Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
File: BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft (raw, json)
Hash identifier: nI0Tq37Az9a4PNztFkX6287iWtD46+qhayIT5xD/jJ4=
Subject key identifier: 5B:9D:AD:12:2D:BF:3F:E0:22:6E:B0:B4:F9:F1:7C:D2:52:3F:AA:27
Authority key identifier: 05:0A:FC:9A:98:D7:C1:79:71:69:D7:53:E6:FA:F4:22:19:90:42:84
Certificate issuer: /CN=050afc9a98d7c1797169d753e6faf42219904284
Certificate serial: 019D39411913FCF25509A6E571CBA63C62AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
Manifest number: CA
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl (hash: 5JQfmRjyloiT4yt6jICba/HxXIOF3lN7zek4qhXndnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:19:13:fc:f2:55:09:a6:e5:71:cb:a6:3c:62:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050afc9a98d7c1797169d753e6faf42219904284
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=5b9dad122dbf3fe0226eb0b4f9f17cd2523faa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:d7:42:f7:d1:93:f5:e5:c4:28:48:ba:ae:
2d:ba:fd:ca:13:95:c3:b5:0d:d6:b8:f4:5f:db:07:
03:b5:fd:5e:37:7c:ce:0f:81:a8:42:3c:d6:0c:c5:
65:d9:5e:ef:a2:fd:da:5c:9b:cd:f2:83:03:fc:87:
21:70:78:5f:da:9d:d4:17:ec:81:df:30:be:70:ae:
cb:e7:6c:89:bf:3e:50:70:18:2b:c0:8a:bb:e4:1c:
b7:b1:4e:24:89:14:85:2f:6a:7b:2e:e3:f1:b4:ff:
be:ab:3d:39:c8:5c:8d:74:4b:82:bf:27:a9:47:80:
60:55:62:6e:47:78:b9:21:98:02:c3:10:7a:2f:bd:
7c:ae:55:5d:3b:96:09:4c:c0:3d:05:7e:84:09:29:
56:4a:c0:22:d3:49:45:c1:5e:71:50:40:87:4f:a3:
d2:89:a7:e7:f8:2e:70:0e:c4:00:32:b5:13:c3:76:
7c:5a:e0:e4:89:e4:82:54:3b:25:39:81:d2:4d:99:
0d:a1:46:0d:4d:0e:34:86:9a:89:a2:5a:09:8c:99:
8f:62:9a:50:17:3b:05:b2:94:2d:91:50:ee:0e:69:
a6:b6:35:1c:64:7c:46:57:17:10:70:fa:92:05:d5:
39:6e:82:dc:71:50:a3:84:b5:d6:14:bb:10:bc:10:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9D:AD:12:2D:BF:3F:E0:22:6E:B0:B4:F9:F1:7C:D2:52:3F:AA:27
X509v3 Authority Key Identifier:
keyid:05:0A:FC:9A:98:D7:C1:79:71:69:D7:53:E6:FA:F4:22:19:90:42:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQr8mpjXwXlxaddT5vr0IhmQQoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2f396-5e4c-4410-adc2-5555c5623072/1/BQr8mpjXwXlxaddT5vr0IhmQQoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6b:c7:0e:ef:2a:89:de:6f:27:eb:96:58:d8:86:9e:3c:45:
95:a5:e2:8e:0b:3e:fc:90:13:6b:7c:0a:e3:7a:ce:85:43:c0:
46:46:50:5e:05:ce:d3:7d:6a:13:6f:3c:0e:b5:23:5c:f4:4f:
29:14:a8:a2:f5:6b:4e:5e:2c:4d:dd:f4:8b:35:70:b9:b4:38:
8e:70:22:83:2f:dc:a7:c9:05:6e:27:e6:32:51:2c:0a:57:86:
cd:65:22:30:d4:56:f5:12:dd:59:bb:73:41:a9:78:8b:6f:da:
96:6b:9c:f4:32:8c:c1:14:27:9c:68:4e:87:76:38:01:52:ac:
18:10:c0:05:63:58:74:56:fd:c8:00:25:85:1e:af:fa:77:4e:
ae:92:8b:a7:09:c8:50:f8:0c:b5:5b:9d:2a:1e:03:2c:0e:b3:
7d:0a:1e:57:55:94:e2:f3:9a:ac:d7:ff:3a:a4:5f:b7:ef:87:
ce:64:89:0e:de:5a:f2:03:9c:9d:0f:5d:92:6c:dd:eb:2f:c8:
0b:0b:2e:d2:7e:e1:a6:a9:c9:60:d6:d4:c5:90:c3:d3:73:e9:
39:05:c5:2f:33:c0:ae:03:99:f5:24:c7:c0:95:32:1f:1f:11:
75:bb:76:98:2a:6b:1a:9d:13:64:4b:d3:94:73:37:99:56:46:
f8:c0:68:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QRkT/PJVCablccumPGKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGFmYzlhOThkN2MxNzk3MTY5ZDc1M2U2ZmFmNDIyMTk5
MDQyODQwHhcNMjYwMzI5MTEwMTAwWhcNMjYwMzMwMTEwMTAwWjAzMTEwLwYDVQQD
Eyg1YjlkYWQxMjJkYmYzZmUwMjI2ZWIwYjRmOWYxN2NkMjUyM2ZhYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdnXQvfRk/XlxChIuq4tuv3KE5XD
tQ3WuPRf2wcDtf1eN3zOD4GoQjzWDMVl2V7vov3aXJvN8oMD/IchcHhf2p3UF+yB
3zC+cK7L52yJvz5QcBgrwIq75By3sU4kiRSFL2p7LuPxtP++qz05yFyNdEuCvyep
R4BgVWJuR3i5IZgCwxB6L718rlVdO5YJTMA9BX6ECSlWSsAi00lFwV5xUECHT6PS
iafn+C5wDsQAMrUTw3Z8WuDkieSCVDslOYHSTZkNoUYNTQ40hpqJoloJjJmPYppQ
FzsFspQtkVDuDmmmtjUcZHxGVxcQcPqSBdU5boLccVCjhLXWFLsQvBChjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFudrRItvz/gIm6wtPnxfNJSP6onMB8GA1UdIwQY
MBaAFAUK/JqY18F5cWnXU+b69CIZkEKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFyOG1walh3WGx4YWRkVDV2cjBJaG1RUW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mMmYzOTYtNWU0Yy00NDEwLWFkYzIt
NTU1NWM1NjIzMDcyLzEvQlFyOG1walh3WGx4YWRkVDV2cjBJaG1RUW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mMmYzOTYtNWU0Yy00NDEwLWFkYzItNTU1NWM1NjIzMDcy
LzEvQlFyOG1walh3WGx4YWRkVDV2cjBJaG1RUW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmvHDu8q
id5vJ+uWWNiGnjxFlaXijgs+/JATa3wK43rOhUPARkZQXgXO031qE288DrUjXPRP
KRSoovVrTl4sTd30izVwubQ4jnAigy/cp8kFbifmMlEsCleGzWUiMNRW9RLdWbtz
Qal4i2/almuc9DKMwRQnnGhOh3Y4AVKsGBDABWNYdFb9yAAlhR6v+ndOrpKLpwnI
UPgMtVudKh4DLA6zfQoeV1WU4vOarNf/OqRft++HzmSJDt5a8gOcnQ9dkmzd6y/I
Cwsu0n7hpqnJYNbUxZDD03PpOQXFLzPArgOZ9STHwJUyHx8Rdbt2mCprGp0TZEvT
lHM3mVZG+MBovg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:22 2026 by rpki-client