Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
File: bqGhD32UTazB3sBBqqVZ1SK_uus.mft (raw, json)
Hash identifier: 4JOggRxtAeVgEfJB3GQ560rXXb8V7+edSx2GO0I4CXY=
Subject key identifier: 2A:38:C8:B6:6B:4C:A7:F9:75:11:6F:E2:2D:11:88:C1:74:4A:3D:DC
Authority key identifier: 6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Certificate issuer: /CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Certificate serial: 019FA0E076251FEF54E9A5862DF25CF8D557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
Manifest number: 1745
Signing time: Mon 27 Jul 2026 00:01:32 +0000
Manifest this update: Mon 27 Jul 2026 00:01:32 +0000
Manifest next update: Tue 28 Jul 2026 00:01:32 +0000
Files and hashes: 1: MlEQyi_yZNAza-bcGtf2VB3mhRg.roa (hash: dZzyG8cQWX5m4tOkdaQgc1WeGegOVYoaopmc4TyCRRU=)
2: bqGhD32UTazB3sBBqqVZ1SK_uus.crl (hash: mScRNn3/WcT6KEZg1bqQb8NSoZncuDqKixymi4PP44s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:76:25:1f:ef:54:e9:a5:86:2d:f2:5c:f8:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Validity
Not Before: Jul 27 00:01:32 2026 GMT
Not After : Jul 28 00:01:32 2026 GMT
Subject: CN=2a38c8b66b4ca7f975116fe22d1188c1744a3ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2c:25:49:92:98:28:d0:14:0c:ee:5b:04:6e:
83:dc:e4:9d:1d:0e:dd:f2:e0:36:10:8c:4f:9e:77:
31:7d:a1:ee:b4:70:d9:b0:59:20:cd:c1:54:29:c1:
0d:24:75:79:43:61:52:44:2b:d3:f8:b3:d3:8e:22:
c5:36:92:ad:b1:a3:69:e7:3f:40:ae:8f:bf:81:a4:
5b:8e:61:65:41:88:8f:d5:f2:2d:23:2f:a4:75:a9:
66:3f:38:25:b5:ab:c1:75:22:cc:32:bd:e6:0d:6e:
2b:41:ca:2d:7c:65:5e:8e:da:11:aa:3e:f7:ba:bb:
bd:08:75:bf:0a:27:82:bb:b8:ab:e8:39:b1:bf:7a:
b9:89:59:e4:62:c1:66:15:dc:d1:33:7e:89:11:7b:
83:2f:4c:8f:8f:03:b6:50:4f:67:84:c4:85:cc:a0:
66:41:09:37:f4:e8:2c:61:c2:c8:44:d4:47:4a:02:
4d:ae:9b:cb:4b:ed:4d:00:f4:64:99:2b:72:7e:51:
16:d3:18:a8:d6:0c:79:6f:ac:04:39:9c:0e:cc:43:
38:50:09:5b:61:e4:1a:6f:86:89:07:83:24:9b:f5:
27:f7:7f:08:c9:5b:ca:bd:7c:85:d9:4c:18:be:94:
09:5c:98:4d:e8:94:0b:52:84:f6:c9:a5:af:4a:f9:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:38:C8:B6:6B:4C:A7:F9:75:11:6F:E2:2D:11:88:C1:74:4A:3D:DC
X509v3 Authority Key Identifier:
keyid:6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d4:c4:bf:c5:74:b9:48:44:63:85:f0:33:b0:0c:eb:59:9d:
06:92:65:fb:41:74:3c:78:92:92:f1:c7:70:c8:ab:e3:73:d2:
b7:4d:25:18:40:30:de:bf:78:8a:ce:f0:d5:00:a0:92:8b:c3:
6d:18:17:c2:c9:0b:79:5a:bf:62:1d:db:29:3e:42:61:ba:a1:
f9:63:77:c7:4c:1a:13:c0:3d:f4:2e:43:77:0c:da:a5:0d:33:
5a:28:30:b5:4a:74:0b:62:5e:4d:46:ad:8d:b7:db:88:2c:3a:
f6:6a:06:10:9e:e0:77:67:a2:dd:02:66:31:15:92:b0:8e:41:
20:05:08:24:6e:aa:aa:80:05:92:ac:d2:10:48:91:a6:99:dd:
50:ca:e3:13:1a:49:5f:02:02:2c:d4:77:e0:a0:be:79:65:62:
43:f3:64:78:c6:fb:89:1a:97:4b:8f:1d:9e:88:3b:ab:57:29:
e7:f0:c5:c5:b9:0e:0b:1d:28:97:7d:85:3f:fa:87:ab:28:ee:
27:26:b8:b7:f2:5b:72:d6:d1:94:3a:4b:00:f6:6d:3b:4a:6c:
37:4e:bc:23:18:a9:62:e2:ce:2a:69:1c:e5:a5:95:99:b9:65:
56:62:b3:21:33:cb:4b:e8:db:31:17:19:79:33:d0:3e:ef:27:
85:4c:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:49 2026 by rpki-client