Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: AbMxfBuiUIdX6fMMbWGVk9jdYKIaLVBKGl0C2Ovhwrs=
Subject key identifier: 73:02:FC:1E:69:91:E6:60:27:64:EF:37:5B:8A:E8:57:B6:D1:B3:0D
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 019EBE7EB67F3A67E57E2ABC2DD4985147CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 01:00:35 +0000
Manifest this update: Sat 13 Jun 2026 01:00:35 +0000
Manifest next update: Sun 14 Jun 2026 01:00:35 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: j2wPrkljAoktmctBraGDb9UyOKcaRyg70r+Mr8kL+lo=)
2: G2r9KsUTtbxHKB5JKNC2RVQtxUM.roa (hash: tpJ2/AVYhiDqHmd6oabX9AFZV9PFSJLtrHg1I6lP9Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:b6:7f:3a:67:e5:7e:2a:bc:2d:d4:98:51:47:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Jun 13 01:00:35 2026 GMT
Not After : Jun 14 01:00:35 2026 GMT
Subject: CN=7302fc1e6991e6602764ef375b8ae857b6d1b30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:e7:78:a1:63:cc:a9:6b:be:a5:52:af:39:
e0:fc:9c:17:03:5f:38:06:d6:b9:ee:5e:28:ff:a1:
25:19:51:ff:85:33:2b:52:f8:0e:af:5b:80:de:ad:
98:31:2b:d2:be:c2:c6:c8:b4:35:36:7a:a0:9f:19:
7e:14:a5:1d:73:ca:c0:c1:1f:de:d7:95:7e:e2:a2:
ad:b0:d6:c3:39:29:f5:73:36:ef:59:70:6d:d6:15:
48:30:39:f4:43:82:30:1f:5c:21:7b:22:75:8e:00:
56:55:e6:c8:41:8e:d3:45:a5:7f:65:00:1d:79:0d:
30:d1:67:45:ce:41:36:af:18:37:b7:dc:cf:9c:a2:
45:10:2b:ea:74:92:37:e4:78:17:fa:4a:4c:01:8b:
90:19:89:4a:dd:bc:50:86:10:44:af:61:b6:fc:b1:
32:7a:c3:43:9e:e1:ef:f7:c1:36:e7:6c:02:8a:9b:
47:a5:27:1f:0d:73:47:44:b8:4c:57:af:ae:5e:9f:
da:9f:8c:9e:13:e3:b7:8a:d7:b3:fc:84:60:4b:7e:
a8:b9:f3:f4:cb:a2:c1:3d:83:91:7d:07:b6:b0:de:
94:62:c9:07:2a:ac:8e:aa:76:0f:b1:55:36:62:eb:
ec:5c:b2:ac:a3:ad:18:8c:0e:e4:eb:9b:46:e7:c5:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:FC:1E:69:91:E6:60:27:64:EF:37:5B:8A:E8:57:B6:D1:B3:0D
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c0:a7:ff:92:6c:5f:b4:93:c2:81:98:aa:2d:95:27:79:90:
0e:58:2e:20:7e:84:4e:b4:3a:18:98:ee:4f:97:45:e9:05:63:
54:a3:fc:3e:0c:bd:60:79:b6:f4:25:c1:48:57:e8:18:ba:86:
d9:95:ac:e0:c3:fc:bf:8f:ff:ea:86:58:b8:59:f3:58:0b:05:
be:34:aa:9e:cf:df:02:7f:50:37:80:18:ab:d2:7c:ad:f9:f9:
bc:01:da:15:61:3a:b8:e7:a0:7b:bf:8d:3e:eb:b3:8a:47:0f:
13:d3:c1:6c:ac:b1:9c:2c:64:5a:0b:b8:0a:a5:d7:4f:83:7f:
fb:c3:22:e1:90:a4:77:2b:58:a5:54:40:cf:13:9f:9d:8a:95:
ce:05:b8:a1:65:a9:06:13:fd:cd:a9:7a:7c:f6:42:ab:b7:7c:
fb:03:d5:ef:2e:88:d6:0c:aa:31:56:d2:51:cd:77:21:87:32:
4f:18:37:c6:de:c0:fa:85:4f:27:49:0e:29:0f:70:92:99:50:
dc:ec:2c:e9:53:6a:72:fb:a0:99:de:79:af:d9:cc:50:ee:41:
a4:13:49:00:55:43:2d:99:7f:e9:55:7e:9a:c0:3e:0b:52:47:
e0:19:f8:f5:26:dc:c8:c0:b0:fc:02:07:e1:25:29:75:6e:b3:
45:f4:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:58 2026 by rpki-client