Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: 6O/XhHTfC3bPvlgWAPwHliCOLdytVX3aWLpkIr9t5Cg=
Subject key identifier: D8:28:CD:BF:31:58:6D:E8:A3:D1:A0:F2:15:BD:15:03:AC:E1:9A:90
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 019D371B730CDC6460D87DF8260C1E7A9231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 01:00:38 +0000
Manifest this update: Sun 29 Mar 2026 01:00:38 +0000
Manifest next update: Mon 30 Mar 2026 01:00:38 +0000
Files and hashes: 1: 03RMwUui42i5Kl2iOyIjy6uUllk.asa (hash: d0WtNqsS+gSSoX4EFhK8B1GHLgiLRboivnde42wiSxg=)
2: 2owrDtSSdVfxvYXAxMiLovDSXEU.roa (hash: 9L5ssgJ0+ShYxgpGMGCzPMDxEovXXE+mzE0m/NaKh/k=)
3: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: HT25AZ5GL0TVpyeqLf46RWcsRY5oCygEr1GlMLRV4S8=)
4: J_ltO4IY-zslK2HzdFODfkjQNtE.asa (hash: Vj0jAxwKfiBhKsc+pYPJJ3wR9tPHQ0qcCAKE+u9mInI=)
5: W2dqeQoexNzO-eZu-b3E0MsHT4I.roa (hash: xbkqBY08vRM/01LJVRXUSH6oRqaCojszvq1SR3phsH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:73:0c:dc:64:60:d8:7d:f8:26:0c:1e:7a:92:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Mar 29 01:00:38 2026 GMT
Not After : Mar 30 01:00:38 2026 GMT
Subject: CN=d828cdbf31586de8a3d1a0f215bd1503ace19a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:72:80:68:99:39:88:b4:10:e4:18:53:e2:92:
e1:55:92:9a:1a:f5:77:09:7f:fe:e0:d3:37:69:64:
60:a9:4d:ed:41:af:11:22:f4:64:3a:a2:6d:e1:09:
6f:fa:bb:e5:94:a3:c0:38:91:3d:41:72:35:ac:82:
e7:5e:83:d7:f0:aa:60:74:af:59:42:6e:ab:c1:98:
b1:d0:91:03:00:f1:80:8f:a0:1e:98:7c:55:3e:f5:
a7:af:c6:5a:ee:fd:ca:96:eb:fd:b6:ee:7d:ce:ac:
23:a5:e5:1b:2e:f2:57:0e:82:12:57:92:ba:dd:76:
46:a6:f1:d4:a1:f1:c4:ba:7d:bb:2e:24:d4:2b:4c:
c5:a1:80:cc:aa:94:63:cd:33:f3:55:f2:b0:c5:d1:
4a:3d:7f:37:dd:c3:18:f0:65:10:ee:ab:4d:fb:f0:
32:0a:f9:3a:ec:ba:22:e4:d7:b5:cc:25:dc:90:07:
19:e8:dd:79:66:d9:bc:d6:8f:5f:31:43:e8:fd:23:
94:4a:70:8e:62:c5:5e:9e:db:37:bb:ba:f1:87:46:
b8:0a:7e:86:7d:ed:07:9e:71:ea:2f:59:21:42:5d:
b0:cc:6a:9d:9c:43:cc:00:f5:4e:46:1f:0c:19:5d:
ef:62:d2:0e:22:21:42:f6:2c:50:0a:a0:5a:f5:c4:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:CD:BF:31:58:6D:E8:A3:D1:A0:F2:15:BD:15:03:AC:E1:9A:90
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6a:80:5c:ae:34:73:77:05:72:75:84:42:64:8a:43:b7:a1:
bb:21:52:d6:07:c8:8c:79:2c:35:33:69:86:c8:ee:f4:db:0e:
32:99:63:c5:02:54:ef:28:51:5a:3c:64:da:8a:f9:f6:f5:5c:
d8:19:03:4d:6b:2e:d4:a3:cf:c3:ce:fe:63:44:b4:80:77:57:
cb:0f:ae:59:a8:df:e7:56:2b:97:94:8f:2a:b7:ab:29:8f:35:
4d:8f:29:5d:1e:bb:bf:dd:2c:d4:c7:62:0b:ce:de:fd:59:88:
93:12:0c:01:0f:28:45:65:fc:17:3c:b8:20:83:90:52:b3:6f:
d2:2a:b2:c5:60:13:eb:1d:0a:b0:b5:7a:ef:f5:94:c2:47:c0:
6b:10:08:56:5f:79:8b:38:7c:bb:f4:1e:e4:ca:e4:21:0a:ff:
db:cf:12:e5:f7:e6:70:4a:c5:7c:54:13:fb:4d:92:a6:f7:82:
b8:97:6f:fa:05:fa:45:44:a6:27:5d:5d:a9:46:c5:4b:bf:9f:
87:9b:db:1a:5b:9a:14:c3:79:cc:8a:31:39:2d:c8:c5:74:d6:
ef:a2:8d:d1:2e:f1:6c:0b:9f:9e:ea:4a:bf:95:f3:3a:45:fb:
46:42:9f:39:e4:62:eb:6c:28:f0:56:8a:05:b1:e8:7c:f0:3f:
6c:f6:66:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:42 2026 by rpki-client