Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: +sfChbfEYlfpkFu/MT1jl6YZaUju6XvAotq07ZMPvII=
Subject key identifier: C2:1A:A1:5D:25:31:E9:08:29:F1:85:0F:F8:83:7A:3D:AB:31:FE:F6
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 01A0016F60DA9B4B2F53A6F5E3CF51454FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 10FE
Signing time: Fri 14 Aug 2026 18:01:11 +0000
Manifest this update: Fri 14 Aug 2026 18:01:11 +0000
Manifest next update: Sat 15 Aug 2026 18:01:11 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: SCMVPdDJHuJ0KH39jIRP0uF38Be0O900xsMDPrERPps=)
2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:60:da:9b:4b:2f:53:a6:f5:e3:cf:51:45:4f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Aug 14 18:01:11 2026 GMT
Not After : Aug 15 18:01:11 2026 GMT
Subject: CN=c21aa15d2531e90829f1850ff8837a3dab31fef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:05:95:70:4c:19:28:3b:0e:de:50:60:ba:
b8:20:e9:68:1a:33:33:bd:15:75:54:56:f5:a2:0a:
65:d7:5c:d4:a6:0b:83:67:bd:80:1b:44:64:4c:c0:
61:24:7e:56:46:9f:a8:35:b9:5f:dd:d2:b6:e3:a8:
79:8c:ff:82:00:9e:a4:6a:8c:0d:af:6f:00:a0:67:
ad:32:7c:c8:45:d6:5b:88:22:ad:7a:17:6a:d7:e1:
9c:9a:d6:3a:a0:cb:ea:4e:9c:19:2d:c7:b3:0f:0e:
01:58:b9:47:92:bb:f3:c1:06:b2:ad:9b:41:cf:e9:
7c:1d:6e:5f:1a:1e:b6:bb:59:c7:4b:cb:13:e6:67:
d6:38:72:9e:a1:50:26:44:17:d3:cf:df:34:3e:9c:
5f:73:34:5e:98:8c:53:b5:ed:68:f3:37:7f:60:2a:
14:12:52:c0:28:3e:ae:30:96:fc:16:ed:6c:87:c8:
7d:73:19:6d:fb:92:f6:8a:d3:5c:83:92:b0:32:96:
6a:53:c3:b6:0f:20:83:5a:b4:f5:57:48:12:ac:f6:
7c:4a:25:0c:29:cb:18:51:ca:df:a3:e5:82:66:d6:
28:80:cd:75:3c:46:f7:4d:05:8d:28:3e:06:28:5d:
85:a5:2a:cc:7c:2a:54:57:26:b5:b2:5e:79:12:1e:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:A1:5D:25:31:E9:08:29:F1:85:0F:F8:83:7A:3D:AB:31:FE:F6
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9b:84:74:37:20:9f:af:2d:bd:b8:a6:76:34:7c:3e:58:1b:
b8:15:66:62:78:3c:56:e5:cb:a6:92:81:2e:33:a1:08:1f:a1:
07:81:e0:4d:54:49:05:19:1e:7b:03:2f:eb:ae:c3:a0:d4:97:
83:88:24:bb:0d:5e:da:24:0a:3e:64:c0:9b:46:c8:ee:5f:f8:
30:c1:1b:90:94:10:ab:6e:0d:fb:bb:b1:34:91:e1:d2:5e:8b:
ac:e6:a7:7d:37:22:cf:9b:f1:2c:ef:86:8e:fb:d2:a1:77:e6:
0d:87:2b:78:f2:7a:96:80:02:9e:b0:99:cc:0f:8d:90:34:d9:
ed:e8:fd:ed:23:ef:84:8e:34:ee:c2:83:1b:66:6c:f2:e7:1b:
49:15:17:5e:5f:6b:b0:cd:27:3c:e1:87:b8:35:ec:77:3c:12:
27:4c:d3:1a:9e:0a:7a:db:95:0c:48:e8:85:ce:86:73:25:77:
a5:59:4d:62:de:92:fd:92:6f:27:84:31:57:48:9e:87:2e:79:
b3:40:30:eb:3e:43:30:1f:bf:9b:b7:a4:ae:c7:42:37:3e:1b:
f4:d9:a6:b4:2d:d1:98:42:98:5a:a8:7d:41:f2:e0:21:d4:f5:
4f:56:b3:7a:aa:ef:d0:1e:c6:1d:fe:ee:33:72:0c:6a:9e:25:
79:5a:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:34 2026 by rpki-client