Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: fTENN6hLhGdYSjOc0O1uOKVVoxz7m4mDxNCAISjIU/o=
Subject key identifier: 10:80:64:39:77:9C:5A:65:79:2E:03:2B:A4:4C:0F:8B:08:75:6F:E2
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 01A17CCF1092EE6AA705E0C8D9B82FAD6262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 10:01:47 +0000
Manifest this update: Tue 27 Oct 2026 10:01:47 +0000
Manifest next update: Wed 28 Oct 2026 10:01:47 +0000
Files and hashes: 1: 4xId8u9b8q-lFzit0aeMYHf1aos.roa (hash: bIiCjOm59k2+DaEA+uzk+kXF+YggLiyq1ws6GVtubmE=)
2: 594tnBsvKIUtd354L79eWkALjbo.roa (hash: se6HFx5gFtOCN0fAvBEYpmYqysJi5f0hio8lxmXV1GI=)
3: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: ZkuS8mBoQUcQC9wFbwTJ3zaq3zLTTx1dlQgYkGpZXRk=)
4: Ya-kXllajOG6K2U169D7kPW5oi0.roa (hash: Mi0AdJaGKYxd/0M8GSDpvWwVqIj1KoyYG1wJ5svzyI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:cf:10:92:ee:6a:a7:05:e0:c8:d9:b8:2f:ad:62:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Oct 27 10:01:47 2026 GMT
Not After : Oct 28 10:01:47 2026 GMT
Subject: CN=10806439779c5a65792e032ba44c0f8b08756fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:c2:46:6f:5c:e8:62:07:bf:9e:b8:3c:85:
9f:2d:48:89:97:62:1b:f4:8d:e0:06:6f:62:3f:12:
86:e4:04:a2:fd:2d:a9:bb:5a:56:53:08:09:57:00:
91:be:b9:2a:8d:9d:05:c0:be:fd:0e:9c:a3:a9:db:
b9:37:e6:33:ed:aa:19:49:a4:c1:f3:64:5e:83:f7:
a6:5f:00:64:2c:8b:e7:89:7e:de:b1:02:bb:0a:c7:
1c:dc:06:87:33:15:00:a7:39:69:a2:ec:7a:72:b0:
33:59:6c:8d:c9:a5:b0:d4:5c:2d:12:9d:5f:97:21:
5c:34:50:c2:2e:03:33:7c:c3:19:be:3e:3a:97:75:
c0:48:39:87:4b:f0:23:d7:55:a2:b0:2b:5d:93:5b:
fe:bc:a8:fa:5e:7e:91:13:d7:6e:a6:f2:6d:71:35:
97:8b:71:8e:d3:76:af:d9:75:47:95:c4:47:4e:87:
78:7f:65:18:ec:f0:99:2a:34:ad:e0:b5:aa:e9:f2:
08:01:18:1c:9d:0c:60:b8:80:2c:60:b1:6e:6a:9c:
1c:3c:e2:9b:86:b3:d5:7f:dd:04:7e:f1:5f:10:19:
2b:b0:92:30:b0:4c:6e:05:ed:c9:47:d9:7e:17:cc:
ff:e6:44:2c:2e:cf:46:68:23:c1:fa:37:3e:c3:29:
fe:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:80:64:39:77:9C:5A:65:79:2E:03:2B:A4:4C:0F:8B:08:75:6F:E2
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9c:cc:80:e4:f5:bb:bb:9e:97:86:73:1d:a1:2d:ab:c6:56:
2c:d8:e3:1d:ba:c1:c5:e0:fe:61:78:91:7d:23:6d:5c:c4:08:
56:8c:09:f6:0a:03:72:a2:49:0d:f7:46:2e:ce:0c:8d:41:6f:
3b:54:17:75:08:14:86:30:f4:7a:b0:b1:70:67:d9:01:40:08:
04:bc:90:9f:29:dd:ac:ae:aa:83:57:27:8a:09:e4:f8:cb:4e:
8e:37:07:d4:53:5d:d0:6e:8e:f8:d1:28:89:11:fc:70:c1:6f:
70:44:bd:3c:81:92:f6:e4:1f:ec:94:b3:b0:94:37:f8:51:a4:
91:6f:15:58:64:b8:d9:ff:ee:b2:0a:ae:65:2d:dd:3a:2c:a9:
4d:a6:14:47:55:2f:7f:96:3c:a5:55:53:d0:3f:13:bc:7c:0d:
de:4a:cf:07:d2:c5:46:3e:cf:ec:d5:91:a1:f0:ad:82:65:c6:
89:c5:e0:9f:29:ef:a7:d4:dd:24:dd:4c:a4:62:34:d2:84:ef:
0a:e8:f5:b3:dc:47:65:2b:31:85:e4:b9:d5:a1:e4:97:2c:fc:
ee:82:56:39:13:7f:cb:c8:e0:e5:73:80:a0:64:3d:94:ae:57:
d8:68:55:81:e4:8d:c5:97:ca:6d:02:49:79:86:e6:27:02:ec:
43:3f:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:57 2026 by rpki-client