Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
File: bqGhD32UTazB3sBBqqVZ1SK_uus.mft (raw, json)
Hash identifier: VyIZbEkZwTV+x4mDq4UvB6LDiSMGa1Lgl6Q/WpRKHkQ=
Subject key identifier: 12:1B:85:93:C2:47:72:6D:94:4E:F1:CF:6A:2D:4B:F3:B2:E6:30:C7
Authority key identifier: 6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Certificate issuer: /CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Certificate serial: 019EB733A163BE1545D3C0107F3D86182ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
Manifest number: 16CC
Signing time: Thu 11 Jun 2026 15:01:14 +0000
Manifest this update: Thu 11 Jun 2026 15:01:14 +0000
Manifest next update: Fri 12 Jun 2026 15:01:14 +0000
Files and hashes: 1: MlEQyi_yZNAza-bcGtf2VB3mhRg.roa (hash: dZzyG8cQWX5m4tOkdaQgc1WeGegOVYoaopmc4TyCRRU=)
2: bqGhD32UTazB3sBBqqVZ1SK_uus.crl (hash: RWGqFN0/m20xJQzYa/+NVNOy5Nitmy4F71HMB+S6Mgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:a1:63:be:15:45:d3:c0:10:7f:3d:86:18:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Validity
Not Before: Jun 11 15:01:14 2026 GMT
Not After : Jun 12 15:01:14 2026 GMT
Subject: CN=121b8593c247726d944ef1cf6a2d4bf3b2e630c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:cb:71:1b:f4:16:20:9f:bc:0d:60:a0:3b:
a1:ce:54:e3:3c:21:4e:ed:a5:a2:f3:6d:21:d3:02:
20:e0:50:f9:ef:a5:c5:83:a0:e4:83:64:bc:1a:18:
30:3d:99:0e:66:79:73:79:79:9d:53:c9:45:2e:bc:
06:d9:7b:16:af:c8:84:6a:2f:6e:c1:ef:79:59:fd:
e7:1d:35:c5:0b:f6:eb:e8:f4:e5:fc:26:57:93:8e:
dc:2c:a6:b6:da:82:fc:50:2b:63:18:3b:e1:fc:28:
f3:41:fd:ec:cd:7e:ec:e5:b8:0a:1a:12:c6:a5:0a:
43:17:98:35:dc:2c:f2:bc:20:3c:73:41:13:51:74:
52:af:ae:29:03:8b:dc:75:92:dc:30:6e:ba:c7:37:
be:fc:91:95:6f:c4:95:40:e3:56:77:08:d7:65:a1:
d1:76:69:c2:49:3a:fe:f8:8d:35:e7:67:e8:d7:6a:
4e:49:b3:76:6d:bb:89:9d:26:f8:5b:8f:70:03:68:
2e:85:d6:46:34:21:47:b0:a9:10:7a:2f:75:c5:ed:
86:a6:4b:61:f7:8f:29:ed:a0:16:83:f0:55:b9:ad:
70:05:ff:5c:13:c2:5e:31:7e:e7:b2:b1:3b:c3:05:
42:bc:cf:39:32:a2:37:22:b1:1c:24:5a:55:54:01:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1B:85:93:C2:47:72:6D:94:4E:F1:CF:6A:2D:4B:F3:B2:E6:30:C7
X509v3 Authority Key Identifier:
keyid:6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f8:fb:83:62:d8:9e:c6:16:bb:99:0e:f6:c4:1e:ef:76:ba:
e7:32:86:d5:22:7c:b6:00:50:50:ef:2c:2f:b3:63:a0:20:3b:
80:8b:51:94:24:67:f4:59:aa:87:9b:06:e7:10:6b:93:98:b6:
24:0c:6e:84:ae:b8:6c:61:1c:f2:65:19:c6:b5:1b:b9:ca:55:
b9:5a:9a:d2:d4:aa:72:58:36:a3:d5:35:03:b4:ff:bc:1a:b1:
34:83:fd:6c:b5:26:17:a8:f0:9f:61:a3:82:d7:9a:d7:8c:f7:
c5:16:1e:10:b6:45:35:a6:16:c2:9f:91:93:5c:2c:ca:99:a9:
12:05:fd:7c:1f:7e:8d:f5:8b:1c:43:e1:ae:d8:43:28:60:69:
ce:cd:6e:98:82:d9:92:7f:e5:da:5b:76:7e:8c:64:b0:35:53:
17:18:f3:f1:80:87:e4:dc:6d:3b:79:21:d1:03:74:1d:06:c2:
95:4c:f4:30:68:da:7c:70:3c:c3:26:71:f9:cd:e0:7c:e5:2f:
d9:ee:5a:29:3b:ea:d0:84:4d:f3:e6:ce:e0:e1:77:77:a0:38:
b9:5d:27:d3:56:53:5e:49:68:d5:f6:e9:f1:00:c5:bf:fc:5f:
67:0d:c0:43:04:a1:b3:07:55:65:73:e4:cc:2b:12:4b:05:37:
77:d7:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:56:41 2026 by rpki-client