Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: IeQkcNQrTHX6A1NAPM5TYnmCQv8ny0EoBrwOegdUej8=
Subject key identifier: 70:71:F7:0A:5D:1A:5A:93:B9:3E:FF:60:7E:1F:01:E5:8D:30:E1:2B
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 019F17C2DD86335CD181AE55489711425729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 1085
Signing time: Tue 30 Jun 2026 09:01:14 +0000
Manifest this update: Tue 30 Jun 2026 09:01:14 +0000
Manifest next update: Wed 01 Jul 2026 09:01:14 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: JNO1kdrMqz0W3/twHzVfHpQctP8NpfCmu3NzOhW4u3s=)
2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:dd:86:33:5c:d1:81:ae:55:48:97:11:42:57:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Jun 30 09:01:14 2026 GMT
Not After : Jul 1 09:01:14 2026 GMT
Subject: CN=7071f70a5d1a5a93b93eff607e1f01e58d30e12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:a1:64:fb:95:15:29:e2:3f:6e:01:81:3a:
45:27:b7:29:b2:64:38:3a:9c:d5:cc:4a:ab:c0:b9:
15:3d:60:d7:b6:2d:30:c5:e4:eb:9c:62:6e:40:e7:
b5:1f:30:62:47:ca:72:47:84:0f:4b:63:21:a0:23:
ac:ea:41:5f:de:86:05:4b:90:73:c7:00:ad:78:ae:
7b:fd:dd:7c:2a:06:86:24:2c:c9:32:be:87:af:7e:
ef:f6:a9:eb:f2:41:aa:39:df:99:e6:7d:27:38:85:
a1:de:35:b9:33:c1:69:7e:e3:b5:eb:71:a6:ca:7a:
a6:31:75:e0:f4:5e:56:f5:65:47:cb:da:b9:17:a2:
d0:a7:a9:22:2e:80:a0:70:ff:bc:59:04:7a:eb:f5:
75:e4:bd:fe:23:0c:49:b4:4e:60:c7:fb:d2:dc:0a:
33:f5:ba:10:a3:d5:81:c3:96:63:33:a8:d1:7d:ee:
41:47:a5:5f:18:7c:ca:94:96:3b:25:23:f4:7e:51:
53:1e:bf:7e:d0:cd:3a:3e:59:36:08:c3:fa:57:64:
56:8f:6e:23:71:08:9c:02:6a:75:1b:4f:5a:b2:f0:
1d:21:c5:43:87:e3:9b:71:13:81:50:7e:a4:c4:cc:
b5:0e:06:b2:2a:6f:e3:2d:d5:a4:37:e9:69:99:f0:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:F7:0A:5D:1A:5A:93:B9:3E:FF:60:7E:1F:01:E5:8D:30:E1:2B
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e0:69:27:7d:cc:12:d8:ac:2c:c2:84:c8:fe:9e:04:f5:30:
93:5b:1b:4b:b6:65:f0:6c:51:ff:b7:54:e3:e1:33:f8:2a:59:
e7:31:f6:09:10:7e:a8:a8:b7:9f:a2:7f:cd:01:6a:ec:50:a6:
0b:39:8d:8f:bd:3f:f0:86:9b:e1:6e:b5:bb:9f:a7:10:a6:45:
d7:83:51:f8:e5:ba:22:b7:68:22:a0:57:87:34:7c:7d:df:b6:
0d:4e:85:0d:d3:da:0c:3d:e9:10:d9:4d:34:e0:ab:a6:55:65:
a0:92:4b:cf:04:06:8e:b7:94:5e:5f:ed:27:9e:1d:dd:87:43:
44:54:38:2f:f9:4c:09:7a:af:d2:47:6d:9d:30:f8:70:ea:01:
4c:ef:26:00:c3:ec:8d:6d:e5:e3:a7:da:d7:fa:2a:2f:48:3f:
78:df:db:4c:62:14:e3:b1:7f:19:4d:ca:84:49:c0:41:73:f5:
44:82:0b:e9:f2:90:1d:51:52:5b:4f:2c:3d:a7:49:0a:24:66:
d9:df:48:47:b4:53:86:47:92:d3:14:56:00:3f:da:da:ac:85:
6c:4b:e0:2c:b6:2c:fb:84:9b:9d:24:2f:ef:0c:6b:71:ae:e2:
23:42:e4:eb:ee:47:9e:8c:e3:f5:5c:26:0e:ea:d0:9b:67:9c:
67:b1:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:33 2026 by rpki-client