Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
File: BQJMtECm3Xana1aUwOL07jMOCnw.mft (raw, json)
Hash identifier: qx755DIaqcnkdOba97H8xTgjlLfOl8PkD01NKbchWq8=
Subject key identifier: 29:E7:6D:C9:1C:CD:F5:02:84:1B:49:49:B0:74:92:A8:1C:CB:A8:E0
Authority key identifier: 05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
Certificate issuer: /CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Certificate serial: 019CAB6B64B3DD50099C29DC54C97C7E543C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
Manifest number: 0570
Signing time: Sun 01 Mar 2026 22:01:07 +0000
Manifest this update: Sun 01 Mar 2026 22:01:07 +0000
Manifest next update: Mon 02 Mar 2026 22:01:07 +0000
Files and hashes: 1: BQJMtECm3Xana1aUwOL07jMOCnw.crl (hash: Ji+Fb3zXDbtBOi87bywgFd8P2H+/rUH0y5GY+NHX8JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:64:b3:dd:50:09:9c:29:dc:54:c9:7c:7e:54:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Validity
Not Before: Mar 1 22:01:07 2026 GMT
Not After : Mar 2 22:01:07 2026 GMT
Subject: CN=29e76dc91ccdf502841b4949b07492a81ccba8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:60:27:23:54:f4:fa:6e:36:e1:f7:3e:9a:
1d:07:2d:57:f3:f0:13:99:45:c6:14:e1:7e:f8:08:
ee:a9:e9:b3:16:74:0b:7e:1b:f3:42:d0:c9:81:9e:
80:d4:71:c4:9f:82:d9:6b:48:e2:46:b9:18:f9:90:
a8:7a:8e:db:ad:e3:0f:c6:bf:88:95:ac:a6:21:a9:
00:c4:96:4d:d9:b2:22:9c:1c:49:14:99:22:ab:c8:
b4:99:4a:2e:b4:4c:3b:3c:10:73:e7:69:42:cf:66:
e7:24:d7:d8:d6:0f:14:e0:2c:eb:30:95:7d:a7:80:
24:df:62:0f:fd:9e:32:ea:db:0d:64:43:26:cb:f7:
89:4a:da:a9:f6:cb:ca:9a:bb:9d:d6:72:1a:3f:44:
e7:27:ce:44:53:90:95:30:8a:15:d6:d0:50:49:33:
24:ad:ab:17:b7:7f:71:83:b1:f3:ac:03:2c:db:02:
d3:38:b5:be:a5:55:74:15:6c:0f:84:d9:a2:75:3d:
89:18:ee:ad:32:80:a5:a6:5d:46:44:e0:28:85:b7:
d9:6f:47:c9:fd:5d:29:02:e6:6d:16:ae:4e:bb:9c:
78:c6:94:77:f7:e2:fa:ae:2e:bc:d8:1e:26:96:a5:
6c:27:6d:28:01:fd:16:3c:c4:e3:37:6d:4c:0a:51:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:6D:C9:1C:CD:F5:02:84:1B:49:49:B0:74:92:A8:1C:CB:A8:E0
X509v3 Authority Key Identifier:
keyid:05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1c:7f:8d:28:ce:ba:10:c4:1c:f3:a7:02:48:50:29:65:47:
33:3b:c9:61:6c:34:9b:12:a0:a9:e5:72:8e:f1:a5:e8:5c:f0:
ff:06:d4:a9:bc:fb:25:e4:58:eb:db:e2:ed:f6:de:ff:5d:89:
66:a3:28:c8:b3:1a:b7:6e:5f:75:8d:4a:ad:99:00:95:c9:dd:
14:af:28:f1:8e:6d:59:10:dd:6c:31:f1:48:39:b3:0f:2c:10:
03:41:0f:da:c5:2a:a3:4d:e0:fe:00:3b:7c:91:f1:4b:e6:1a:
33:a9:c0:7b:08:79:e0:53:36:56:0e:97:18:9c:8f:d5:57:f4:
f2:a4:e7:d7:3b:6f:1f:1d:e3:30:56:c4:c4:4e:a3:df:6a:09:
d4:28:f9:6b:c7:72:fe:30:93:a0:83:ac:b1:94:66:27:f7:7b:
98:d1:cd:e2:c1:3b:9b:08:6a:e6:e1:da:43:d6:b6:e3:ed:1f:
ea:de:ad:6b:68:6b:ca:11:c8:a7:7b:7c:39:80:c0:ba:6e:32:
3d:29:fd:e7:96:aa:38:dd:e6:0d:f4:88:dc:eb:61:a9:d9:c4:
39:8e:70:9e:93:f3:c5:a0:42:b7:95:ef:e7:2d:5f:63:a4:1f:
a4:35:34:8e:6d:68:cb:35:86:d2:23:d7:6e:3f:79:9a:00:ee:
9c:2c:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:49 2026 by rpki-client