Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File: BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier: qmogLElulSjG62HWxUj/L4lE1sr8YB0O2mJ0knkqsr8=
Subject key identifier: A5:68:AC:AA:6B:61:0E:6F:00:0C:A6:D7:A0:D3:1F:C1:CE:FE:03:69
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 019D999989DC09873BB93864B4882620BBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number: 14FA
Signing time: Fri 17 Apr 2026 04:01:09 +0000
Manifest this update: Fri 17 Apr 2026 04:01:09 +0000
Manifest next update: Sat 18 Apr 2026 04:01:09 +0000
Files and hashes: 1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: W6247jnckzDq1V5YFov+0+x5F+LIlFjVuHxBz6PuhqI=)
2: OYsX4hAIO8zocCjaiLAgo7rhl6g.roa (hash: 8mSQCijrpWAiZ1jkdyn7YQSYQONkGQ/rnpGjGBbFCh4=)
3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:89:dc:09:87:3b:b9:38:64:b4:88:26:20:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: Apr 17 04:01:09 2026 GMT
Not After : Apr 18 04:01:09 2026 GMT
Subject: CN=a568acaa6b610e6f000ca6d7a0d31fc1cefe0369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:ed:d4:13:31:7f:4d:dc:d7:c6:af:5b:f5:
fb:ff:c0:a3:7c:90:1f:77:93:95:79:13:4e:98:e4:
81:14:e6:3f:d2:d5:dc:d7:01:66:c3:a4:87:50:55:
75:70:c2:29:e5:89:2f:31:fc:0d:94:01:ff:e8:a8:
0c:70:f1:48:ad:73:32:81:fe:1a:17:f2:af:62:0b:
73:b3:84:39:3c:72:7b:07:bc:d7:ae:f8:a7:4e:19:
c8:90:65:ca:18:7d:4a:b1:04:02:6f:21:01:4d:84:
54:39:b7:47:cc:13:f8:4c:16:1c:5a:87:35:c1:b2:
43:b2:13:d4:b5:5e:34:91:9e:16:32:15:c0:ae:49:
d6:cd:71:af:f2:46:f4:50:88:ab:c0:d0:d6:74:20:
12:26:82:94:e0:92:19:8a:db:65:b1:17:d5:2a:3c:
e5:74:52:2f:39:7a:a7:87:72:4a:9b:00:5b:58:94:
d4:43:94:56:f5:5a:ed:a8:96:89:93:1e:e4:b6:17:
4c:58:43:d0:ea:83:a9:66:f8:bd:00:eb:03:3f:c3:
50:c4:bf:79:3b:19:94:08:63:b5:17:91:fa:79:ff:
ac:67:8d:3d:a7:73:e6:c0:03:ed:fb:1d:5c:4b:f3:
f1:9d:cd:69:98:72:78:1d:8f:fe:df:2d:0d:e1:a4:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:68:AC:AA:6B:61:0E:6F:00:0C:A6:D7:A0:D3:1F:C1:CE:FE:03:69
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5b:72:65:c0:79:a9:2d:7b:0d:7e:a5:7b:56:cd:57:6f:ff:
f4:c4:86:ef:f4:83:8c:da:d1:58:c4:8c:9f:e7:9d:ca:99:48:
28:43:a4:fc:37:bf:67:77:dc:f2:0f:90:71:df:e8:21:25:e9:
63:31:b2:d7:9d:d7:a4:35:5f:b0:59:a6:d1:a2:4c:db:1b:23:
d3:96:0a:8b:76:df:9f:42:4f:a4:70:a8:ec:b4:f1:2f:ee:d0:
44:ae:6a:b1:8c:3d:6d:94:3d:c3:4b:7e:42:35:5a:cd:49:fe:
bb:cf:27:42:1b:b6:e5:38:58:aa:ed:25:2f:3a:40:80:c1:05:
3c:1b:b4:6a:a3:99:e5:a6:73:67:69:51:87:b7:9a:42:c9:aa:
0b:93:3c:6d:42:a8:13:bd:57:e9:52:b2:01:67:a0:ec:23:18:
e3:39:e1:22:03:79:6e:06:82:cd:91:a7:6d:d2:4f:6c:1d:53:
b8:04:70:38:bb:20:16:3d:ca:dc:d3:7b:9c:17:ea:d4:36:c7:
0e:48:6e:43:90:a2:64:30:66:e2:43:84:14:7d:0a:84:5f:d2:
8b:10:4d:0f:ee:38:9e:85:ca:34:94:b8:12:33:a9:49:33:b1:
da:25:7d:6a:0a:5e:e1:cb:ca:a8:0c:1b:64:9c:3c:62:d9:e5:
b9:ff:96:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmYncCYc7uThktIgmILvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGIxZTM4YzcwNGJkMDhlM2I5ZDE3ZjU5MDM2N2IxZDFm
MDNjNGEwHhcNMjYwNDE3MDQwMTA5WhcNMjYwNDE4MDQwMTA5WjAzMTEwLwYDVQQD
EyhhNTY4YWNhYTZiNjEwZTZmMDAwY2E2ZDdhMGQzMWZjMWNlZmUwMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J3t1BMxf03c18avW/X7/8CjfJAf
d5OVeRNOmOSBFOY/0tXc1wFmw6SHUFV1cMIp5YkvMfwNlAH/6KgMcPFIrXMygf4a
F/KvYgtzs4Q5PHJ7B7zXrvinThnIkGXKGH1KsQQCbyEBTYRUObdHzBP4TBYcWoc1
wbJDshPUtV40kZ4WMhXArknWzXGv8kb0UIirwNDWdCASJoKU4JIZittlsRfVKjzl
dFIvOXqnh3JKmwBbWJTUQ5RW9VrtqJaJkx7kthdMWEPQ6oOpZvi9AOsDP8NQxL95
OxmUCGO1F5H6ef+sZ409p3PmwAPt+x1cS/Pxnc1pmHJ4HY/+3y0N4aTb1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVorKprYQ5vAAym16DTH8HO/gNpMB8GA1UdIwQY
MBaAFAULHjjHBL0I47nRf1kDZ7HR8DxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYt
YTAxZTllNmRjYmYyLzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYtYTAxZTllNmRjYmYy
LzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVtyZcB5
qS17DX6le1bNV2//9MSG7/SDjNrRWMSMn+edyplIKEOk/De/Z3fc8g+Qcd/oISXp
YzGy153XpDVfsFmm0aJM2xsj05YKi3bfn0JPpHCo7LTxL+7QRK5qsYw9bZQ9w0t+
QjVazUn+u88nQhu25ThYqu0lLzpAgMEFPBu0aqOZ5aZzZ2lRh7eaQsmqC5M8bUKo
E71X6VKyAWeg7CMY4znhIgN5bgaCzZGnbdJPbB1TuARwOLsgFj3K3NN7nBfq1DbH
DkhuQ5CiZDBm4kOEFH0KhF/SixBND+44noXKNJS4EjOpSTOx2iV9agpe4cvKqAwb
ZJw8Ytnluf+WMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:20 2026 by rpki-client