Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
File: BQJMtECm3Xana1aUwOL07jMOCnw.mft (raw, json)
Hash identifier: jJVIrTz4Jj28r6FW4gsYD8FIV/3H2stoDtw0q0Br0yg=
Subject key identifier: BD:13:33:00:7C:4D:B8:4A:27:43:24:FD:E1:5F:F4:F8:DB:FE:A7:63
Authority key identifier: 05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
Certificate issuer: /CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Certificate serial: 019EBE7ED334870DB4C7AF28699E6BF603DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
Manifest number: 0683
Signing time: Sat 13 Jun 2026 01:00:43 +0000
Manifest this update: Sat 13 Jun 2026 01:00:43 +0000
Manifest next update: Sun 14 Jun 2026 01:00:43 +0000
Files and hashes: 1: BQJMtECm3Xana1aUwOL07jMOCnw.crl (hash: 8C48JVPmpn8dzYE5q6C5aidn4PdbiuBtDYh8kajNtmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:d3:34:87:0d:b4:c7:af:28:69:9e:6b:f6:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Validity
Not Before: Jun 13 01:00:43 2026 GMT
Not After : Jun 14 01:00:43 2026 GMT
Subject: CN=bd1333007c4db84a274324fde15ff4f8dbfea763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:0a:ae:4b:42:6a:0a:53:13:17:3d:80:4b:
02:72:a9:00:ed:96:9f:da:3f:b2:cc:a7:4b:74:0d:
fb:f6:58:34:b8:ff:11:87:0e:d0:51:73:e5:7c:c3:
f0:b5:00:25:cc:61:85:57:3c:17:79:54:dc:a8:55:
96:bd:40:70:0b:e2:e6:74:4f:43:a5:f3:59:11:bc:
1a:6a:20:31:57:22:e7:bf:c0:e3:3f:45:1d:87:82:
cf:37:30:3f:69:04:a9:91:d9:f5:fe:74:5c:53:89:
31:c6:e2:93:28:d5:b5:46:58:82:5a:08:5e:b5:c7:
bc:a9:68:12:a8:77:c1:1b:48:35:f4:18:0f:48:7f:
fb:23:14:73:c7:8e:52:08:dc:07:60:65:c5:54:7b:
41:f1:70:fa:88:ea:86:85:a1:38:73:4e:93:89:25:
c6:bc:61:ef:e1:b2:20:9c:26:b5:dc:11:bd:22:1f:
95:d0:13:c4:05:df:ef:08:c7:9f:e6:7c:d7:a8:1f:
fc:75:a3:bf:d3:99:06:a2:18:ae:5a:be:ba:64:4e:
55:a5:e6:e6:68:b7:6e:08:0f:60:18:9d:b6:7b:f7:
77:91:fc:f6:57:01:b7:b4:8c:1f:0f:bc:59:63:3c:
2d:43:32:da:f1:6e:83:2f:52:77:a7:37:0b:3f:e7:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:33:00:7C:4D:B8:4A:27:43:24:FD:E1:5F:F4:F8:DB:FE:A7:63
X509v3 Authority Key Identifier:
keyid:05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7a:a4:05:2d:7a:5c:a8:ae:00:d4:7b:a4:46:df:31:c1:31:
e0:d4:1f:e3:d2:76:d7:d0:2f:f1:37:fd:e7:81:67:51:6d:dd:
76:52:33:a2:67:35:c3:7a:d2:56:f6:70:b4:3f:2e:c1:b5:f9:
14:42:f9:5b:10:17:e9:c7:7f:f6:a7:98:3a:cd:ae:0d:82:3c:
f2:7d:45:3f:3b:56:6a:5f:e9:83:05:fb:b0:25:7a:6b:52:cf:
64:a0:78:af:b1:f5:b2:a2:90:2b:80:71:09:5f:56:ad:3c:2e:
76:85:3a:15:7d:65:29:61:94:44:96:95:ec:4d:53:5d:b6:7b:
15:25:f2:4e:b4:e1:ac:62:ff:a9:72:66:2a:35:e1:a1:99:bc:
3f:da:91:ac:90:2e:ff:b1:b7:24:6a:4b:6b:63:e1:1c:24:ca:
c7:e5:b8:7f:dd:52:6d:66:99:2e:57:e8:50:4c:d9:51:d7:20:
76:72:7d:3a:77:7a:48:0b:48:a1:d3:3e:5a:23:8f:37:38:8b:
17:16:d4:a3:d2:a3:a5:cb:b9:5d:a5:50:ee:83:21:4c:24:b2:
d3:37:20:fd:14:6e:2e:a8:2d:e2:e7:95:59:46:e2:f2:8e:af:
ed:6f:fc:be:c9:d7:d2:41:11:93:dc:e2:82:42:a9:4b:49:12:
6c:33:7a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ftM0hw20x68oaZ5r9gPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MDI0Y2I0NDBhNmRkNzZhNzZiNTY5NGMwZTJmNGVlMzMw
ZTBhN2MwHhcNMjYwNjEzMDEwMDQzWhcNMjYwNjE0MDEwMDQzWjAzMTEwLwYDVQQD
EyhiZDEzMzMwMDdjNGRiODRhMjc0MzI0ZmRlMTVmZjRmOGRiZmVhNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHAKrktCagpTExc9gEsCcqkA7Zaf
2j+yzKdLdA379lg0uP8Rhw7QUXPlfMPwtQAlzGGFVzwXeVTcqFWWvUBwC+LmdE9D
pfNZEbwaaiAxVyLnv8DjP0Udh4LPNzA/aQSpkdn1/nRcU4kxxuKTKNW1RliCWghe
tce8qWgSqHfBG0g19BgPSH/7IxRzx45SCNwHYGXFVHtB8XD6iOqGhaE4c06TiSXG
vGHv4bIgnCa13BG9Ih+V0BPEBd/vCMef5nzXqB/8daO/05kGohiuWr66ZE5Vpebm
aLduCA9gGJ22e/d3kfz2VwG3tIwfD7xZYzwtQzLa8W6DL1J3pzcLP+e6lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0TMwB8TbhKJ0Mk/eFf9Pjb/qdjMB8GA1UdIwQY
MBaAFAUCTLRApt12p2tWlMDi9O4zDgp8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFKTXRFQ20zWGFuYTFhVXdPTDA3ak1PQ253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNjBiMWEtMjdiYi00NjA0LTkzNDAt
YTgyMjYyMjA0ZTM4LzEvQlFKTXRFQ20zWGFuYTFhVXdPTDA3ak1PQ253Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNjBiMWEtMjdiYi00NjA0LTkzNDAtYTgyMjYyMjA0ZTM4
LzEvQlFKTXRFQ20zWGFuYTFhVXdPTDA3ak1PQ253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnqkBS16
XKiuANR7pEbfMcEx4NQf49J219Av8Tf954FnUW3ddlIzomc1w3rSVvZwtD8uwbX5
FEL5WxAX6cd/9qeYOs2uDYI88n1FPztWal/pgwX7sCV6a1LPZKB4r7H1sqKQK4Bx
CV9WrTwudoU6FX1lKWGURJaV7E1TXbZ7FSXyTrThrGL/qXJmKjXhoZm8P9qRrJAu
/7G3JGpLa2PhHCTKx+W4f91SbWaZLlfoUEzZUdcgdnJ9Ond6SAtIodM+WiOPNziL
FxbUo9Kjpcu5XaVQ7oMhTCSy0zcg/RRuLqgt4ueVWUbi8o6v7W/8vsnX0kERk9zi
gkKpS0kSbDN6QQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:02 2026 by rpki-client