Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: /7rPhnOSg0G2xAWtjMCBU03HCEbTfU3T0XIgMI4zf6E=
Subject key identifier: 01:84:EA:4F:31:9B:50:EF:55:CE:B3:41:6A:16:14:88:60:80:8B:1B
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019D39AEB771DBDC833ABE306EC41516BD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:00:44 +0000
Manifest this update: Sun 29 Mar 2026 13:00:44 +0000
Manifest next update: Mon 30 Mar 2026 13:00:44 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: RqN8bpHNubhw6WmXEuVMVrWXERpyH9SLQHJB6tnP3G8=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b7:71:db:dc:83:3a:be:30:6e:c4:15:16:bd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Mar 29 13:00:44 2026 GMT
Not After : Mar 30 13:00:44 2026 GMT
Subject: CN=0184ea4f319b50ef55ceb3416a16148860808b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:c7:0d:12:db:00:86:97:67:d3:2f:19:1d:
dc:63:1a:9e:ea:e0:a7:c4:a3:20:64:2c:df:84:c3:
ab:72:bb:7a:5e:29:dc:d5:05:dd:5a:da:30:e7:c2:
d1:d2:08:e0:e8:1d:86:f0:34:dd:a9:30:95:6c:72:
ca:1d:78:56:b9:1f:ac:d0:aa:ac:70:6e:2c:60:b9:
28:90:e8:6e:7c:3d:02:d0:ba:94:f7:67:6b:ad:4c:
6e:f8:cf:97:e2:3d:2a:69:e5:2f:0b:80:1c:c5:de:
a1:fd:f5:e6:15:a5:bd:95:49:94:84:57:41:bf:b4:
13:cf:a2:29:5b:f7:9f:a5:56:1b:5e:0b:5b:8a:34:
e4:87:d4:26:23:a2:7e:29:b5:91:5d:94:d7:fb:b5:
fc:b0:83:7f:bc:3a:99:c8:92:44:9d:22:e4:89:8c:
ad:b0:4b:c6:d0:6d:f0:59:2c:b8:7c:6b:68:f7:76:
f8:eb:08:ff:bb:10:ec:a6:a1:71:9e:dd:ea:26:0b:
3f:db:72:28:d6:1c:c6:fe:f8:55:fc:39:79:f3:ee:
d2:5f:57:d1:c6:31:cd:e1:4b:13:9d:ef:6d:3d:0f:
2a:7c:31:0b:d2:ec:e9:7e:f5:02:40:84:2a:43:8e:
ba:6f:bf:c8:52:80:4e:01:57:04:40:e1:60:a3:42:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:84:EA:4F:31:9B:50:EF:55:CE:B3:41:6A:16:14:88:60:80:8B:1B
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fc:19:e1:a8:f7:98:6d:85:8c:4b:2c:87:67:db:48:53:38:
72:1e:68:24:e4:21:18:60:b3:3d:55:9f:cd:e8:36:cc:66:12:
03:0a:b6:37:92:fe:cb:f2:d8:5c:dd:32:f1:05:db:34:74:01:
21:d7:48:3d:60:a2:27:3a:82:a8:d6:63:5d:17:7a:a4:05:dd:
d3:a4:2d:1f:d6:5f:59:b0:e7:ac:e1:31:4a:95:6b:2b:5c:0c:
84:18:19:ea:b0:79:1a:0a:6d:fd:49:42:ec:9d:7a:25:69:ec:
6a:4d:eb:47:9e:13:aa:7c:e0:6a:ad:45:5b:ab:48:e3:5f:d5:
fd:03:63:62:b5:5b:46:09:bb:e0:df:51:27:57:d8:e5:0e:c9:
6e:50:b0:eb:f9:5d:b1:56:85:88:eb:18:a5:84:ee:48:d3:ba:
a8:70:c8:5b:82:88:80:62:bf:5c:1a:d5:80:33:9c:61:d7:40:
c2:d6:8a:73:56:aa:d2:0d:ff:6a:15:c2:9b:41:ea:a2:2b:df:
80:a2:94:50:a9:23:cf:b3:a9:09:c8:ec:bd:a1:45:60:7d:2a:
93:15:0f:35:18:9a:6f:d8:3a:25:8e:6e:87:aa:3b:a8:6a:28:
ba:33:7c:a0:8c:09:38:82:a8:69:56:d5:7c:a5:c9:2a:10:57:
e5:f5:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:48 2026 by rpki-client