Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: /qq7QQS5qk+NO4CS04frVzgTWNXjabXF73wptsctRLc=
Subject key identifier: FD:F4:A5:0E:8D:23:E6:78:68:AE:B6:C9:74:DD:86:AC:9E:2A:5C:83
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 019E3004F696A7F1F1D98C8DBE502FA75ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 100D
Signing time: Sat 16 May 2026 09:01:31 +0000
Manifest this update: Sat 16 May 2026 09:01:31 +0000
Manifest next update: Sun 17 May 2026 09:01:31 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: 3T0L8le0AdHcM72t7nRY+jzfsFPM5UjpssOdXkerock=)
2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:f6:96:a7:f1:f1:d9:8c:8d:be:50:2f:a7:5a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: May 16 09:01:31 2026 GMT
Not After : May 17 09:01:31 2026 GMT
Subject: CN=fdf4a50e8d23e67868aeb6c974dd86ac9e2a5c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:76:59:35:26:9e:97:88:e9:63:d1:27:e4:5c:
8f:ef:29:50:a2:db:49:e5:34:5e:44:4d:ac:e8:aa:
b7:9a:de:ed:25:19:13:88:66:13:a2:70:98:53:6c:
cc:75:a2:f9:43:3f:f4:39:4d:3a:f6:62:c5:44:4e:
c6:2e:e0:ab:44:d1:9d:9c:bf:11:54:33:4c:42:84:
9d:7c:ec:9a:00:01:07:5f:1f:15:b2:7c:21:e8:3d:
dd:e9:c8:fa:ca:20:df:69:5f:09:60:6a:65:a9:53:
a4:0e:d3:52:15:3d:10:f4:5a:c8:84:e0:fa:ab:d8:
df:73:0e:0d:5e:3c:81:a5:b4:1c:60:e8:ee:04:cf:
20:b7:3b:51:32:76:9c:6f:8d:bf:11:ee:15:88:35:
c1:f9:a2:52:c8:df:8b:96:db:25:71:44:b2:4c:89:
68:28:0a:77:66:61:da:49:ab:e8:0e:5f:10:fa:c1:
90:dd:33:cf:29:30:d7:30:d6:8c:07:dd:c9:48:99:
ca:ca:89:e1:17:a9:d7:2d:18:8e:0f:f2:b3:2b:d4:
e3:22:2c:db:42:1b:19:94:53:3d:55:9a:96:0c:3e:
49:11:bf:fe:20:3d:e3:f7:5d:49:aa:9a:6e:e8:62:
31:6e:d9:1b:62:17:56:84:a8:37:96:86:df:f2:07:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F4:A5:0E:8D:23:E6:78:68:AE:B6:C9:74:DD:86:AC:9E:2A:5C:83
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:73:64:96:36:b0:c2:8e:94:d1:4b:8c:d3:54:c0:18:9e:bc:
bd:a4:21:0e:f3:fe:8e:42:8d:47:74:9a:b9:9d:c9:1c:6f:a2:
b8:e5:5c:89:b3:e5:88:ac:bb:97:c7:5c:aa:fd:65:1a:28:d8:
7b:cf:71:7f:18:c2:00:1c:34:d2:58:d1:50:86:85:87:b6:2e:
23:fd:87:33:3f:d8:17:77:20:6c:07:2a:fe:81:8b:60:e7:0d:
83:1a:cb:c4:7f:cf:4b:54:ae:99:b8:e7:c9:96:42:c3:a3:e1:
97:d9:c0:95:a8:b7:20:01:70:cd:4c:cc:22:1e:da:2f:5c:d0:
66:9f:4b:14:6f:c8:0a:e4:d1:5f:9d:d2:08:50:2a:77:4a:72:
e5:32:5e:36:9d:1e:23:73:57:7c:36:a7:04:a0:05:7b:9b:f5:
b8:2f:f4:f4:3a:37:2b:14:cc:35:e6:35:16:7b:66:88:1d:02:
96:ce:da:c3:20:ce:4d:a1:88:69:11:5d:9f:f9:72:78:89:db:
1f:5c:a0:59:24:a5:16:95:af:c3:ca:ff:3e:24:d9:c7:8c:15:
1e:e5:5a:6b:a4:da:c1:fe:ae:61:8a:ee:8b:43:dc:30:4f:bf:
52:62:b1:d7:3e:21:59:40:8a:65:7c:fc:1a:e2:09:8d:d1:fd:
24:9f:f5:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBPaWp/Hx2YyNvlAvp1q7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTRjMThkMmUyMGRiNjRmZjlkYjUyOTJiMzc5ZjUzOGI3
NmExNTEwHhcNMjYwNTE2MDkwMTMxWhcNMjYwNTE3MDkwMTMxWjAzMTEwLwYDVQQD
EyhmZGY0YTUwZThkMjNlNjc4NjhhZWI2Yzk3NGRkODZhYzllMmE1YzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33ZZNSael4jpY9En5FyP7ylQottJ
5TReRE2s6Kq3mt7tJRkTiGYTonCYU2zMdaL5Qz/0OU069mLFRE7GLuCrRNGdnL8R
VDNMQoSdfOyaAAEHXx8Vsnwh6D3d6cj6yiDfaV8JYGplqVOkDtNSFT0Q9FrIhOD6
q9jfcw4NXjyBpbQcYOjuBM8gtztRMnacb42/Ee4ViDXB+aJSyN+LltslcUSyTIlo
KAp3ZmHaSavoDl8Q+sGQ3TPPKTDXMNaMB93JSJnKyonhF6nXLRiOD/KzK9TjIizb
QhsZlFM9VZqWDD5JEb/+ID3j911Jqppu6GIxbtkbYhdWhKg3lobf8gfJhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP30pQ6NI+Z4aK62yXTdhqyeKlyDMB8GA1UdIwQY
MBaAFAakwY0uINtk/521KSs3n1OLdqFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zZDI4OTQtMzJlOS00ZjAyLWE4Yjkt
NTMyZWQyNTY3ZTliLzEvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zZDI4OTQtMzJlOS00ZjAyLWE4YjktNTMyZWQyNTY3ZTli
LzEvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXNkljaw
wo6U0UuM01TAGJ68vaQhDvP+jkKNR3SauZ3JHG+iuOVcibPliKy7l8dcqv1lGijY
e89xfxjCABw00ljRUIaFh7YuI/2HMz/YF3cgbAcq/oGLYOcNgxrLxH/PS1Sumbjn
yZZCw6Phl9nAlai3IAFwzUzMIh7aL1zQZp9LFG/ICuTRX53SCFAqd0py5TJeNp0e
I3NXfDanBKAFe5v1uC/09Do3KxTMNeY1FntmiB0Cls7awyDOTaGIaRFdn/lyeInb
H1ygWSSlFpWvw8r/PiTZx4wVHuVaa6Tawf6uYYrui0PcME+/UmKx1z4hWUCKZXz8
GuIJjdH9JJ/1yg==
-----END CERTIFICATE-----
Generated at Sat May 16 17:14:01 2026 by rpki-client