00:2c:51:3c:f6:7e:5d:2f:ca:23:56:e4:
2f:b2:37:6b:fd:85:7b:75:3e:5b:36:f5:c7:b8:a4:
b5:fe:be:01:e0:e1:a0:df:f6:ea:e0:ac:41:6f:d0:
02:3a:7e:37:19:ab:65:68:a4:71:e5:34:87:a7:1c:
c8:dc:9a:69:95:1f:8a:d1:9f:42:b3:e5:aa:d7:6c:
0d:30:ed:88:95:b6:6b:df:f9:31:cc:5f:1a:f5:79:
fe:11:46:0f:94:e3:69:cf:c4:35:c1:cf:ae:8d:71:
f5:5e:a2:d3:e3:fd:55:97:4d:9e:b3:7b:32:ad:ff:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:8F:0F:92:40:B6:B1:E1:DF:D3:6B:44:D7:44:74:DD:75:FE:9B
X509v3 Authority Key Identifier:
keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:71:e1:7c:10:4f:a3:02:9f:5d:7d:65:9f:cd:98:1b:9a:
22:c1:43:30:ee:9f:79:d2:31:a2:6d:2b:2f:59:52:10:7d:a6:
95:ed:bd:4e:6b:55:30:38:c6:6b:b8:fd:43:be:55:99:ee:88:
d9:ce:7f:08:2c:5e:91:b9:00:f8:f3:e9:c4:d9:fa:f1:7a:fa:
1e:1d:12:af:1a:73:97:6d:7a:11:2a:a9:1f:6d:57:c4:75:b3:
b3:17:f1:d4:dc:06:29:46:eb:e8:67:f5:30:d4:ab:5c:1e:af:
71:1d:e3:28:2b:6a:42:a9:c8:ef:74:01:25:fc:c4:d9:8c:1f:
85:4a:53:4f:6e:05:4b:41:c1:f5:7b:0e:10:fa:19:f9:f1:d5:
2b:22:e2:b5:85:45:67:38:15:43:5a:66:21:ad:22:34:cf:33:
82:80:5f:f5:96:99:03:84:d7:dc:39:3a:07:d9:1e:cc:bd:1e:
34:73:4c:5a:25:29:1e:59:db:b6:72:ef:6d:26:4f:60:6d:39:
ea:0a:d0:fa:42:fe:ff:5a:8d:9d:0e:95:e4:7c:6e:84:a2:e5:
29:0a:48:66:61:5a:65:32:f1:22:38:cc:8b:0f:8b:d5:b9:8c:
e1:00:cc:62:38:59:56:f3:65:27:e8:02:e5:c4:e8:f7:52:22:
a7:9b:e1:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBhbKPXZf2QDcRm4dINQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZmE4YzBmZTYyZWM1NGFjY2JkZTM1YzYwYmQ4YWQ0Yjkw
MTRmZjcwHhcNMjYwMzI5MDgwMDQ3WhcNMjYwMzMwMDgwMDQ3WjAzMTEwLwYDVQQD
EygzM2VmOGYwZjkyNDBiNmIxZTFkZmQzNmI0NGQ3NDQ3NGRkNzVmZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgrp8lXb1pBsay1lkgP/5WFGojY3
SkNqH/PjHGb4UlXgt9EHeZUicPgLkmuKEjmM5HvxQkH2q+tNp40m9nK4iAKrxYo/
SEYL36CO8dUEaPBmNSnhIVVqGkMm8QO7cAVzTN/qnX+oFlrkZyxiMXaNeK4UERZZ
vC6oQWe9x/akoEYep1MD1iAfJZ0ALFE89n5dL8ojVuQvsjdr/YV7dT5bNvXHuKS1
/r4B4OGg3/bq4KxBb9ACOn43GatlaKRx5TSHpxzI3JpplR+K0Z9Cs+Wq12wNMO2I
lbZr3/kxzF8a9Xn+EUYPlONpz8Q1wc+ujXH1XqLT4/1Vl02es3syrf++FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPvjw+SQLax4d/Ta0TXRHTddf6bMB8GA1UdIwQY
MBaAFG76jA/mLsVKzL3jXGC9itS5AU/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YzdiMjItYjY1Zi00ZjM3LWE0MGUt
YTk5MTdjYzE1ZTBhLzEvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82YzdiMjItYjY1Zi00ZjM3LWE0MGUtYTk5MTdjYzE1ZTBh
LzEvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1lx4XwQ
T6MCn119ZZ/NmBuaIsFDMO6fedIxom0rL1lSEH2mle29TmtVMDjGa7j9Q75Vme6I
2c5/CCxekbkA+PPpxNn68Xr6Hh0Srxpzl216ESqpH21XxHWzsxfx1NwGKUbr6Gf1
MNSrXB6vcR3jKCtqQqnI73QBJfzE2YwfhUpTT24FS0HB9XsOEPoZ+fHVKyLitYVF
ZzgVQ1pmIa0iNM8zgoBf9ZaZA4TX3Dk6B9kezL0eNHNMWiUpHlnbtnLvbSZPYG05
6grQ+kL+/1qNnQ6V5HxuhKLlKQpIZmFaZTLxIjjMiw+L1bmM4QDMYjhZVvNlJ+gC
5cTo91Iip5vhDg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:55 2026 by rpki-client