Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier: 9qpJOgKTW+03QBROsU49H+3sPRsr6YecnvXqkN8T8Og=
Subject key identifier: 5C:99:C7:B4:BB:ED:D0:16:46:02:1B:C7:0E:5A:DE:5A:5F:B2:8B:E9
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial: 019DA89E103C6A67CBEC4C5EEE9B345685FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number: 0E23
Signing time: Mon 20 Apr 2026 02:00:24 +0000
Manifest this update: Mon 20 Apr 2026 02:00:24 +0000
Manifest next update: Tue 21 Apr 2026 02:00:24 +0000
Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: lHsvljXKfWdxVgVGyU12k8kWx2X2V/vssQIASwwVtDw=)
2: qPxd8qMxhd6Yq15uwp5rXHAxZ2E.roa (hash: 7ZX3c0L8iUXI21GiIPtHoJrfkVa81NDxH/D4ulRW6l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:9e:10:3c:6a:67:cb:ec:4c:5e:ee:9b:34:56:85:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
Validity
Not Before: Apr 20 02:00:24 2026 GMT
Not After : Apr 21 02:00:24 2026 GMT
Subject: CN=5c99c7b4bbedd01646021bc70e5ade5a5fb28be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:8d:26:3e:a2:8e:bc:58:f1:21:a1:03:46:
50:34:9a:bb:b3:34:24:77:f6:16:ab:cb:b5:8e:43:
99:ce:5c:56:2a:58:11:ce:8b:9c:cc:09:a9:87:7d:
a2:d9:1d:f8:4c:cc:15:eb:28:fe:74:9a:d4:8e:9e:
39:fa:7d:3b:d8:8d:9e:a2:ea:2a:b6:5f:8e:2e:3f:
2d:96:fa:cd:a4:7f:44:ba:ad:00:73:85:9e:1a:3c:
8c:a4:29:3c:8f:c6:ca:69:d1:0d:7f:43:d1:88:a2:
c2:41:9f:18:62:d9:fa:dc:52:b6:8c:3d:7a:9e:3b:
de:aa:52:d3:95:5a:53:17:7c:97:78:74:eb:2b:b7:
c1:e3:1b:a9:42:22:2d:6d:91:4f:a6:b6:ab:7f:53:
b1:d7:69:c5:4c:06:d4:a8:54:64:80:2c:36:58:8f:
03:e9:12:da:64:d0:ea:92:9a:52:13:d5:72:04:08:
62:de:22:08:c1:49:79:78:7d:65:63:70:f9:36:0c:
f7:3a:e5:cb:40:af:75:da:37:e8:c8:4c:41:e4:59:
cc:a2:c9:65:39:8d:d9:a5:69:b1:60:c6:31:ab:b0:
6f:92:90:ad:9e:4d:3b:e9:2d:10:4c:73:a8:09:9a:
57:3b:22:b2:d7:d5:e2:6b:35:0c:f2:94:2c:2b:b0:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:99:C7:B4:BB:ED:D0:16:46:02:1B:C7:0E:5A:DE:5A:5F:B2:8B:E9
X509v3 Authority Key Identifier:
keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5a:e7:eb:7e:ff:e8:32:99:d0:66:90:35:6b:4d:2c:80:99:
5c:79:a9:8b:d5:0c:43:66:4e:6e:78:a9:5d:d8:af:68:d4:84:
f4:88:fa:c8:21:d6:39:6c:a2:58:ef:b6:c3:32:f1:b2:d9:de:
b3:89:21:21:1d:7f:c6:b5:6f:32:b9:af:a4:6f:7d:66:1b:41:
51:20:ec:9b:d0:69:3b:f5:a7:56:0b:a4:18:11:1c:73:e4:b7:
c4:c3:0a:48:1a:5a:9d:91:7a:0b:bc:ee:35:03:cb:71:ba:9e:
93:ed:c8:5b:60:89:14:3c:b7:76:ed:36:ef:c8:8c:c0:b2:92:
cc:dc:63:eb:e4:67:00:b9:90:59:25:cd:d7:dd:01:f4:44:cb:
1f:e1:3e:ad:97:6d:2b:ad:f5:f6:64:f3:ee:b9:6c:32:67:0a:
c6:97:86:a9:64:0b:38:3f:8d:89:e0:83:d4:cc:07:91:36:86:
60:d6:00:df:e6:d7:98:36:56:98:b8:b7:94:ae:45:2b:07:5e:
e4:94:86:4b:ef:54:65:0a:d0:06:80:33:52:3e:7d:89:5c:9d:
f9:d3:64:ae:ee:71:ee:d5:b2:32:c2:df:71:d8:73:67:86:11:
5c:3b:89:48:76:56:1f:00:56:b8:86:d3:c9:ce:86:3f:d6:3e:
77:ba:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:39:12 2026 by rpki-client