Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: Unhjc/mE9C9Qt5TYqACTS7Z42kSC+se7ZZhR5gSGaCE=
Subject key identifier: 20:B0:00:0B:1B:F4:E9:15:3F:85:71:F1:A5:55:CB:1F:28:E9:5C:46
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 019CAB34AB8D3EBA01D47AEE302BF3D46D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 171F
Signing time: Sun 01 Mar 2026 21:01:21 +0000
Manifest this update: Sun 01 Mar 2026 21:01:21 +0000
Manifest next update: Mon 02 Mar 2026 21:01:21 +0000
Files and hashes: 1: YyGPobwhIHB6BpaWiHqwNWGrgVQ.roa (hash: 5zuMdHhiIbs7RssXaE/NxcNIb7ZtP/iMz7WzclxfqOE=)
2: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: n/3EhvApRb5jcFy9c+6pVmPZypp025D9ccU3qAfTn7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:ab:8d:3e:ba:01:d4:7a:ee:30:2b:f3:d4:6d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Mar 1 21:01:21 2026 GMT
Not After : Mar 2 21:01:21 2026 GMT
Subject: CN=20b0000b1bf4e9153f8571f1a555cb1f28e95c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:60:f5:bf:c8:5e:ec:31:ef:87:6a:30:e2:
d4:80:d6:c9:88:f0:25:f9:6d:fb:0c:5f:5a:f1:91:
80:b6:9a:43:22:5d:e4:c4:82:52:9f:3b:bb:a5:b0:
a9:22:c1:d6:12:27:aa:32:d0:20:49:bd:fe:54:56:
a1:96:1b:73:52:ff:a2:ef:66:1f:ae:5f:e0:9c:42:
3e:0c:cb:63:6f:fa:c8:d1:03:ab:2b:16:9a:8f:0d:
44:63:7b:b7:00:e1:27:0c:d6:b4:41:0d:77:b7:f2:
2a:ac:31:89:45:aa:c4:db:cd:2e:36:d2:28:11:1f:
26:96:c1:67:05:ae:d8:6c:e7:9e:51:32:55:85:ab:
e3:41:16:65:6c:3b:56:e7:b0:14:40:a2:a3:cd:e9:
4b:69:6c:5f:73:12:aa:73:9b:84:f5:7a:01:5a:39:
bf:20:bd:62:7a:c8:88:9f:00:ec:d0:25:3b:df:e8:
91:8a:6c:e5:b9:86:c2:b5:f9:11:ef:a9:b2:1f:1d:
88:99:de:e6:fa:36:1c:f0:11:7f:43:5d:36:8c:ca:
31:a8:f9:6e:6c:96:4c:a4:aa:eb:19:7a:e7:f2:63:
71:36:2a:74:92:62:18:50:05:cd:53:e9:ac:1b:e3:
43:e7:bc:10:a1:74:9f:06:7f:af:74:5d:e1:73:48:
9e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B0:00:0B:1B:F4:E9:15:3F:85:71:F1:A5:55:CB:1F:28:E9:5C:46
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3a:7f:11:13:35:0f:d8:37:39:8c:89:f9:78:ad:a5:e9:a7:
a4:23:0c:6a:3b:f9:d9:56:9f:0c:b2:2a:65:d3:e4:8b:61:f2:
94:f4:d2:e7:34:ea:e5:0e:2f:8d:85:2e:04:2a:5a:0c:7e:68:
58:58:3d:a1:f3:aa:80:26:d0:f2:31:6b:91:61:3c:2d:69:af:
da:93:c0:5c:5e:e9:b4:08:95:94:f7:c2:c5:0e:9a:8d:51:88:
b1:55:43:77:48:51:51:1f:e4:2f:a3:e2:ce:4e:04:a3:1c:54:
e0:b8:f5:89:1c:4b:46:f0:af:fa:f8:6e:22:0e:ac:3d:dc:c4:
f3:45:da:d1:be:9a:d6:3e:7b:0f:0d:d0:9b:f3:5d:58:9c:f7:
de:41:12:a2:9b:61:89:d0:69:24:6e:ac:c9:56:59:64:c1:12:
68:76:b2:02:4d:d0:80:45:ca:a3:0f:c7:af:52:60:5c:69:d3:
11:06:60:18:ee:4e:d2:e7:53:18:0a:f0:c1:97:ce:12:7c:b2:
2a:b0:f2:d1:07:1b:30:24:0f:4c:50:51:22:93:28:a9:83:02:
a6:03:31:3e:f5:8e:05:f4:41:39:cb:c5:77:00:5d:2c:66:97:
a6:6a:af:d5:79:48:90:6d:c0:f6:a9:5c:75:18:b2:10:5c:c7:
6e:72:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:48 2026 by rpki-client