Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File: BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier: ApDgtLQ9BEgUR7p8bg4/OxT54x9j04nTJTnf1uVB72s=
Subject key identifier: 4F:D8:C0:01:FD:0B:2D:AD:86:4B:43:84:64:25:09:B9:09:E3:63:3A
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 019CAC0FDD0887DAA43ED0160CD4C87EAE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number: 147F
Signing time: Mon 02 Mar 2026 01:00:46 +0000
Manifest this update: Mon 02 Mar 2026 01:00:46 +0000
Manifest next update: Tue 03 Mar 2026 01:00:46 +0000
Files and hashes: 1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: jNRd18TQsnjPe/2KmOXcg2lfRTCxgPO8LQg6JLDXWbA=)
2: OYsX4hAIO8zocCjaiLAgo7rhl6g.roa (hash: 8mSQCijrpWAiZ1jkdyn7YQSYQONkGQ/rnpGjGBbFCh4=)
3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:dd:08:87:da:a4:3e:d0:16:0c:d4:c8:7e:ae:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: Mar 2 01:00:46 2026 GMT
Not After : Mar 3 01:00:46 2026 GMT
Subject: CN=4fd8c001fd0b2dad864b4384642509b909e3633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:86:a0:c2:8c:0b:9a:25:6e:9f:5b:68:2b:
b3:29:67:4f:63:c4:9b:b7:99:17:63:ad:c9:9a:c1:
e3:e7:40:53:db:48:32:79:c3:98:b1:26:a2:b3:84:
c4:d6:f4:79:6a:45:9f:d9:66:9d:c7:4d:11:00:4a:
43:b7:e2:40:82:82:cd:0c:5c:e0:53:0d:19:53:ac:
5e:d2:bd:74:35:14:08:56:3a:ca:e3:62:08:1c:8d:
f8:f2:30:fc:83:d8:a3:74:e3:44:0f:08:c4:8b:4b:
bd:83:bb:a3:4b:d7:f5:88:04:96:68:ca:fc:51:50:
4c:2a:7a:5c:fc:10:32:49:be:3b:7f:67:61:23:4f:
81:e0:6b:22:a5:f5:96:7a:6e:c2:41:6a:57:1d:2b:
05:5a:9e:ee:c6:76:f1:bd:00:61:3f:05:60:1f:6d:
f2:7b:ca:f5:ea:8b:8e:5f:3b:ef:a6:c2:5f:09:92:
ae:fc:2b:3b:e9:08:8c:7d:68:44:df:0a:13:d5:b5:
ce:c1:00:52:64:a9:e6:f4:c5:e1:fc:68:1f:0b:3f:
b0:d9:5c:7c:94:f9:eb:ae:4a:1f:9d:14:e0:c6:cf:
21:6c:34:28:f2:dc:e0:ce:9c:3f:2a:fb:51:15:8a:
91:d7:ec:c0:f7:a0:4d:d2:0c:55:23:8e:17:ff:75:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D8:C0:01:FD:0B:2D:AD:86:4B:43:84:64:25:09:B9:09:E3:63:3A
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:08:45:2b:a2:3f:10:e7:9a:5f:c3:c5:58:bc:4b:26:6f:03:
b7:da:d2:ac:59:02:69:ab:b1:0e:b4:df:58:62:67:1c:2e:ab:
ef:1a:e7:3f:79:3f:2b:29:ed:fe:d6:91:98:73:99:f5:6d:e0:
42:21:84:09:08:b1:ca:ff:d8:95:38:10:ae:a4:85:35:f2:90:
60:8e:73:fb:0d:65:5a:41:44:fa:9f:81:9d:ed:fe:24:a6:49:
89:ec:e1:a7:b1:dd:5f:41:d5:e6:0a:a7:d3:5d:dc:01:3a:f6:
dc:22:6b:02:78:76:11:ef:2b:75:ba:62:fc:69:1a:21:82:12:
02:3b:88:8c:e5:f8:46:45:a4:d1:ce:df:d3:6d:16:70:17:a2:
77:8b:26:e9:4d:09:27:6c:1d:0e:64:8a:90:4e:82:e8:c3:70:
7c:59:3e:13:e9:61:46:86:3f:39:89:29:76:ae:d3:1e:d7:c5:
f4:29:06:2e:d7:83:13:d8:c7:7c:2d:60:3c:72:98:7e:43:c8:
cd:91:9d:5c:eb:13:12:0a:ff:9d:eb:b6:ff:f9:80:e1:7d:df:
55:95:69:24:75:09:5e:e3:b0:5f:9c:25:81:36:5f:98:06:d5:
6a:78:ed:3c:15:64:f9:10:e4:46:4d:c0:0f:f9:01:13:7d:d2:
71:fc:d6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:49 2026 by rpki-client