Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: URnzGV2PAvIeb2lbFAKMFONISYTYd9hhxdU4Ykw2zhU=
Subject key identifier: 12:C8:0D:49:95:4D:80:5D:AC:8D:F4:92:E5:73:CC:65:EA:E2:BE:24
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 01A140F0FB7759ABADDBB7E25532051B2044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 19:01:37 +0000
Manifest this update: Thu 15 Oct 2026 19:01:37 +0000
Manifest next update: Fri 16 Oct 2026 19:01:37 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: l522e5Q6v9NtbyCSwzzD5pkPW4PcKWmXS2ihVRraDko=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f0:fb:77:59:ab:ad:db:b7:e2:55:32:05:1b:20:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Oct 15 19:01:37 2026 GMT
Not After : Oct 16 19:01:37 2026 GMT
Subject: CN=12c80d49954d805dac8df492e573cc65eae2be24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:d1:47:0b:58:c3:d3:58:ca:f0:0e:de:30:
51:74:83:a3:a6:ed:79:63:35:b7:ef:b6:4b:06:74:
fc:ce:0a:7f:4c:b5:3c:78:e7:1b:55:b4:5f:27:d1:
06:3d:e1:d1:d9:03:50:46:bc:f0:f8:0e:ab:7f:48:
81:34:67:0f:31:e5:10:a2:2e:34:f8:21:56:3f:2d:
58:21:12:bc:a6:4a:de:a9:3b:04:73:45:35:d2:ff:
97:f9:19:8e:96:cc:2c:90:e5:71:6c:04:9b:14:8b:
4c:f0:09:54:8a:7e:e0:5d:0e:e3:71:f4:f7:32:f7:
65:08:1f:e1:15:4f:34:db:49:79:1c:f3:8b:5d:2d:
1e:92:3e:c1:da:39:49:ff:47:86:4c:72:26:56:be:
b7:16:80:3b:cd:02:ea:5b:06:89:4c:07:b9:c0:d7:
18:de:a8:3a:cc:f2:f5:42:0b:18:2f:fd:53:35:f4:
56:af:c8:d3:dd:47:5f:31:2d:a3:8d:4d:57:e6:68:
dc:83:96:24:55:c2:65:fd:6a:c2:01:2a:1b:dc:10:
54:af:56:77:d5:c3:13:e8:ca:bf:43:c9:98:d1:a6:
bc:a9:22:5e:49:df:5c:3d:47:91:44:b3:47:83:5c:
77:10:fb:dd:41:d7:ae:60:ce:5a:ef:d9:1e:41:4b:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C8:0D:49:95:4D:80:5D:AC:8D:F4:92:E5:73:CC:65:EA:E2:BE:24
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:45:f4:36:7d:7b:cf:3a:cb:cb:8f:c9:ed:ba:f4:58:40:a0:
9b:12:27:b1:6d:8c:e0:98:83:56:bd:44:c0:dc:cb:d2:b0:42:
39:1c:80:25:db:ed:7a:99:10:57:58:95:3d:a8:5b:96:c3:1a:
2f:d9:a7:35:72:54:9c:d7:db:f5:05:81:bb:d0:9b:20:38:30:
6a:20:dc:d2:ca:0f:25:9c:68:41:63:65:f4:be:b4:87:cc:e0:
86:31:64:2b:76:91:4a:f2:28:12:ce:4e:24:a3:dd:bc:84:16:
f4:b4:6d:6b:ea:54:6b:67:a1:f3:5b:4b:03:3e:db:a7:bc:26:
83:97:0d:c3:e4:f8:bb:f0:55:8c:73:f1:4c:1e:64:93:19:ca:
c2:82:ea:1f:bf:60:22:b0:79:25:c8:49:af:dc:3d:e6:d7:2f:
9e:aa:f1:07:50:9f:3f:a4:65:76:73:22:48:91:8b:e5:f1:c9:
dc:65:8f:9d:8c:22:6e:c6:76:54:b3:fe:b3:25:2f:09:a2:22:
a4:28:66:0d:db:66:b6:a4:31:98:e2:57:6b:8a:90:74:4c:00:
76:d4:9e:7c:41:34:ea:61:f9:02:f8:ae:49:c9:8a:02:06:30:
af:53:f9:6a:2a:0c:5c:3f:f2:96:37:62:26:fa:a1:70:59:35:
02:a1:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:32:54 2026 by rpki-client