Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: yNhODTrPjOWiOmnp18SENChrdZZ04NaCqRMYJh6yMZE=
Subject key identifier: 90:AB:E1:9A:42:BC:83:7E:06:5A:68:E8:14:60:2C:F0:01:00:B6:D0
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 01A0005C8132E8E58F733AA0C8EC439C6086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 13:00:57 +0000
Manifest this update: Fri 14 Aug 2026 13:00:57 +0000
Manifest next update: Sat 15 Aug 2026 13:00:57 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: PGBWUkis7fYh+R+FhFzs1EprlOAbD5Trh281z2ubKVw=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:81:32:e8:e5:8f:73:3a:a0:c8:ec:43:9c:60:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Aug 14 13:00:57 2026 GMT
Not After : Aug 15 13:00:57 2026 GMT
Subject: CN=90abe19a42bc837e065a68e814602cf00100b6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:41:22:94:98:1c:0f:bb:25:06:02:97:c1:
81:b7:14:b0:68:b1:ad:01:69:8c:e8:52:2f:05:fa:
c9:0c:3b:0e:7e:e2:fa:be:83:2e:2f:17:24:56:07:
e9:03:f9:1f:ca:b2:4e:dc:c8:3c:3d:b0:5f:80:be:
a9:25:64:06:c3:28:92:9a:3d:b1:fb:17:7a:7f:41:
24:81:93:7f:98:09:ed:d1:b4:7b:cb:fc:c7:82:dc:
1a:d9:74:71:f4:67:99:25:0d:32:82:81:95:36:3d:
fb:48:d0:3c:ec:ae:87:0e:52:50:53:2d:eb:8d:84:
6c:fb:bc:a7:65:87:4d:07:18:85:19:19:02:7a:b2:
f5:70:39:ad:90:68:b3:ab:4e:73:e7:b2:62:12:98:
db:09:a8:76:29:e3:40:3a:fd:62:21:c0:82:dc:ea:
bf:42:97:0b:8e:19:a7:4e:03:bd:e7:4f:84:c7:ab:
f8:0f:ec:f1:0b:79:c9:0c:f0:e5:13:e4:fa:7d:da:
0a:38:c1:d5:7b:38:74:e6:c1:39:d3:50:21:55:74:
5e:16:ff:ea:e6:cd:1a:19:4e:fb:d3:c5:a0:81:d7:
c0:b4:e6:79:88:82:26:fd:51:04:67:99:90:0a:39:
a5:2f:9a:5f:84:a1:79:26:ff:df:8d:f4:4d:96:d7:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AB:E1:9A:42:BC:83:7E:06:5A:68:E8:14:60:2C:F0:01:00:B6:D0
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:43:e4:fa:da:1a:c7:ac:fa:35:76:ec:be:45:cc:02:5e:d9:
c9:d2:08:a4:e8:b5:68:0a:d7:fd:7f:f5:b8:c7:85:8e:39:82:
9b:85:3e:6a:09:11:44:75:34:19:2a:ce:39:98:64:bd:31:8e:
ac:b4:a1:1e:f7:83:b0:e2:79:3e:38:bd:0a:16:7b:cb:6c:4f:
38:56:df:27:33:a9:66:ab:87:a7:29:80:97:78:42:d0:6a:bf:
2c:af:01:61:c5:20:99:df:bb:e3:e7:3f:4b:0f:79:b9:0d:ef:
0c:7f:66:a1:bf:8f:5b:cd:0d:ff:6b:27:b6:51:06:9a:9f:82:
f9:71:bf:db:64:f8:db:f1:80:da:48:4b:65:fb:07:f7:87:36:
89:af:24:0a:b2:09:99:87:c5:fe:c4:d9:3b:9d:ef:b3:e5:43:
66:be:8c:79:93:3a:c9:d1:64:74:49:43:3a:67:e2:1c:75:92:
e5:f5:0e:71:5f:de:9e:ac:be:bf:cb:a7:95:fb:b0:df:fe:84:
16:dc:50:ba:3e:1a:fb:d4:f7:d0:76:56:6e:db:5e:79:dd:76:
04:bc:9f:65:81:3c:a9:86:1f:ca:71:a4:8d:f9:89:ae:6a:6c:
b1:99:e8:2a:68:1b:8b:c3:2a:9c:0b:b8:b2:32:75:b9:e5:99:
fe:7a:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:53 2026 by rpki-client