Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
File: bvqMD-YuxUrMveNcYL2K1LkBT_c.mft (raw, json)
Hash identifier: 1AXHWJZ5GWT6FZnCC/g0zt6IPYwFY65/31h05dhuq/E=
Subject key identifier: F9:F0:6A:59:74:8B:7C:E8:0C:D8:B5:2C:3D:E6:DA:2F:0D:E9:D3:2F
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Certificate issuer: /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial: 019E2A025A5BC15C8850C4618301B011F700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
Manifest number: 17AA
Signing time: Fri 15 May 2026 05:00:57 +0000
Manifest this update: Fri 15 May 2026 05:00:57 +0000
Manifest next update: Sat 16 May 2026 05:00:57 +0000
Files and hashes: 1: bvqMD-YuxUrMveNcYL2K1LkBT_c.crl (hash: k3KlcKrYlnUq1oa5XK8XpJgjDnNrZHXymrpMiyhmK0o=)
2: d_SE2F6RTJ8Qa9XuTgPK7e07Afw.roa (hash: 8R+LohTGNLLIRGmEbwOKrhdf1Fobv+r39Rz/f173jc0=)
3: imiFSwewnn3eKlCdz9DBi55AbP4.roa (hash: gkW9o1cFmQilOBYv4BahCLyXi9azbfTOyovm/UvsWbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:5a:5b:c1:5c:88:50:c4:61:83:01:b0:11:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Validity
Not Before: May 15 05:00:57 2026 GMT
Not After : May 16 05:00:57 2026 GMT
Subject: CN=f9f06a59748b7ce80cd8b52c3de6da2f0de9d32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:19:ac:e5:57:0a:61:3e:c0:95:dd:f8:34:
33:c4:70:be:a7:d3:08:af:51:83:d6:3f:d0:b9:5d:
cd:59:4b:61:4a:de:e3:25:a3:d4:32:b0:7c:74:3a:
b3:27:4a:34:2e:51:b5:e4:3f:cf:51:96:21:bf:fd:
24:da:41:cd:65:cd:d2:3c:f3:c0:2c:b1:6c:b4:38:
ec:96:8a:9f:dd:92:f6:05:f6:b4:9e:3d:12:25:4e:
68:31:8b:ea:ab:a2:0a:a8:b8:a1:50:12:be:25:82:
de:1d:a2:b7:5e:3a:df:8d:96:91:b6:95:72:96:f8:
de:09:7f:d4:ed:c2:b1:b0:65:ba:c8:26:a5:f7:39:
2a:dd:20:85:6a:2c:0c:36:6e:cb:e3:5c:6f:16:0f:
67:12:e3:44:e4:40:1e:2f:69:65:36:5a:df:07:e8:
6a:55:b8:9e:87:75:93:25:34:03:60:ce:6a:8f:cf:
83:3d:73:76:52:c9:f9:c4:52:d8:83:73:3e:75:41:
91:37:1c:98:cc:55:01:ae:e6:d9:91:20:3b:42:1b:
41:19:87:17:f8:ba:bc:48:e7:ab:3a:7d:d6:0b:5e:
b6:4c:78:77:d2:b6:94:9e:35:57:39:98:62:65:b8:
e9:5f:8a:a5:89:f9:c4:b3:70:31:f7:39:c4:6f:ef:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:6A:59:74:8B:7C:E8:0C:D8:B5:2C:3D:E6:DA:2F:0D:E9:D3:2F
X509v3 Authority Key Identifier:
keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b2:53:a5:3e:57:e8:80:91:12:20:23:6c:80:2d:9c:0a:4b:
d9:c9:5b:4e:3e:5a:39:52:9a:b6:3d:e9:3e:c6:45:87:75:65:
08:d8:82:83:bc:54:e5:c5:48:72:a1:26:2b:d9:dc:62:8d:d3:
aa:eb:4f:3c:b3:5d:d3:70:ce:3e:61:46:f6:c4:12:09:08:76:
95:b9:b1:ab:21:ab:cc:92:20:32:3c:2a:a7:aa:2a:6e:15:bb:
a4:5b:c4:e6:7c:1e:19:39:61:74:43:0a:1c:d1:17:05:b2:ef:
92:89:cc:63:85:52:6a:3e:b4:31:17:21:58:24:c7:5e:92:5b:
1a:e4:81:67:d3:4f:63:df:8b:46:f4:e4:1a:8b:e7:9f:d3:dc:
22:0c:44:31:66:f5:c7:a1:5a:8c:58:2a:d4:f3:fe:ba:c9:8d:
85:14:5d:c5:20:03:a8:a2:70:91:f0:86:de:84:24:d9:af:15:
0d:f0:42:35:c2:68:e2:92:e6:b2:73:92:6a:4c:bb:79:76:e3:
04:be:c5:5f:b9:c5:20:9a:1f:ee:03:42:58:74:1c:5e:6c:3e:
44:86:73:fa:bb:b3:1e:c0:c9:40:e6:1a:0a:2c:96:cf:9a:03:
e7:52:68:15:13:4e:28:f7:c0:ed:4d:68:92:06:be:6e:ae:da:
4e:a1:e6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:28:09 2026 by rpki-client