Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: IKfAKCQM7kNkhgdJSIyvuqYOztrBgxqTNInUqxgj9TY=
Subject key identifier: 67:D9:89:0D:6D:A4:C4:05:0A:4A:CD:44:B6:2C:80:7E:7E:AA:15:CF
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 01A13ECB5084C726DF0E6C9C126A37D147DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 0F33
Signing time: Thu 15 Oct 2026 09:01:14 +0000
Manifest this update: Thu 15 Oct 2026 09:01:14 +0000
Manifest next update: Fri 16 Oct 2026 09:01:14 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: nqrVve3FtS/x9hb2eYwAkQeHEoidbRnfoVKmQYkvCQ0=)
2: WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa (hash: eWCCmbbu8zh+FEmFkCBwJkZKgrWzGjOAichsxrS7Hww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:50:84:c7:26:df:0e:6c:9c:12:6a:37:d1:47:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Oct 15 09:01:14 2026 GMT
Not After : Oct 16 09:01:14 2026 GMT
Subject: CN=67d9890d6da4c4050a4acd44b62c807e7eaa15cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:d2:3f:3e:56:d1:db:9e:3a:43:d4:08:c8:
e1:ae:04:0d:ee:6d:cb:8e:d6:35:f6:24:c5:ad:5a:
12:2d:2f:40:aa:ca:1b:3f:bf:9a:ca:10:97:63:f6:
03:2c:e3:9c:fc:38:53:e7:9c:be:98:e0:4a:a5:e7:
64:53:89:92:77:5e:6e:ef:fe:97:dc:44:47:97:5d:
d7:06:ce:d6:2c:13:24:cc:07:9e:51:07:5b:0a:50:
26:0d:9c:c7:85:15:85:3f:35:5d:dc:69:1f:7b:70:
10:bd:99:b3:28:55:8b:7e:29:b2:e7:e9:32:9a:63:
12:22:e0:f4:a7:b2:16:bd:e8:6d:87:59:12:97:dc:
2a:0c:27:ab:fe:d4:9c:0e:c1:55:5e:83:51:42:6b:
03:d1:2c:36:e2:a4:e7:20:f3:56:3d:08:6a:20:65:
7a:2c:52:ca:ed:25:8f:92:b2:1b:96:b4:ba:96:89:
fe:79:ff:21:18:ad:bb:23:45:3f:16:6c:08:20:4e:
68:20:ca:5e:77:78:18:3d:e4:ea:a4:88:c7:74:49:
d7:b3:05:bd:8b:da:ae:dc:ac:bc:7b:06:88:0e:cf:
d9:53:70:3d:9a:c9:c1:52:52:e2:8e:1e:67:89:1b:
42:a7:09:22:0d:0c:7a:86:b6:c6:e6:d8:d8:94:42:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:89:0D:6D:A4:C4:05:0A:4A:CD:44:B6:2C:80:7E:7E:AA:15:CF
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:15:2b:66:2f:59:21:23:af:a8:4f:04:6d:fe:3d:82:f2:b5:
03:8b:5d:e4:53:c1:42:9a:aa:22:17:58:3a:c4:24:bd:33:a6:
b1:2f:83:16:65:8b:bf:09:c6:d5:4a:3f:70:c2:47:46:f3:3c:
c8:62:11:ec:5b:8b:5e:9f:eb:18:1f:28:6f:55:11:a1:ee:59:
7b:2c:76:85:29:ef:af:24:ac:a0:69:c4:d1:7e:a6:c4:6d:c6:
f8:11:0d:05:a4:55:9e:59:50:d1:61:83:2f:ab:db:1f:73:50:
d3:3b:29:6f:ec:77:23:42:25:c4:e2:76:42:9e:23:9f:df:aa:
d2:ef:11:9d:11:74:5b:1c:9f:69:c1:66:05:00:32:d3:a6:2d:
4f:02:7c:cd:bf:e3:f4:9c:f2:c0:83:a8:b8:94:f4:92:69:51:
78:39:bc:25:f8:99:66:7e:15:94:89:dc:bc:79:76:73:b2:65:
54:d1:13:5a:d5:26:ed:78:0d:cb:1e:6e:c0:2d:30:55:64:aa:
44:4b:c7:9f:ea:71:03:de:84:53:fd:9d:94:a0:5d:08:96:7f:
62:88:29:d8:07:33:22:24:0d:f0:2d:30:f8:05:f7:ed:ee:bf:
57:df:cd:55:af:6f:68:44:30:96:f7:ec:d4:c8:7a:a3:ba:0a:
57:49:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:40 2026 by rpki-client