Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: WYTCYVvwNK+dtAxMMo6E+WRXJvTsyGH5dc5CikJNYPM=
Subject key identifier: 00:92:7B:19:49:24:A9:B4:6B:E6:AC:EC:A5:7E:06:3A:62:E5:50:4F
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 019D38667DF0CC10EC53AAD401F91B1B0E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: u1lFmOjWwlkClevTMylqZXC29tCeqoNjacN3SBPEMeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7d:f0:cc:10:ec:53:aa:d4:01:f9:1b:1b:0e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=00927b194924a9b46be6aceca57e063a62e5504f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:95:81:91:3b:7b:ac:6a:d4:c7:8b:a4:81:
6d:a6:91:cd:b7:c3:6f:f8:81:8e:1e:61:60:48:fd:
6c:a9:c7:52:e6:7b:77:51:4f:5c:f6:0a:cb:9d:02:
00:37:c3:5a:c7:e4:cd:df:1c:13:4a:6d:2a:30:49:
17:98:a7:a1:bb:05:f9:63:9c:c4:c4:75:b1:64:ce:
f0:3f:6d:28:84:28:f8:50:e1:b3:b6:13:b2:74:0b:
11:30:ae:7e:35:7f:93:14:44:25:7a:f8:78:3c:f5:
96:10:b3:e9:cd:69:92:49:e8:43:a7:0f:eb:5e:9b:
ab:15:b6:40:8c:71:6f:9e:98:13:8c:1c:ba:7c:ca:
07:4f:36:40:38:c7:f8:c4:ba:36:ab:6f:e8:aa:77:
1e:3d:7d:45:fc:0d:78:c8:a1:59:25:ce:ae:bf:15:
07:64:20:5e:bd:c5:cb:70:77:a6:e8:7b:99:b4:7c:
a4:c9:e7:24:61:b7:38:7f:00:45:cc:b3:67:20:47:
3a:60:bf:a6:f4:c0:49:07:4e:b5:4f:bd:85:c7:18:
cf:76:0c:68:c6:97:38:92:93:7c:91:bc:a1:5a:3d:
3f:48:86:cb:42:d9:8f:e9:f0:53:33:5b:fc:5f:28:
15:7a:91:a3:bf:83:d3:a7:44:6d:28:cc:57:41:65:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:92:7B:19:49:24:A9:B4:6B:E6:AC:EC:A5:7E:06:3A:62:E5:50:4F
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a6:f2:ee:c8:69:8a:d2:a3:03:dc:37:bd:d9:e3:39:b0:a4:
26:fb:3e:8f:c1:5b:c7:7d:b6:2d:7d:0c:67:70:1d:7c:d0:61:
9e:a4:2c:57:89:68:63:e9:f5:17:fe:73:16:a6:1b:2e:1f:37:
74:e7:b5:2e:f8:cc:55:d2:9e:ab:f8:76:b2:6b:d3:e2:61:0a:
d5:06:ce:8c:29:ac:de:3c:6a:7a:16:0c:b1:a9:74:ef:2c:ea:
25:44:72:5b:11:ee:9c:41:22:ff:83:ac:41:8e:9a:c7:55:1a:
2e:66:7c:f8:89:1f:8d:ef:e8:bd:b4:ad:f6:45:85:bf:9f:47:
6b:7e:bc:ab:f6:55:7e:55:11:ba:fa:1e:2c:0c:93:74:f0:46:
28:4b:e8:9d:4a:f0:0c:08:21:d2:bf:5e:ee:0b:18:30:43:d6:
55:c9:b2:15:65:c9:82:3e:38:d2:00:13:94:01:29:1d:62:dd:
e2:48:0f:13:a2:e8:14:18:bf:6a:af:1e:23:d3:96:13:a3:a0:
75:a7:a2:55:4d:f6:b1:34:ec:2e:ad:c3:9e:2a:00:0b:86:26:
55:e8:b9:41:01:25:b8:7b:e7:0e:10:f7:61:d9:e0:b2:10:82:
59:6a:ab:2c:7b:74:45:bd:59:80:c0:1d:3a:5d:9b:90:d8:3c:
b0:da:c0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:09 2026 by rpki-client