Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier: dDF1AZs1p9WfKaTro4QYK2iLRmJPvTf9ZVpcqWmk3u4=
Subject key identifier: 98:49:E3:2E:1D:E0:30:F5:84:DF:E7:CD:75:0C:A3:C8:0D:8C:43:83
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial: 019CC0E0960ACF3CA9B872E3ACA2E66083F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number: 0DAB
Signing time: Fri 06 Mar 2026 02:01:09 +0000
Manifest this update: Fri 06 Mar 2026 02:01:09 +0000
Manifest next update: Sat 07 Mar 2026 02:01:09 +0000
Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: bYNs3IiDHDTDdvpuGWjKrV6w8lbTuVssGpYlN8s3G5s=)
2: qPxd8qMxhd6Yq15uwp5rXHAxZ2E.roa (hash: 7ZX3c0L8iUXI21GiIPtHoJrfkVa81NDxH/D4ulRW6l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:e0:96:0a:cf:3c:a9:b8:72:e3:ac:a2:e6:60:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
Validity
Not Before: Mar 6 02:01:09 2026 GMT
Not After : Mar 7 02:01:09 2026 GMT
Subject: CN=9849e32e1de030f584dfe7cd750ca3c80d8c4383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:1d:1c:39:31:0b:2b:e2:1c:93:f7:d3:62:
e5:78:bd:72:54:a6:6c:45:87:8e:4e:78:35:66:47:
2d:8c:7b:a5:77:69:00:ad:1c:c5:35:70:92:8a:78:
4f:39:80:d0:d7:2b:d8:8e:68:a7:e9:68:e7:a5:16:
19:0d:92:ec:ad:d5:8e:90:78:7e:01:32:23:15:db:
e0:c6:8c:d7:54:64:d9:9a:c2:2c:15:5b:d5:a0:19:
6b:d9:f7:c8:cf:62:e0:9f:89:ec:ee:5c:c5:9c:18:
da:5e:8f:0a:71:c2:c1:e3:b6:b3:0f:5b:df:41:ad:
a6:f5:07:61:3f:ba:62:d7:4b:c2:76:d1:86:65:10:
14:75:dd:b9:76:dc:db:fa:6b:e9:99:44:c2:6d:9f:
0f:df:2b:b2:b4:7d:dc:fd:06:b3:c8:93:d0:75:e2:
99:e4:b2:b1:12:e9:97:b4:9c:24:ed:67:f5:94:08:
11:05:0f:d5:74:62:30:0d:b6:8a:a1:4c:19:34:fa:
9f:90:88:a4:02:5d:67:d4:8a:8a:93:2b:62:91:f5:
91:be:95:d9:10:da:0e:e9:f2:a1:af:1f:ce:d0:32:
27:6a:b0:b3:dc:46:7d:4d:b6:2d:4d:38:08:a6:25:
c2:f8:22:fc:7f:13:58:72:c1:60:7a:bb:85:2e:fd:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:49:E3:2E:1D:E0:30:F5:84:DF:E7:CD:75:0C:A3:C8:0D:8C:43:83
X509v3 Authority Key Identifier:
keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e0:65:4c:76:12:92:7e:74:67:53:4b:20:06:f6:d1:24:8f:
5e:85:97:b6:b5:24:51:83:e4:39:0e:94:fa:07:e6:6e:5b:a5:
81:27:1e:02:f3:0e:0a:13:bf:c1:b1:a0:8c:8d:72:72:29:04:
e3:c3:87:a2:45:32:9b:6f:9a:30:cc:5a:f2:6c:29:8b:14:b6:
2b:81:2b:86:ad:c7:89:2d:e5:42:cb:eb:2b:70:7f:c2:34:44:
7b:03:7a:88:51:61:b1:13:52:72:01:bd:06:df:91:91:cf:6a:
ef:ec:e3:59:8b:6a:89:5e:7f:c3:33:cc:48:54:d3:c9:64:2f:
65:be:6f:fd:68:9e:f2:79:69:75:86:32:98:e7:68:38:08:89:
33:47:94:9f:ac:89:8d:06:fa:07:80:2b:22:60:bc:4d:4a:cc:
8a:7c:88:22:cf:cd:00:e5:65:ff:3c:56:15:f3:9e:3b:a3:49:
3d:5a:80:15:26:47:33:a3:e6:bc:eb:ed:eb:e2:83:ae:6e:e0:
3a:f0:60:10:17:1d:c9:2f:00:b0:99:45:61:06:8c:88:c2:39:
9d:81:15:08:93:a1:54:06:dc:57:9e:e3:b8:d7:3e:1c:03:68:
9b:ea:ba:29:38:a2:c4:64:4a:21:3c:10:f4:4a:95:a6:bb:da:
e7:dd:9d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:58:36 2026 by rpki-client