Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: plFyHJ+85M3xQLsITkYSIqXkzCgXyrOmQwLEstpCOAg=
Subject key identifier: 6F:BD:C1:7C:2F:09:90:10:4E:74:DE:EF:A3:CC:78:63:F7:F2:BC:5C
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019CE4EC801C4467BC0AFC84DA35B4FEFD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 02BA
Signing time: Fri 13 Mar 2026 02:00:30 +0000
Manifest this update: Fri 13 Mar 2026 02:00:30 +0000
Manifest next update: Sat 14 Mar 2026 02:00:30 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: p1MX6B5SDdhOWuHbafSWeH97lfyk6HkdKE7UwHMc4Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:80:1c:44:67:bc:0a:fc:84:da:35:b4:fe:fd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Mar 13 02:00:30 2026 GMT
Not After : Mar 14 02:00:30 2026 GMT
Subject: CN=6fbdc17c2f0990104e74deefa3cc7863f7f2bc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:74:1f:60:b6:e3:1b:e7:8e:1b:b5:87:a0:
b3:b9:a1:88:8b:fa:8e:e2:c1:92:41:2c:94:5c:9e:
31:65:1b:f7:ef:05:8d:62:f0:ff:58:41:76:90:86:
ba:19:1d:a7:7e:df:80:ed:57:41:00:68:22:e4:22:
83:18:1c:9a:2a:bc:66:c6:ba:b5:4f:77:a8:5c:e8:
45:55:73:8b:e6:6d:9b:6d:05:df:c5:fe:17:7d:ca:
7c:cb:37:61:39:e1:ff:70:55:9d:f6:4a:ee:19:33:
e6:70:09:b4:5b:60:1f:08:b6:b8:86:9f:89:26:24:
52:24:ac:6b:86:0e:48:80:59:e4:be:fa:b4:1d:5c:
a5:f6:ee:92:a5:c6:76:1d:1b:54:48:f9:1d:d8:94:
73:cd:72:4d:e7:43:08:fb:3e:d2:75:e4:d9:6a:87:
26:27:29:7b:89:da:fd:fa:27:58:19:74:80:6b:bf:
8e:8b:ab:9e:08:3b:37:84:15:9a:48:43:b0:3d:34:
6a:8d:54:82:d3:cf:a5:3b:6d:0f:9a:25:62:a9:50:
2c:c6:f1:52:4f:b2:14:16:f0:06:66:12:4c:ba:bd:
01:b0:7f:10:2d:2a:58:9f:f7:2d:64:89:68:e4:a0:
96:b8:49:ad:72:87:62:ab:08:dd:b5:4d:3c:ae:65:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:C1:7C:2F:09:90:10:4E:74:DE:EF:A3:CC:78:63:F7:F2:BC:5C
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d1:ba:ce:5b:20:89:94:16:eb:6c:20:7d:85:b9:fa:58:00:
73:65:cf:1f:6d:77:be:40:75:26:a5:ab:c4:92:34:b3:4d:c2:
c5:c0:45:97:40:ee:a2:0d:1b:e4:fc:82:5f:6c:a6:4f:26:07:
5b:58:6a:a6:80:2e:05:86:3b:dc:f6:8d:f3:ad:64:1e:d9:87:
85:58:05:1f:20:16:e4:6c:2e:9c:da:06:35:97:b7:a6:26:b6:
8d:9f:56:bb:b3:6a:3b:89:8b:bb:c6:19:56:69:33:58:93:be:
66:a9:43:13:d3:81:16:da:c0:ae:a2:38:9d:b3:4a:01:85:20:
86:59:d1:27:55:25:b5:0e:02:e6:96:88:0a:c7:c4:98:77:f1:
00:35:f5:00:f3:db:08:65:37:1f:0b:57:80:23:57:46:47:f6:
19:27:c6:cb:02:f1:59:b8:68:c4:e6:16:22:f7:50:32:a6:eb:
47:4f:db:61:0b:60:ab:b6:de:07:a5:82:8c:35:4b:ed:0e:cb:
17:13:eb:a3:d0:4f:29:ae:5c:38:29:56:66:b6:8d:81:c7:79:
1e:ea:f4:84:05:ec:5f:81:be:d2:70:4b:92:3f:f7:76:94:e7:
97:7b:77:14:65:21:bc:ef:be:65:14:5f:f4:75:75:54:07:e7:
52:a5:14:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:55:54 2026 by rpki-client