Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: gY1cXuKF+dItFT16YBsGkcflEeNgvcrV+sQjk7RSjl8=
Subject key identifier: A6:38:BB:D5:E2:D3:2E:28:DA:D0:29:40:7B:3D:6F:3A:47:88:19:AB
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019FA1F21C6E0C4FD19B7A83A37EE9B38704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 0425
Signing time: Mon 27 Jul 2026 05:00:26 +0000
Manifest this update: Mon 27 Jul 2026 05:00:26 +0000
Manifest next update: Tue 28 Jul 2026 05:00:26 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: RJyYQTUhvkGcq7hdEBlVzHw1mrg6Jo2znbZq151IBrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:1c:6e:0c:4f:d1:9b:7a:83:a3:7e:e9:b3:87:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Jul 27 05:00:26 2026 GMT
Not After : Jul 28 05:00:26 2026 GMT
Subject: CN=a638bbd5e2d32e28dad029407b3d6f3a478819ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:ee:a0:70:d9:0f:ee:e5:33:ae:ff:ee:6f:
85:ba:ef:2c:44:f0:e3:36:f5:c3:96:90:c7:da:de:
91:23:6c:da:51:ef:f1:cd:eb:e7:21:dd:d1:28:f8:
23:c6:20:9f:39:35:9c:69:91:33:0b:c3:3f:07:6d:
ff:bf:28:17:66:92:f8:ee:ce:2b:34:80:41:80:74:
0c:25:29:b4:3f:60:d2:82:9f:7b:71:ed:cc:56:e4:
f1:0b:d5:00:e5:bd:70:6e:61:9d:47:ba:5a:69:4d:
84:b2:a0:fd:86:c7:13:4e:c2:ff:78:06:ea:bc:b4:
8d:fe:32:58:9f:c3:b4:22:e8:d1:01:d6:da:00:2a:
bd:c7:80:97:db:e4:bc:db:42:cb:dc:f4:6c:5e:b4:
29:88:fe:b1:1f:51:3c:62:90:4e:95:7d:da:30:d3:
d6:31:fa:6c:8f:dd:04:24:02:9f:33:60:fd:0f:76:
20:74:0b:28:43:b9:b2:b2:5b:7f:1a:f9:71:42:8f:
d9:c1:9c:58:e6:cd:8b:c7:0c:f6:bd:01:ea:6b:04:
b6:7a:cd:98:a1:cc:72:c8:6c:e5:10:61:72:97:e9:
5e:93:a2:86:d9:71:44:4b:74:a2:9b:57:8b:87:a3:
d4:dd:f9:bd:5d:42:0a:e5:10:18:2e:fd:c8:6e:b9:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:38:BB:D5:E2:D3:2E:28:DA:D0:29:40:7B:3D:6F:3A:47:88:19:AB
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2b:c8:15:04:db:d9:3d:93:3d:14:21:63:fa:c4:98:fa:d1:
a0:f6:ae:e0:0e:0f:90:e4:09:ee:70:e8:78:2b:69:f6:63:21:
21:3c:11:b0:96:8f:bf:2e:61:0b:62:2f:e9:f3:fa:0e:22:13:
66:c1:cf:8f:64:1a:5e:32:63:ce:00:44:ad:74:cb:fd:98:d2:
99:47:6b:2d:ee:cf:0f:9a:5f:fe:af:4e:b5:be:2b:8d:0c:1a:
ac:bb:ba:2f:86:a6:13:87:ac:7c:bc:36:ed:f0:a2:3c:ad:b1:
a9:62:c4:ac:34:fc:e2:bb:79:f6:0b:49:bc:c2:14:09:ed:73:
2a:71:7f:fd:6e:df:e6:83:1f:45:b8:1b:59:f6:6c:39:ed:61:
67:54:0b:6f:8a:cc:d9:65:20:e2:34:7c:07:89:08:54:9b:ca:
33:c0:3c:62:64:28:f1:85:40:9e:bd:ba:e2:03:94:18:df:8f:
f2:78:6c:9b:1d:74:68:d9:9c:7d:4e:ff:a7:74:0d:9d:01:c7:
14:e8:93:f5:16:6d:de:09:6b:9f:03:fe:ec:99:01:0d:f5:12:
ac:6e:f3:27:72:0c:00:c1:91:25:d3:36:b8:94:f2:91:c4:2b:
75:6b:a3:cc:66:dc:eb:4f:1e:a0:8f:56:cd:94:14:c8:e9:ba:
4f:78:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:44 2026 by rpki-client