
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
File: BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft (raw, json)
Hash identifier: 8TOvg4AbdvYulKBe58fjytOdgjBeMFJZuH4q831jV+s=
Subject key identifier: E3:6A:B1:74:51:46:6C:A0:A8:FF:57:E9:11:D8:DB:A9:03:6B:8A:39
Authority key identifier: 05:0A:FC:9A:98:D7:C1:79:71:69:D7:53:E6:FA:F4:22:19:90:42:84
Certificate issuer: /CN=050afc9a98d7c1797169d753e6faf42219904284
Certificate serial: 01A03FA91096E3243F8CAA52F94F9D9DA3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
Manifest number: 025B
Signing time: Wed 26 Aug 2026 20:00:39 +0000
Manifest this update: Wed 26 Aug 2026 20:00:39 +0000
Manifest next update: Thu 27 Aug 2026 20:00:39 +0000
Files and hashes: 1: BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl (hash: RhMIeIqgodNe8LdbNCsoogWg2XJhxKlvHkXsF3l0788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:10:96:e3:24:3f:8c:aa:52:f9:4f:9d:9d:a3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050afc9a98d7c1797169d753e6faf42219904284
Validity
Not Before: Aug 26 20:00:39 2026 GMT
Not After : Aug 27 20:00:39 2026 GMT
Subject: CN=e36ab17451466ca0a8ff57e911d8dba9036b8a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:99:33:f7:d4:0d:fa:bc:94:45:64:3b:0a:
ce:2a:01:dd:1e:a2:f6:3b:ef:fa:fa:a9:84:f2:c5:
92:59:e8:6c:15:7c:08:86:49:2e:a9:16:26:21:5e:
96:03:02:2e:b8:cd:19:8c:b7:14:7a:61:e8:48:7a:
f8:f1:82:fd:65:28:e1:ce:91:fb:94:2e:3c:02:e2:
f0:c7:28:12:ba:6a:a7:86:03:61:97:ec:9d:06:6c:
96:f6:8e:08:94:6f:c0:7a:fd:e8:a7:49:96:af:27:
08:52:01:c1:2a:cd:b2:fc:51:6f:cb:9c:e9:7c:5b:
69:2d:48:df:59:bd:c5:99:08:b0:0c:ea:91:7c:59:
40:94:c1:95:e4:27:7a:ec:b1:28:27:66:1e:9a:b4:
f4:b3:02:ec:66:3e:e0:63:0d:44:38:7a:f3:45:b9:
e6:01:5e:0c:11:65:6f:90:23:2b:92:51:db:c4:43:
ae:dc:34:1d:2a:7b:c6:ab:aa:db:b5:e1:de:db:49:
f9:ea:72:ba:7e:2a:ef:e3:03:b0:18:f8:a8:bd:48:
e4:50:e5:37:d1:da:b8:0a:b1:62:e1:3b:8c:77:2c:
2d:6a:89:a8:f3:dc:5f:f6:62:d9:0a:1e:cc:e2:43:
b0:90:ee:8a:b5:fb:4d:b8:c7:4f:f3:73:ca:07:99:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6A:B1:74:51:46:6C:A0:A8:FF:57:E9:11:D8:DB:A9:03:6B:8A:39
X509v3 Authority Key Identifier:
keyid:05:0A:FC:9A:98:D7:C1:79:71:69:D7:53:E6:FA:F4:22:19:90:42:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6e:b2:cf:93:6a:23:cd:9e:de:47:f6:18:ee:6a:0e:d4:7a:
48:af:99:82:73:5b:9a:59:f2:3b:a9:13:40:75:45:48:c5:18:
9d:72:ce:ba:0f:06:b5:de:46:96:02:54:60:5e:7a:32:b8:b2:
a3:4e:8b:b4:8b:9d:68:5f:2c:0c:d8:3f:89:76:72:11:9a:a5:
41:61:7a:3d:80:6a:37:8b:eb:f4:5a:44:b1:4a:59:03:bb:51:
f9:3b:fc:18:87:06:27:03:dd:d4:06:69:7d:d7:3a:11:25:2a:
32:06:c0:4e:2f:70:1b:fa:21:a1:19:74:3e:63:23:6d:3d:28:
31:5e:95:05:6b:1e:a8:97:0a:75:cf:71:e5:1f:5e:d8:69:b8:
b9:c3:4a:34:68:89:a4:84:8b:f1:c5:b1:cb:6b:31:5f:30:4b:
ea:69:e8:0c:c7:17:6a:d1:29:d6:8c:c7:7f:a4:c3:42:ea:2f:
a3:65:9f:e3:2e:d6:28:c1:9e:aa:ad:ac:94:69:d4:3f:36:6b:
f1:e3:4f:dc:f7:ab:97:70:2b:0e:ce:e1:99:6e:79:7e:e9:bf:
93:b7:c2:47:78:dc:c4:e4:87:0e:d4:35:9c:e4:37:be:de:6a:
3a:07:18:7e:98:3c:6b:9f:67:2d:b8:1e:a4:7a:80:90:ce:af:
16:54:0a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/qRCW4yQ/jKpS+U+dnaPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGFmYzlhOThkN2MxNzk3MTY5ZDc1M2U2ZmFmNDIyMTk5
MDQyODQwHhcNMjYwODI2MjAwMDM5WhcNMjYwODI3MjAwMDM5WjAzMTEwLwYDVQQD
EyhlMzZhYjE3NDUxNDY2Y2EwYThmZjU3ZTkxMWQ4ZGJhOTAzNmI4YTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCeZM/fUDfq8lEVkOwrOKgHdHqL2
O+/6+qmE8sWSWehsFXwIhkkuqRYmIV6WAwIuuM0ZjLcUemHoSHr48YL9ZSjhzpH7
lC48AuLwxygSumqnhgNhl+ydBmyW9o4IlG/Aev3op0mWrycIUgHBKs2y/FFvy5zp
fFtpLUjfWb3FmQiwDOqRfFlAlMGV5Cd67LEoJ2YemrT0swLsZj7gYw1EOHrzRbnm
AV4MEWVvkCMrklHbxEOu3DQdKnvGq6rbteHe20n56nK6firv4wOwGPiovUjkUOU3
0dq4CrFi4TuMdywtaomo89xf9mLZCh7M4kOwkO6KtftNuMdP83PKB5lbDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONqsXRRRmygqP9X6RHY26kDa4o5MB8GA1UdIwQY
MBaAFAUK/JqY18F5cWnXU+b69CIZkEKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFyOG1walh3WGx4YWRkVDV2cjBJaG1RUW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mMmYzOTYtNWU0Yy00NDEwLWFkYzIt
NTU1NWM1NjIzMDcyLzEvQlFyOG1walh3WGx4YWRkVDV2cjBJaG1RUW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mMmYzOTYtNWU0Yy00NDEwLWFkYzItNTU1NWM1NjIzMDcy
LzEvQlFyOG1walh3WGx4YWRkVDV2cjBJaG1RUW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOm6yz5Nq
I82e3kf2GO5qDtR6SK+ZgnNbmlnyO6kTQHVFSMUYnXLOug8Gtd5GlgJUYF56Mriy
o06LtIudaF8sDNg/iXZyEZqlQWF6PYBqN4vr9FpEsUpZA7tR+Tv8GIcGJwPd1AZp
fdc6ESUqMgbATi9wG/ohoRl0PmMjbT0oMV6VBWseqJcKdc9x5R9e2Gm4ucNKNGiJ
pISL8cWxy2sxXzBL6mnoDMcXatEp1ozHf6TDQuovo2Wf4y7WKMGeqq2slGnUPzZr
8eNP3Perl3ArDs7hmW55fum/k7fCR3jcxOSHDtQ1nOQ3vt5qOgcYfpg8a59nLbge
pHqAkM6vFlQKvQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:03 2026 by rpki-client