Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: fBn3RlaezPF/okVz0j+C3WKG2KvZr0TDkMB6fJTIZd0=
Subject key identifier: 9C:5D:8F:B4:64:F4:84:FC:40:AD:3E:2C:C3:46:E4:27:DD:79:7C:A8
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 01A143F195A2A6FEA4408E2C275B930C04B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 11A5
Signing time: Fri 16 Oct 2026 09:01:08 +0000
Manifest this update: Fri 16 Oct 2026 09:01:08 +0000
Manifest next update: Sat 17 Oct 2026 09:01:08 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: 6f76EUiZLvvEY+l3v3O+S90RkxY7L5Zx3OujVC23jXY=)
2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:f1:95:a2:a6:fe:a4:40:8e:2c:27:5b:93:0c:04:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Oct 16 09:01:08 2026 GMT
Not After : Oct 17 09:01:08 2026 GMT
Subject: CN=9c5d8fb464f484fc40ad3e2cc346e427dd797ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:d8:49:ad:3e:55:33:fb:5a:e6:c4:d8:71:
f0:91:b4:66:d8:a6:49:b4:6d:db:53:06:ec:32:4a:
8a:94:2b:d6:39:4a:21:5a:9e:6e:2a:b0:50:67:9a:
e0:2b:b3:a4:54:16:6a:c5:40:70:82:33:f7:37:b6:
4b:e5:f7:25:bf:ad:c5:b0:53:af:88:75:ca:1f:e8:
20:a4:80:34:7b:c0:9b:df:c1:cf:a6:bb:30:be:66:
0b:7e:50:05:b0:48:8d:89:55:14:7b:87:d4:e3:fa:
43:bb:51:6e:1f:dd:16:95:a5:17:1c:ff:1d:b4:72:
3f:26:04:62:c7:f1:0c:44:2a:4b:15:7a:bd:54:cf:
bd:e1:05:7a:41:96:2f:69:95:6b:c8:1e:8e:e2:65:
80:3a:f2:bb:82:57:6a:69:22:64:55:a8:2a:ac:00:
34:7f:3c:23:43:d6:c4:5f:d8:0b:a7:d5:37:3c:0d:
21:87:88:36:fc:95:18:2f:03:45:24:04:fe:f2:33:
73:57:91:f8:f1:98:dd:23:d3:1c:7d:0f:0f:32:8a:
f0:c3:14:03:2c:61:32:e9:64:91:78:d6:bd:19:40:
a3:fc:49:80:86:88:e8:b2:c9:7c:85:ca:25:e3:9d:
28:6f:51:3b:17:07:4a:64:90:18:50:0a:a6:03:93:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5D:8F:B4:64:F4:84:FC:40:AD:3E:2C:C3:46:E4:27:DD:79:7C:A8
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:10:d4:4b:45:f8:e9:9b:69:70:c5:67:35:d8:09:56:92:9d:
5a:43:9c:aa:e8:7f:fa:52:4c:2e:6f:90:bb:64:f8:4f:f3:35:
8b:4b:c4:b1:ac:1a:97:a6:4c:cd:21:4a:7e:c5:3c:b1:40:a6:
bf:65:25:3c:f6:27:f6:9c:7d:04:a2:09:b3:00:d1:57:85:43:
d8:72:7f:73:aa:3f:df:6e:4a:4f:3b:9a:8f:87:bd:fc:54:04:
90:0d:34:b4:b8:62:4f:a5:3a:e0:88:85:1b:d4:ab:44:0e:75:
24:75:21:3d:5b:52:9a:e7:f2:9d:c5:aa:aa:e1:58:8f:bc:b0:
f8:c9:ee:1b:f8:b9:e0:41:21:c7:42:2c:45:59:40:5b:fa:42:
7e:68:ee:02:7b:36:06:38:26:f2:4d:9c:2a:44:87:9e:a4:b9:
f3:1d:ea:57:0f:75:08:99:eb:81:43:15:40:ce:58:0e:ef:d6:
7b:c9:67:71:ff:a0:54:08:70:4d:fb:7b:cb:f8:08:3c:b2:39:
33:45:c4:85:e2:4c:06:f8:2e:5e:28:8b:50:33:bd:49:0d:19:
52:0d:33:15:a6:0e:12:22:cc:41:11:9a:7b:bc:cf:7e:09:cc:
85:0b:da:89:df:2f:ab:40:d1:19:34:2d:57:ec:45:73:42:06:
c6:14:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:40:00 2026 by rpki-client