Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
File: BQ867ltqqRtsCUJRHgGsuhnnijk.mft (raw, json)
Hash identifier: +UPbuN/Fgpds97bzEg4r5wVLeJM/wysi0ou3dpCZqdo=
Subject key identifier: 14:C0:DA:33:DA:42:53:58:CF:2B:2B:91:7A:6E:80:A8:4C:33:B5:2F
Authority key identifier: 05:0F:3A:EE:5B:6A:A9:1B:6C:09:42:51:1E:01:AC:BA:19:E7:8A:39
Certificate issuer: /CN=050f3aee5b6aa91b6c0942511e01acba19e78a39
Certificate serial: 01A1084B0E5DB9345C18805C57A887841F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ867ltqqRtsCUJRHgGsuhnnijk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
Manifest number: 43
Signing time: Sun 04 Oct 2026 19:01:38 +0000
Manifest this update: Sun 04 Oct 2026 19:01:38 +0000
Manifest next update: Mon 05 Oct 2026 19:01:38 +0000
Files and hashes: 1: BQ867ltqqRtsCUJRHgGsuhnnijk.crl (hash: DkUZAp64wLNjM7JPARkRlVvBVWCbySw762zMbfdkIbc=)
2: ChG4Yj-7xo0fiewB8yaAUWU01Ms.asa (hash: fXWaCSxM8wHBYkUaaTNdf6219McvjQ8qX1GvLGW14vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ867ltqqRtsCUJRHgGsuhnnijk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4b:0e:5d:b9:34:5c:18:80:5c:57:a8:87:84:1f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050f3aee5b6aa91b6c0942511e01acba19e78a39
Validity
Not Before: Oct 4 19:01:38 2026 GMT
Not After : Oct 5 19:01:38 2026 GMT
Subject: CN=14c0da33da425358cf2b2b917a6e80a84c33b52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:45:db:de:56:c3:4f:2e:87:7c:53:64:f7:
5c:50:a8:6e:f3:17:8f:5f:a5:dc:19:8b:ed:18:33:
c1:ed:17:07:67:77:cd:f4:8f:22:af:4f:a1:99:69:
1d:2f:34:ca:75:29:4a:f4:7d:8d:cd:3e:0a:d2:e8:
a9:3d:1e:42:95:e3:f1:16:d0:3f:06:61:7c:37:01:
97:9d:54:76:02:62:83:d6:6f:d4:5b:33:73:1a:8b:
e7:a7:a2:48:af:1b:71:21:a4:34:8f:1a:5e:96:95:
32:20:d0:a2:3f:97:8f:fb:40:9e:87:a2:28:ee:5f:
dd:bf:ef:8f:e5:22:2e:e5:94:1e:71:29:34:2b:5b:
06:20:f3:cf:87:36:1d:f3:c8:14:fc:f4:65:49:64:
73:b6:b3:8c:b2:01:66:cd:9c:de:11:60:ee:a1:a0:
7b:88:b4:00:59:05:2d:00:51:6a:8c:38:09:aa:32:
df:b2:90:03:cb:0c:00:4c:77:98:88:9f:e6:48:37:
96:40:c6:9d:4b:3f:2b:2f:ff:bb:02:f1:f7:41:ff:
0b:89:d1:75:d0:e7:37:9b:bd:10:4c:0b:31:56:88:
b4:c6:9f:25:aa:9f:5f:83:9b:35:6a:2d:65:9a:fb:
57:88:45:0a:8e:6d:63:4f:e1:28:ad:eb:89:6e:04:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:DA:33:DA:42:53:58:CF:2B:2B:91:7A:6E:80:A8:4C:33:B5:2F
X509v3 Authority Key Identifier:
keyid:05:0F:3A:EE:5B:6A:A9:1B:6C:09:42:51:1E:01:AC:BA:19:E7:8A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ867ltqqRtsCUJRHgGsuhnnijk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:73:5b:14:03:87:6f:fa:2b:c7:cd:c1:c2:47:24:65:26:bf:
6f:9d:e3:9e:b9:20:23:ff:7c:cd:1f:31:17:14:40:b9:1b:f2:
7c:c0:d8:a9:96:01:f1:53:33:39:73:3e:01:65:9d:c2:95:2b:
b7:93:18:93:78:33:f0:cd:75:95:10:44:25:ea:09:89:8b:88:
92:3b:4a:60:2f:83:ed:f9:83:59:76:cd:ac:1f:b9:1b:c2:df:
0b:25:fb:35:d2:4e:e2:47:0f:07:7c:b2:a6:eb:89:4b:6d:54:
32:c3:2d:63:4a:50:84:1b:17:f4:00:b5:bb:7c:d3:ac:81:d4:
d4:16:9e:05:92:db:a6:04:13:20:54:2f:00:03:50:d3:d3:40:
d9:07:75:cc:8a:e0:f1:8f:df:db:c0:f0:29:08:a7:43:db:2b:
23:e0:00:8e:e1:c7:a1:c0:af:c5:20:e7:e7:96:d0:eb:29:dc:
9a:ef:06:9d:9e:f0:ef:0e:1c:3a:31:d5:1e:a2:18:24:af:a3:
ce:56:51:ca:78:87:cb:08:07:ea:ea:2b:b4:fb:07:ee:30:92:
43:89:87:c5:6b:a6:ef:e0:28:31:8d:c6:18:80:49:9a:ab:70:
82:83:9a:b1:09:12:3b:a1:b5:da:da:19:26:1b:13:21:8a:e9:
1d:3b:01:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:25 2026 by rpki-client