Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: lb8wOv535GIlnX6XhVVpslldL5nbYOEiUmcZAKXd74k=
Subject key identifier: 1F:66:B7:E6:35:4A:38:B6:01:4E:68:0F:F8:6B:D8:CD:93:EE:23:AB
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019DD08775BFAD3A43F09497BAED3EEE8138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 0334
Signing time: Mon 27 Apr 2026 20:00:31 +0000
Manifest this update: Mon 27 Apr 2026 20:00:31 +0000
Manifest next update: Tue 28 Apr 2026 20:00:31 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: gQKNWtdMAWwhj8J0ixCdeQ94lKArq2ltfrO0yIJnqHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:75:bf:ad:3a:43:f0:94:97:ba:ed:3e:ee:81:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Apr 27 20:00:31 2026 GMT
Not After : Apr 28 20:00:31 2026 GMT
Subject: CN=1f66b7e6354a38b6014e680ff86bd8cd93ee23ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:b5:80:75:68:45:12:54:bd:a8:3b:5b:4d:
ef:35:ce:3f:05:ad:eb:ab:fb:d0:a2:0b:ae:71:43:
e9:15:7a:d0:4a:b5:2b:ef:ad:69:6e:5e:eb:d6:b6:
27:0f:d3:5c:f2:7f:e2:15:65:28:2c:df:a0:23:34:
fb:7b:a9:e2:a2:a0:97:cc:d9:80:02:98:41:bd:b3:
be:56:a7:b6:49:e0:fc:e0:2f:63:8a:c9:59:7e:44:
87:e8:c8:00:be:2a:4e:a2:d8:52:1a:e6:01:e0:86:
d9:0d:08:de:32:d3:c9:ed:0f:6b:ca:e3:07:11:75:
a1:a2:7c:e3:fd:ba:5f:e3:64:15:f5:ba:3f:54:cd:
3f:96:9d:52:e0:ba:e9:85:71:ab:76:e6:c6:9e:8d:
1a:c0:54:c0:1f:cf:03:80:1f:f6:60:67:63:13:27:
17:64:d8:ad:b6:68:cb:ba:0b:84:91:3a:fb:30:43:
cb:fc:36:3c:1f:96:63:5f:96:77:69:86:90:d8:d3:
cc:ab:1b:cc:20:21:f6:d3:75:a4:d5:04:1f:9c:ca:
f0:a0:d6:56:ce:eb:9f:53:4a:99:7e:70:51:29:bc:
38:77:13:7d:8a:a4:4a:e5:ef:a8:ad:2e:52:03:71:
08:15:40:7c:a5:00:7a:7a:5e:61:a3:54:9d:e2:01:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:66:B7:E6:35:4A:38:B6:01:4E:68:0F:F8:6B:D8:CD:93:EE:23:AB
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1b:65:39:b7:53:05:12:0a:04:35:a7:94:a7:0d:08:13:c0:
1b:fb:06:fe:31:4e:b7:e4:06:09:77:3f:02:f6:8c:21:db:a6:
37:0d:e5:87:6b:a6:71:f3:45:8b:46:73:fd:ca:39:8c:23:5e:
0e:9b:2e:32:99:e0:f6:82:cd:eb:63:19:89:c1:ad:86:fd:6e:
ac:72:3e:d7:6b:e9:20:c8:c2:51:2f:f8:26:c9:5f:43:19:78:
6f:ba:02:b3:f9:1f:56:66:f2:95:d3:19:46:d9:32:4f:1e:84:
35:56:e3:16:d7:9a:4e:3e:11:40:cf:e1:b5:59:f0:d7:0b:a6:
1a:58:c8:c1:50:2b:4a:4f:48:c6:58:f9:0a:74:30:58:a1:7a:
92:77:d2:44:42:ee:a1:d8:f7:de:f3:59:ed:6d:8f:dd:82:c0:
6d:f4:48:71:a8:d6:53:40:43:a6:f2:1f:7f:bd:7f:67:62:c5:
16:f9:e5:49:14:0b:41:c5:38:4c:83:7d:86:7f:a0:08:43:04:
e6:6f:6f:fb:50:89:95:0f:60:17:bf:d7:b9:54:12:54:9f:de:
34:5d:c8:74:4b:8f:1f:bf:72:b3:b2:a6:ea:77:1c:96:3b:42:
5c:d4:e7:7e:d3:1b:fa:73:42:76:f7:d4:60:c8:2d:80:f2:13:
2a:45:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:30:09 2026 by rpki-client