Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: 6w1KqSaP+QXL+RVjcPoAc8pZVCLjfRCnNE6fERxe1MM=
Subject key identifier: B4:C0:74:63:29:96:D5:1A:E4:46:57:CC:02:D8:1D:B3:37:90:E6:60
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 019D98F47A3666E13095AC82EDDA0990DE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 0C86
Signing time: Fri 17 Apr 2026 01:00:51 +0000
Manifest this update: Fri 17 Apr 2026 01:00:51 +0000
Manifest next update: Sat 18 Apr 2026 01:00:51 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: xOqvmiV9WpkY10cvgr95TVtRQfAgDp+z1Jg11HFXOGs=)
2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7a:36:66:e1:30:95:ac:82:ed:da:09:90:de:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Apr 17 01:00:51 2026 GMT
Not After : Apr 18 01:00:51 2026 GMT
Subject: CN=b4c074632996d51ae44657cc02d81db33790e660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:d3:51:07:bc:13:9f:08:f2:40:7d:19:7a:
d9:8c:75:0e:c1:52:ec:04:6a:16:25:1c:d1:04:4d:
26:b0:b0:4a:bc:0f:1e:70:9c:97:01:9f:7f:60:c1:
48:5c:5d:40:51:ae:76:6c:61:e9:32:0b:3b:f1:e4:
d3:a2:3a:a8:81:05:e6:6c:d0:ec:37:d2:12:16:69:
8b:03:0b:5d:b3:ba:eb:5c:d5:fc:54:f4:5b:fd:39:
5c:b7:b0:42:6f:35:87:9f:03:c5:be:08:60:08:7d:
dd:f6:cc:87:f8:55:41:c1:2e:3e:15:24:6d:60:f6:
57:27:44:06:2b:fd:c2:fd:0b:bf:8a:69:22:92:b0:
27:bb:2a:06:42:f4:69:b2:03:cf:03:3a:ad:f7:d4:
cd:63:f0:67:a4:63:a2:e3:80:12:f1:e3:26:d9:ad:
c1:3f:e3:f0:30:a4:b7:d0:39:48:80:ac:9e:84:20:
e5:53:2c:5e:73:5e:5f:c1:27:81:4c:d3:38:1a:65:
68:b6:0d:f7:7d:04:ad:bd:ac:3f:d6:fd:e0:60:95:
56:92:fb:4b:ae:1f:89:92:ed:02:cf:d2:0b:4f:6c:
d6:a4:ba:7f:4e:9a:dc:8c:8c:23:4d:2d:c5:6c:12:
81:0e:58:cb:6c:bf:e9:44:c7:43:5c:40:1f:c2:5c:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:74:63:29:96:D5:1A:E4:46:57:CC:02:D8:1D:B3:37:90:E6:60
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:83:48:ee:0a:d4:e1:98:af:f6:84:d2:ce:63:27:e7:d6:04:
08:10:f4:03:c4:76:98:7c:02:51:69:ed:88:3e:72:ec:cb:80:
12:31:da:9d:c5:74:7e:2a:7f:fe:48:ea:f6:0e:29:43:89:84:
8c:04:60:87:04:96:40:fb:67:5a:72:63:af:0d:51:31:9d:e5:
59:1a:22:ab:6a:fb:69:1e:fe:ba:c0:4f:ed:27:77:a2:ab:02:
37:41:0d:1a:c6:d3:46:c3:1f:e2:38:44:6f:32:dc:5b:aa:8a:
d7:30:29:73:ff:7b:eb:ba:cd:60:62:d3:92:f7:3e:a9:c3:33:
34:25:4b:86:97:94:15:b4:c3:16:49:ab:1a:0d:d9:b9:9a:4f:
58:b3:a6:23:3f:e6:0c:3a:88:70:87:4e:ba:bb:17:1a:c0:45:
ec:af:72:fe:24:63:73:9d:74:bd:3b:6b:5b:1e:61:f5:e1:cd:
62:d8:ad:9d:c1:f0:a1:f5:9d:56:d6:84:24:68:a8:7e:4d:03:
b6:c7:ba:a7:81:77:1a:13:65:91:1e:66:aa:ce:6d:8b:a8:60:
3e:6a:cd:f1:98:1b:ff:8c:9e:c1:f2:89:a7:91:ea:b5:57:63:
58:c7:10:b2:ac:f6:58:4a:84:cf:f7:2c:c9:13:76:63:af:31:
e9:07:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:23 2026 by rpki-client