Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
File: BQJMtECm3Xana1aUwOL07jMOCnw.mft (raw, json)
Hash identifier: uksPv5JgRTb/H/TX8zOFnp+Jj9jUMtJBktxyyZdY4Dk=
Subject key identifier: 47:67:99:E6:A6:A7:24:7D:6E:6B:3A:25:5B:60:55:55:66:52:F6:D9
Authority key identifier: 05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
Certificate issuer: /CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Certificate serial: 019D9AE394122B64D3CF53C1AB7BBB6C06DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
Manifest number: 05EC
Signing time: Fri 17 Apr 2026 10:01:38 +0000
Manifest this update: Fri 17 Apr 2026 10:01:38 +0000
Manifest next update: Sat 18 Apr 2026 10:01:38 +0000
Files and hashes: 1: BQJMtECm3Xana1aUwOL07jMOCnw.crl (hash: SAKb9EXlEHj3Sp0ZO14ZS90F8nM6MUvuCq8YE4EwGu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:94:12:2b:64:d3:cf:53:c1:ab:7b:bb:6c:06:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Validity
Not Before: Apr 17 10:01:38 2026 GMT
Not After : Apr 18 10:01:38 2026 GMT
Subject: CN=476799e6a6a7247d6e6b3a255b6055556652f6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:19:f8:74:be:b0:e3:2b:66:d9:88:5d:41:
73:04:55:f1:71:2e:e1:92:18:e0:c3:a5:fd:24:04:
11:2f:2a:7e:70:69:78:01:76:ef:46:6e:ce:35:37:
d1:0f:7a:ad:1b:24:ac:93:4a:3d:90:1c:22:21:de:
7d:3a:1d:fc:db:55:5f:4a:8b:55:cc:53:06:a4:d2:
ab:36:d7:6b:56:d8:0e:15:69:2f:e4:a3:c7:2f:7f:
e4:78:0f:07:7f:32:9f:e9:03:a4:9a:df:e8:76:2c:
a7:8f:f0:0b:6d:42:f0:a9:da:f3:d0:c2:70:8a:88:
31:5f:fc:87:df:ac:d3:a0:c3:27:e5:e7:c4:e4:5e:
69:bf:11:e4:5d:d8:71:e2:28:de:d2:d1:8b:4b:2d:
db:62:ac:51:1a:9d:40:80:97:93:73:e0:a0:e8:67:
4a:bd:d4:a7:76:c4:ef:9a:1c:13:71:3d:32:56:72:
57:2a:21:7f:08:17:dd:df:a9:05:6f:2e:68:a0:e2:
58:44:22:13:6e:d6:e1:54:f1:25:f1:8b:9c:ca:74:
3d:71:48:8a:2e:a1:cc:6f:ae:c9:45:39:f9:24:d3:
86:24:3b:de:4b:d2:d2:3f:d3:93:fe:16:e4:94:66:
0f:82:f3:56:06:95:fe:ef:92:41:81:64:3c:22:22:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:99:E6:A6:A7:24:7D:6E:6B:3A:25:5B:60:55:55:66:52:F6:D9
X509v3 Authority Key Identifier:
keyid:05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b7:79:41:d1:06:ad:33:a7:a6:6f:4b:96:79:29:e1:ff:77:
d1:e7:84:10:af:3b:a1:fd:f4:24:e4:d5:5d:a9:b4:be:20:a3:
ce:f2:0a:f2:29:33:77:fe:3f:7c:72:73:df:44:17:5d:e6:c9:
54:15:fc:e8:a6:fc:54:c0:42:88:36:89:ec:2e:1d:6e:5a:e8:
1a:c8:44:24:d2:54:4b:f0:4c:f6:97:ec:10:ac:e5:1f:de:a8:
77:4e:bf:7d:c0:50:cc:55:38:b5:03:8c:b1:c2:11:ff:a1:0f:
ae:1e:2b:be:e3:93:d2:40:cc:69:d1:86:87:cd:a3:92:91:6f:
c5:d1:7a:3b:98:1d:ec:b1:b7:fc:98:1a:a2:57:02:3c:e8:25:
92:18:30:4e:97:b5:ac:d0:b5:0e:b0:5f:09:01:84:34:f0:df:
08:8a:ca:ae:df:99:74:32:cd:ff:28:d5:ee:69:dc:07:d8:26:
de:fc:3e:37:c8:86:92:18:51:c2:a4:3d:c0:91:3c:cf:cc:ca:
32:74:17:13:a4:f2:57:4b:d8:ca:df:c6:a9:df:85:d9:42:e5:
88:3a:24:58:46:9c:ca:8f:15:96:63:50:86:92:f1:4d:0d:1f:
ad:67:3d:d1:6e:47:b0:3e:7d:98:4c:e9:4e:e8:10:47:da:04:
36:de:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:35 2026 by rpki-client