Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
File: bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft (raw, json)
Hash identifier: rHfAR73zn3Y/1+61QgpxKfp7wcqXMxVXRSTu7W/0VRk=
Subject key identifier: 96:FF:57:E8:FF:86:CA:22:F5:9E:F3:71:33:A3:98:C3:89:17:73:48
Authority key identifier: 6D:00:3C:2F:E6:57:EC:4E:54:38:04:43:0C:4B:8A:D0:C2:F0:58:FA
Certificate issuer: /CN=6d003c2fe657ec4e543804430c4b8ad0c2f058fa
Certificate serial: 01A1859A4FCA26CF6C29E8931EF0D6952114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
Manifest number: 0143
Signing time: Thu 29 Oct 2026 03:00:44 +0000
Manifest this update: Thu 29 Oct 2026 03:00:44 +0000
Manifest next update: Fri 30 Oct 2026 03:00:44 +0000
Files and hashes: 1: bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl (hash: 1UhqsnUymjzt3MpqIMKFr9A7lf6LuNYuA+4p0JK+Zqs=)
2: plAMGVXNXWtFejbG7iio91PMiaw.roa (hash: 58FHfUkq55AqJ4HX7rCOQcZBxJ2v0NdBhojmOIwPxJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9a:4f:ca:26:cf:6c:29:e8:93:1e:f0:d6:95:21:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d003c2fe657ec4e543804430c4b8ad0c2f058fa
Validity
Not Before: Oct 29 03:00:44 2026 GMT
Not After : Oct 30 03:00:44 2026 GMT
Subject: CN=96ff57e8ff86ca22f59ef37133a398c389177348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:b3:1d:e7:ed:07:5b:ca:2f:3b:9d:5c:d2:
c0:5f:77:2e:fc:cd:66:fa:45:d8:2c:ee:ad:1f:19:
aa:fe:6e:74:90:3a:75:4d:94:d7:20:e4:9a:a7:d8:
97:2e:b1:89:b3:2c:24:42:e9:9c:18:65:fa:47:dd:
5f:18:1a:26:a3:fd:f4:2b:52:da:61:bd:a1:cb:d1:
dd:74:1f:e0:0f:38:81:6d:c0:e8:cf:62:8f:4f:83:
73:2e:2f:79:f2:d2:0d:87:8d:35:a2:0e:ac:57:b6:
4a:c0:fd:50:9b:6e:ef:97:f8:50:4d:2d:fb:2e:c6:
f3:96:d5:21:15:bf:3e:f3:01:9c:19:01:80:25:28:
5d:d0:1f:8d:ac:1c:f8:cd:42:ed:ce:53:22:cf:ed:
7a:91:47:bf:08:2e:6d:18:be:ce:47:6c:c8:1c:34:
67:f9:32:32:ad:12:7e:3f:85:07:4b:21:79:01:2b:
d2:25:dd:43:16:da:70:70:d8:ea:ce:3f:38:41:b2:
59:92:d2:8c:9b:59:78:74:4c:5e:0c:90:ef:22:42:
2e:3b:7c:28:ca:1a:be:23:4e:c0:d9:1e:f6:3a:36:
e8:79:a1:38:88:9c:3b:13:a3:78:c9:4b:89:74:7e:
e7:d1:84:0e:17:45:b0:5b:bf:38:92:9a:d3:0d:24:
06:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:57:E8:FF:86:CA:22:F5:9E:F3:71:33:A3:98:C3:89:17:73:48
X509v3 Authority Key Identifier:
keyid:6D:00:3C:2F:E6:57:EC:4E:54:38:04:43:0C:4B:8A:D0:C2:F0:58:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:39:e3:01:50:98:f9:be:1e:18:f6:79:b9:83:bd:c4:42:27:
6d:ce:93:70:32:d5:f2:fc:33:6d:54:be:ff:61:e4:a2:74:98:
df:e5:cf:0a:62:80:6e:75:38:b1:be:2e:47:cb:b2:4c:68:4b:
71:81:45:db:8b:51:fa:b8:5c:ce:b8:51:fc:7b:cd:66:87:ac:
5c:a7:d5:b9:2b:18:c8:4b:c7:40:e4:1b:36:19:cc:4c:ae:68:
19:7f:75:25:63:79:bc:aa:06:ca:e2:d1:5e:6c:3a:73:8c:6f:
b6:c5:68:ad:3c:96:ad:d9:60:3b:10:7e:3c:9a:94:70:d7:95:
25:05:94:27:aa:8e:ae:e6:8c:9b:67:d2:89:57:23:31:ba:e7:
92:bb:d6:7b:dc:60:52:a0:c1:7e:09:85:5c:42:ec:ce:f1:37:
4d:72:d7:6c:d7:ae:63:66:00:ea:a0:f7:23:72:af:75:91:ac:
8d:3d:19:4f:53:95:c1:71:9c:b7:e0:d0:ee:70:b2:6d:43:0c:
b8:4d:bf:59:3c:4e:6f:1e:b5:5b:d7:06:e0:b7:40:67:34:df:
a0:aa:19:4e:a5:cf:da:de:2d:99:57:de:56:5a:c3:e0:6e:e9:
86:7f:37:b0:25:b0:35:35:f2:f6:1d:eb:01:4a:f4:8c:d7:77:
99:7c:fb:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFmk/KJs9sKeiTHvDWlSEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDAzYzJmZTY1N2VjNGU1NDM4MDQ0MzBjNGI4YWQwYzJm
MDU4ZmEwHhcNMjYxMDI5MDMwMDQ0WhcNMjYxMDMwMDMwMDQ0WjAzMTEwLwYDVQQD
Eyg5NmZmNTdlOGZmODZjYTIyZjU5ZWYzNzEzM2EzOThjMzg5MTc3MzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulmzHeftB1vKLzudXNLAX3cu/M1m
+kXYLO6tHxmq/m50kDp1TZTXIOSap9iXLrGJsywkQumcGGX6R91fGBomo/30K1La
Yb2hy9HddB/gDziBbcDoz2KPT4NzLi958tINh401og6sV7ZKwP1Qm27vl/hQTS37
LsbzltUhFb8+8wGcGQGAJShd0B+NrBz4zULtzlMiz+16kUe/CC5tGL7OR2zIHDRn
+TIyrRJ+P4UHSyF5ASvSJd1DFtpwcNjqzj84QbJZktKMm1l4dExeDJDvIkIuO3wo
yhq+I07A2R72OjboeaE4iJw7E6N4yUuJdH7n0YQOF0WwW784kprTDSQG/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb/V+j/hsoi9Z7zcTOjmMOJF3NIMB8GA1UdIwQY
MBaAFG0APC/mV+xOVDgEQwxLitDC8Fj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFBOEwtWlg3RTVVT0FSRERFdUswTUx3V1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQt
OWI1NTk1MjlhZDE2LzEvYlFBOEwtWlg3RTVVT0FSRERFdUswTUx3V1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQtOWI1NTk1MjlhZDE2
LzEvYlFBOEwtWlg3RTVVT0FSRERFdUswTUx3V1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDnjAVCY
+b4eGPZ5uYO9xEInbc6TcDLV8vwzbVS+/2HkonSY3+XPCmKAbnU4sb4uR8uyTGhL
cYFF24tR+rhczrhR/HvNZoesXKfVuSsYyEvHQOQbNhnMTK5oGX91JWN5vKoGyuLR
Xmw6c4xvtsVorTyWrdlgOxB+PJqUcNeVJQWUJ6qOruaMm2fSiVcjMbrnkrvWe9xg
UqDBfgmFXELszvE3TXLXbNeuY2YA6qD3I3KvdZGsjT0ZT1OVwXGct+DQ7nCybUMM
uE2/WTxObx61W9cG4LdAZzTfoKoZTqXP2t4tmVfeVlrD4G7phn83sCWwNTXy9h3r
AUr0jNd3mXz7tg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 08:43:36 2026 by rpki-client