Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: t3XoLtAKeSlZ+dnOXe6SIDuyXdWkwM6xeQ6LS/G+AAQ=
Subject key identifier: 8E:B8:08:41:94:DB:86:90:BF:8F:4D:7A:7E:F9:E5:57:CE:31:C1:BA
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 01A17739AC3C219D6503A8F9B3C67CC9C33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 0518
Signing time: Mon 26 Oct 2026 08:00:30 +0000
Manifest this update: Mon 26 Oct 2026 08:00:30 +0000
Manifest next update: Tue 27 Oct 2026 08:00:30 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: et11VSBAyFJp53+eG+kTED13PMGq9CgTHFaySlrcgTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:39:ac:3c:21:9d:65:03:a8:f9:b3:c6:7c:c9:c3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Oct 26 08:00:30 2026 GMT
Not After : Oct 27 08:00:30 2026 GMT
Subject: CN=8eb8084194db8690bf8f4d7a7ef9e557ce31c1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:38:f8:1e:73:33:e4:fc:da:46:f1:a5:41:
23:7d:28:85:4f:51:b4:fb:70:93:8d:5c:ee:22:8e:
1b:32:8d:50:c9:80:90:96:c5:f1:13:00:f3:0b:e7:
6b:58:89:25:a2:d2:43:c1:1b:5c:20:a8:fb:6f:b5:
88:03:89:40:20:31:25:3c:91:0d:08:17:b3:62:a3:
12:3b:5e:df:b6:21:59:66:a9:cd:e3:bc:ab:0d:e0:
5d:e1:64:ee:9b:2e:6b:77:80:17:8a:5c:38:03:4e:
d0:82:b6:e3:6c:1a:8e:39:f2:47:57:9d:93:09:7e:
9e:8f:6d:88:5e:ef:e0:3b:d6:11:b4:54:f7:d1:76:
19:d1:97:22:39:c5:fb:aa:3d:47:6d:8e:a3:56:8f:
26:da:5c:75:91:a2:70:e1:de:06:ce:01:02:27:f4:
73:ad:5e:a1:5a:dc:48:9d:c8:06:c6:7f:f5:e0:b2:
c8:a3:58:cf:de:29:d0:4a:f5:96:d8:3c:48:af:63:
a1:e9:f9:aa:8f:44:42:24:b4:9e:11:0f:ec:b5:47:
fe:50:3c:84:78:3e:6a:ad:c3:aa:f6:03:62:99:28:
c9:30:9e:f3:78:5d:d6:a0:f8:40:85:70:22:45:5a:
60:84:cd:c1:f0:13:20:24:09:da:e1:00:25:30:79:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B8:08:41:94:DB:86:90:BF:8F:4D:7A:7E:F9:E5:57:CE:31:C1:BA
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:25:17:2b:83:3b:b2:01:72:66:33:ac:ed:b5:78:ee:4f:49:
8b:da:40:08:08:a9:79:31:f9:47:61:e8:fb:01:1b:f8:5f:53:
a5:9c:e9:bb:51:f4:21:11:cc:b5:56:e9:0f:40:3f:11:94:3a:
b4:d9:87:70:28:9d:fe:74:b4:73:00:4f:58:aa:85:8f:85:bc:
09:27:1f:0b:33:67:86:e8:18:40:a1:9c:af:2b:56:53:05:eb:
cd:40:19:29:09:3c:59:7a:d3:43:ad:b8:96:56:11:dc:94:69:
c0:51:5b:33:bd:a6:f9:f6:b4:46:77:53:85:68:48:1f:b4:4b:
6d:e0:92:20:b4:14:d0:a2:bb:89:68:a4:2c:87:07:78:ec:40:
0d:30:ae:03:bb:3a:ef:46:2c:9a:e0:4c:ff:49:26:1f:12:1e:
fc:6f:2d:57:09:51:b5:e8:8d:d8:18:ce:9c:cc:cf:50:4e:5b:
73:79:c9:e1:8a:61:f7:06:12:9a:1c:39:ec:94:67:69:09:76:
a1:80:cc:99:77:1a:c9:6f:08:61:4e:20:c5:5d:13:0c:94:62:
69:98:d1:9e:c0:b1:c8:1a:60:c4:20:65:c6:37:2f:fb:ab:f4:
82:e5:a5:49:ef:70:da:46:9a:38:ba:06:ca:58:e3:72:b8:7f:
77:4e:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:09 2026 by rpki-client