Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: ymYg9xLzxeP1bsnVGQt3eqQF9EV2p8wswPNevCXWaLY=
Subject key identifier: 76:11:29:BD:BA:6C:B6:62:CF:70:B3:A7:E2:12:1A:9F:8D:8A:37:2A
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 019CAAC61A7DEB40013FC885988ABB9DAD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 046A
Signing time: Sun 01 Mar 2026 19:00:35 +0000
Manifest this update: Sun 01 Mar 2026 19:00:35 +0000
Manifest next update: Mon 02 Mar 2026 19:00:35 +0000
Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: i4x8Z+2G6/uY18KpLAGVInu0i4vepLlGeVnpXDWt0kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:1a:7d:eb:40:01:3f:c8:85:98:8a:bb:9d:ad:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Mar 1 19:00:35 2026 GMT
Not After : Mar 2 19:00:35 2026 GMT
Subject: CN=761129bdba6cb662cf70b3a7e2121a9f8d8a372a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:db:4c:b3:9b:ab:d1:6e:24:f9:33:94:eb:
18:5d:4c:03:40:fd:31:54:3c:fd:c4:9f:bc:1d:ac:
47:c4:27:ad:df:87:84:cf:e4:c0:37:6c:68:d4:18:
af:96:70:9d:8b:aa:24:ee:16:70:23:2f:fd:bf:b5:
01:01:da:2b:ca:ff:ee:2d:4f:c2:04:79:19:d1:d3:
61:19:0c:5d:fc:81:d0:d1:78:82:a2:b1:f5:13:91:
5d:fc:7c:05:0d:66:2e:58:4b:01:66:42:16:7f:6c:
17:7c:17:1d:0a:cc:dd:4e:84:51:c6:e1:4f:d2:c9:
4c:b8:71:71:2a:5c:23:d7:32:f2:c7:bc:a5:35:d8:
6a:bf:a5:8a:26:f1:80:4b:f2:81:cd:c5:8d:94:35:
03:2c:94:8e:1a:30:72:a6:52:c1:33:c5:28:42:41:
dd:61:9e:f1:f0:e2:ad:2c:3d:c2:21:89:4b:e8:1a:
f1:45:93:00:40:5a:8f:70:e3:67:d1:38:a6:a4:f7:
6b:7d:05:90:68:d4:59:3c:02:c8:78:6c:ef:34:bf:
69:61:d9:87:3f:b9:3e:3a:9d:01:61:d4:79:af:a7:
6c:ad:ce:12:cf:22:e5:a3:9d:7d:66:aa:5c:17:59:
00:04:07:c7:6e:82:5c:92:68:5d:12:b0:8a:7b:0e:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:29:BD:BA:6C:B6:62:CF:70:B3:A7:E2:12:1A:9F:8D:8A:37:2A
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9d:90:c0:6e:88:6a:17:94:85:3d:76:22:da:8f:4d:30:c8:
4c:b7:aa:a0:e1:9c:2b:a3:0b:77:d0:eb:7f:4c:8a:62:fd:b4:
32:85:b1:10:85:c8:10:e2:a9:2c:e5:3a:a9:c8:b0:a4:0b:c9:
c2:ba:c9:9d:6d:7d:49:0e:c2:a1:0c:d1:66:18:cd:14:97:88:
c0:9a:5d:63:a1:a8:65:26:9c:80:6d:d2:59:ee:22:5f:ce:91:
1d:88:25:50:87:e1:1a:76:39:6a:b8:c3:a2:86:56:d3:03:6a:
fa:86:36:90:15:d1:e4:a4:0e:c8:d7:08:07:76:4b:45:f0:ab:
30:62:f4:50:e6:16:97:b9:b8:f9:97:d9:5f:01:e6:8d:b2:7d:
fc:4b:d7:1d:7d:e1:5b:59:ad:1c:ca:4a:1b:2b:ac:00:c6:98:
4e:28:a5:45:e6:68:9f:34:37:de:40:91:ee:00:15:cd:34:2e:
0c:06:55:2c:5f:e0:e0:e8:16:e6:b4:ed:b8:be:73:f8:b3:63:
89:bd:b4:49:dc:4d:7e:c1:0e:5a:1e:83:9c:c7:d5:01:e4:a7:
c3:83:6a:45:6a:46:22:8a:82:9a:54:e6:80:f7:d0:dd:c3:48:
4d:b9:25:e7:0e:70:15:ce:f8:5b:9f:2d:fc:2e:53:51:6a:05:
6f:1e:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:05 2026 by rpki-client