Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: 3NTCcU7nbu00ZCJPj4w1+ywZEiOhzLgF91woaooNDUo=
Subject key identifier: CD:A9:D3:B0:6F:6A:22:66:F7:F1:EB:B0:1B:E3:19:EE:FE:17:55:39
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 019CAB6AE56D7022FDEC6AC209124BE52BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:35 +0000
Manifest this update: Sun 01 Mar 2026 22:00:35 +0000
Manifest next update: Mon 02 Mar 2026 22:00:35 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: WWTz76szyL241cLkAGAQ5gAbMc6cAueBJBp0huOVnNo=)
2: G2r9KsUTtbxHKB5JKNC2RVQtxUM.roa (hash: tpJ2/AVYhiDqHmd6oabX9AFZV9PFSJLtrHg1I6lP9Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e5:6d:70:22:fd:ec:6a:c2:09:12:4b:e5:2b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Mar 1 22:00:35 2026 GMT
Not After : Mar 2 22:00:35 2026 GMT
Subject: CN=cda9d3b06f6a2266f7f1ebb01be319eefe175539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:48:a2:ca:21:30:e1:06:0c:bf:01:f7:14:ee:
f5:97:2b:f4:c2:9b:56:4a:3a:aa:4d:8d:5f:50:dc:
cb:b5:6f:90:2b:5c:fd:14:9f:3a:98:61:54:6f:08:
8d:db:b9:76:4f:87:ed:4a:f7:bb:61:e7:9a:d1:08:
cd:10:72:7c:08:88:ce:70:35:ea:17:2c:49:b2:07:
7f:de:18:20:ed:44:db:64:ab:dc:61:e8:ce:c0:59:
5b:6a:da:15:a1:4d:10:38:59:4e:ea:dc:7e:cc:25:
2a:7e:30:8d:37:7f:7d:20:fc:ab:dc:6a:12:84:5f:
58:ec:06:21:43:a2:71:01:bb:80:c6:56:da:9f:87:
e1:f2:aa:65:32:5a:65:7c:f4:21:37:28:67:5c:02:
5e:14:76:34:fd:53:cf:ea:ea:8d:25:6b:6d:1c:cc:
92:37:7f:87:5c:3e:67:67:14:92:a2:62:b4:5e:77:
f5:64:98:4e:a0:86:ea:95:12:85:5c:eb:f5:bf:de:
15:7d:bd:df:79:6e:43:9b:bd:f9:97:0c:c2:33:5f:
24:45:2d:6d:f6:b8:cc:81:da:60:05:b7:ab:1e:b7:
66:8e:d5:e7:4f:a7:de:bf:a8:3e:76:c7:22:91:4b:
fe:3b:6e:68:01:f7:09:5f:02:ce:6b:e1:2f:c3:56:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:D3:B0:6F:6A:22:66:F7:F1:EB:B0:1B:E3:19:EE:FE:17:55:39
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:30:6b:c2:c2:bf:28:27:0c:01:55:18:d2:72:6d:9a:05:4f:
ba:2e:e9:2f:b8:52:44:2e:b0:d1:7f:62:6e:0c:5c:11:89:ae:
e5:92:5c:7f:dc:54:70:11:40:3e:b6:28:a4:21:f6:d6:dd:63:
4c:55:a8:fb:54:f6:bd:ea:c0:a9:99:f8:c9:b4:ad:30:ea:37:
bf:18:99:f3:46:84:83:6d:5d:b3:bf:9d:76:ed:9f:bb:4c:8d:
9c:5a:01:26:19:d0:d1:4d:cc:b8:67:07:d1:19:58:6b:35:ea:
8d:a1:76:c4:2c:6d:c0:fd:a1:0a:a4:13:ef:1f:b9:db:91:e5:
29:49:59:25:ad:68:d6:04:a1:ec:36:8e:68:26:11:6b:44:8c:
83:a4:f6:6f:8f:dd:2d:9e:93:a6:4b:0c:4c:6f:25:25:3c:0d:
3b:af:76:16:e2:f0:94:c9:8f:de:e7:08:1f:b2:56:d0:c0:60:
fb:08:c1:3f:de:a6:bc:de:c1:cf:75:8c:04:76:fd:53:f5:91:
d6:06:de:86:5b:64:7b:33:61:36:e8:8c:9b:61:79:ce:98:e9:
95:29:97:5c:ba:89:39:f8:08:dd:8d:77:eb:a5:82:1f:89:9f:
67:7e:95:5b:b3:97:70:c1:17:f0:35:ea:2f:b0:50:20:19:5e:
70:b0:d2:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrauVtcCL97GrCCRJL5Su9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz
NzJmM2UwHhcNMjYwMzAxMjIwMDM1WhcNMjYwMzAyMjIwMDM1WjAzMTEwLwYDVQQD
EyhjZGE5ZDNiMDZmNmEyMjY2ZjdmMWViYjAxYmUzMTllZWZlMTc1NTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30iiyiEw4QYMvwH3FO71lyv0wptW
SjqqTY1fUNzLtW+QK1z9FJ86mGFUbwiN27l2T4ftSve7Yeea0QjNEHJ8CIjOcDXq
FyxJsgd/3hgg7UTbZKvcYejOwFlbatoVoU0QOFlO6tx+zCUqfjCNN399IPyr3GoS
hF9Y7AYhQ6JxAbuAxlban4fh8qplMlplfPQhNyhnXAJeFHY0/VPP6uqNJWttHMyS
N3+HXD5nZxSSomK0Xnf1ZJhOoIbqlRKFXOv1v94Vfb3feW5Dm735lwzCM18kRS1t
9rjMgdpgBberHrdmjtXnT6fev6g+dscikUv+O25oAfcJXwLOa+Evw1bP0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2p07BvaiJm9/HrsBvjGe7+F1U5MB8GA1UdIwQY
MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt
ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm
LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzBrwsK/
KCcMAVUY0nJtmgVPui7pL7hSRC6w0X9ibgxcEYmu5ZJcf9xUcBFAPrYopCH21t1j
TFWo+1T2verAqZn4ybStMOo3vxiZ80aEg21ds7+ddu2fu0yNnFoBJhnQ0U3MuGcH
0RlYazXqjaF2xCxtwP2hCqQT7x+525HlKUlZJa1o1gSh7DaOaCYRa0SMg6T2b4/d
LZ6TpksMTG8lJTwNO692FuLwlMmP3ucIH7JW0MBg+wjBP96mvN7Bz3WMBHb9U/WR
1gbehltkezNhNuiMm2F5zpjplSmXXLqJOfgI3Y1366WCH4mfZ36VW7OXcMEX8DXq
L7BQIBlecLDS/Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:49 2026 by rpki-client