Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: 0i0e2eRwxbHRyEMpTNK1mNrht7GRfuWHTD7v5L8Jqjw=
Subject key identifier: CE:F6:ED:2B:A1:61:E3:CF:34:48:74:8B:DB:C6:BA:F2:7A:89:70:B1
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 019D38D2DF1C2E0C4D1ECE0B3125048D3DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 0F8D
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: n74BYVzkDsVTmq1FCPFCoUMzP5oTMFhR26U05uv20g0=)
2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:df:1c:2e:0c:4d:1e:ce:0b:31:25:04:8d:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=cef6ed2ba161e3cf3448748bdbc6baf27a8970b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:cd:c2:23:62:b5:08:e8:e3:73:3f:77:09:
21:0a:dd:a4:b4:82:22:db:06:8e:df:8e:01:7a:98:
d7:a9:12:41:52:79:9c:ca:3a:99:58:2e:77:05:3b:
c3:c3:5d:73:ad:e3:d9:44:97:b7:1b:7e:22:1b:d8:
ad:5b:c5:a3:60:ab:c3:bd:c0:a6:42:5c:0f:b4:98:
05:70:9d:8b:71:44:41:fa:01:2d:6e:34:d1:38:9f:
62:ed:11:00:b4:6b:d9:c0:04:a3:dc:99:08:fe:18:
e4:9a:dd:58:cc:92:44:4d:7b:35:21:e2:3d:60:58:
b6:2f:cd:15:07:d1:24:0d:17:3d:48:30:eb:61:77:
11:f1:de:1a:6a:2b:03:4b:02:e5:46:36:68:94:49:
6a:f3:35:e3:79:4a:af:cc:bc:64:b7:7a:f5:77:81:
d5:ca:c4:e5:45:02:71:bc:b8:66:87:19:4e:c3:bb:
95:7e:54:aa:85:c6:de:a8:78:41:8e:7b:a7:38:aa:
74:79:e8:f1:92:70:60:34:b5:6e:37:ef:7d:eb:7c:
7e:89:5a:89:24:e0:af:dd:2e:78:13:93:e9:d1:69:
2b:14:47:0e:17:32:92:d9:9f:82:b2:bd:14:9e:fa:
a2:3e:de:bd:71:d7:6d:da:d5:00:e0:fe:aa:29:04:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:ED:2B:A1:61:E3:CF:34:48:74:8B:DB:C6:BA:F2:7A:89:70:B1
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2f:d6:2c:c6:0c:5e:96:58:91:7a:97:3d:74:ef:5e:2c:e5:
69:c8:a1:0d:d4:25:f9:c5:6d:3e:9b:6b:2b:15:bc:25:4d:82:
ac:9b:7d:92:2d:93:5d:df:f1:a6:ad:b9:8b:aa:cd:8d:c1:f5:
c6:3d:3e:e9:5a:34:db:40:75:41:80:6d:23:77:e7:0b:0c:2b:
33:c5:e6:c5:05:3e:77:87:c7:7a:c7:ee:81:02:87:7e:55:58:
59:ad:27:9d:cf:b0:52:98:4d:52:1f:5c:ac:03:c9:44:bb:ae:
b3:dc:95:8a:46:ac:2c:ab:bc:02:38:6b:ca:21:30:e0:56:47:
1e:5d:88:a8:37:c1:98:2c:22:21:66:86:ac:7b:52:fb:af:7c:
37:9e:02:59:84:be:fd:d8:f7:b6:3a:6e:44:e2:c8:7f:ad:4e:
f8:85:77:96:51:16:31:4a:2b:7c:d0:86:1a:a3:93:a8:3b:76:
8c:68:bb:c8:f7:4f:1e:07:63:26:7d:a7:a2:60:2f:bb:72:cb:
b4:39:63:3c:5f:70:6c:d3:d7:eb:33:4e:05:3c:cc:93:88:9d:
20:2c:26:2f:e2:3a:cb:24:40:cf:83:07:dc:9e:4f:08:1a:b6:
0f:03:a7:3d:9c:54:c5:2f:88:0f:e3:a6:25:26:b1:f5:75:f7:
8a:e7:85:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:20 2026 by rpki-client