Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: ikHTUxMaEk5EfIbxQLb4iV2VZefWXFd/ZzpJbmM+U1E=
Subject key identifier: B2:43:40:27:98:5E:66:81:EF:76:04:2F:0F:DA:0B:FE:6E:98:0D:76
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 019FA1BAFE7D58C25B28B7BB60FCB7217437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 04:00:14 +0000
Manifest this update: Mon 27 Jul 2026 04:00:14 +0000
Manifest next update: Tue 28 Jul 2026 04:00:14 +0000
Files and hashes: 1: 4xId8u9b8q-lFzit0aeMYHf1aos.roa (hash: bIiCjOm59k2+DaEA+uzk+kXF+YggLiyq1ws6GVtubmE=)
2: 594tnBsvKIUtd354L79eWkALjbo.roa (hash: se6HFx5gFtOCN0fAvBEYpmYqysJi5f0hio8lxmXV1GI=)
3: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: CHE7S1F2MQhn4e9FPIfA0o8JkazC/L8H4ljfQr13FJ8=)
4: Ya-kXllajOG6K2U169D7kPW5oi0.roa (hash: Mi0AdJaGKYxd/0M8GSDpvWwVqIj1KoyYG1wJ5svzyI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:ba:fe:7d:58:c2:5b:28:b7:bb:60:fc:b7:21:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Jul 27 04:00:14 2026 GMT
Not After : Jul 28 04:00:14 2026 GMT
Subject: CN=b2434027985e6681ef76042f0fda0bfe6e980d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:0c:c4:3c:eb:79:34:c6:56:db:ce:57:c9:
42:21:c4:e0:d5:59:09:4f:fa:bf:e5:0f:d7:4c:69:
39:1e:d6:97:5c:70:0c:09:7e:9f:96:3b:fe:29:f6:
6b:35:72:28:94:ce:62:25:54:31:90:f1:74:4e:62:
e1:56:87:98:36:35:2d:19:31:41:39:6e:09:f4:a1:
75:44:58:0c:37:c3:c9:5f:96:7d:e4:3d:87:89:45:
8a:22:12:6e:f8:38:61:5c:8d:b5:f3:dc:4c:90:85:
2a:11:1a:6a:0e:1b:b3:4e:12:59:94:63:36:79:92:
c6:ec:2a:d1:75:b7:51:ae:3b:41:8a:a8:b6:c2:63:
36:0c:bc:a4:21:75:db:23:81:01:5c:d8:bd:43:66:
bf:67:d7:0b:9d:63:a3:42:de:a6:8e:ed:29:2a:a5:
2f:9b:60:58:f1:1d:b3:25:c1:f5:e7:96:34:1b:0b:
a9:82:c9:10:7a:cf:56:d7:0d:e8:27:7b:f4:bb:4f:
45:bb:00:7c:4d:0d:6d:b7:5c:a0:28:70:51:65:cb:
39:55:54:76:79:0c:94:fb:23:f0:2d:b3:6c:64:48:
1c:1a:dd:da:55:45:cd:9a:89:f5:de:1f:3c:5b:b6:
c0:57:fe:3d:ad:06:85:81:4d:37:87:cb:c5:11:73:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:40:27:98:5E:66:81:EF:76:04:2F:0F:DA:0B:FE:6E:98:0D:76
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c8:ba:e4:bf:49:54:70:e9:dc:4a:95:fb:b5:f7:fc:8c:29:
3f:a6:46:f5:0d:44:0a:43:7a:b8:86:c0:d7:9e:2e:fa:21:9f:
78:6a:b0:91:b3:ef:e0:6b:63:4f:ef:82:28:5a:04:56:ca:16:
60:f6:62:3c:dc:78:00:9c:05:af:01:fd:f5:f0:74:88:19:0a:
6b:ea:68:79:72:bb:5f:c4:64:94:cb:74:f2:37:39:1c:7b:a3:
3e:27:1a:33:6d:d4:01:58:81:df:d6:8c:42:33:09:49:94:63:
cf:ea:40:a3:56:1f:aa:9c:ff:7d:dc:9f:f2:80:c5:49:91:69:
80:17:03:40:65:46:78:a9:ba:ae:bb:a6:69:30:b2:a0:e5:bf:
59:b3:c9:ea:89:66:35:a6:a4:c1:1c:fb:79:39:ae:d7:de:b4:
85:e7:8c:4f:de:79:f4:68:1c:da:f0:cd:12:8b:d2:b6:da:79:
10:73:39:42:ca:6c:d2:87:34:c7:2a:8b:f5:7a:91:d1:a3:1d:
77:72:e5:33:b1:3c:4c:52:6f:43:0d:c2:de:bc:dc:68:ef:7e:
2d:94:a5:87:bb:6f:d4:0e:17:14:46:1d:28:5c:2f:0f:c6:a5:
6e:27:4e:dc:75:a5:b1:25:67:9b:54:6f:f4:c6:f1:dc:46:1f:
07:19:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:27:18 2026 by rpki-client