Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: R+P2wCv9OuBVfRZsjLZ2tcwFHuaUG7wd2EbVaZ2tIaI=
Subject key identifier: 8E:E4:0B:5C:6C:2C:C6:0F:37:79:14:BB:8C:56:42:3E:1F:66:7B:5D
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 01A0C8590F12B13D48AC6E6D614E162FF578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 1165
Signing time: Tue 22 Sep 2026 09:01:14 +0000
Manifest this update: Tue 22 Sep 2026 09:01:14 +0000
Manifest next update: Wed 23 Sep 2026 09:01:14 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: csXnTm3LuaJrttM8TTm9CVKYS+lk5GmyY0DhiLptmTY=)
2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:0f:12:b1:3d:48:ac:6e:6d:61:4e:16:2f:f5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Sep 22 09:01:14 2026 GMT
Not After : Sep 23 09:01:14 2026 GMT
Subject: CN=8ee40b5c6c2cc60f377914bb8c56423e1f667b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:75:9a:9f:f6:74:1e:d8:75:26:ab:59:c1:3f:
b4:0c:80:08:95:6c:8c:99:e6:8f:74:c3:ff:5b:7d:
14:5a:ac:ba:8a:23:4a:0f:9f:0b:04:ae:a6:2c:ab:
0e:52:f4:48:7b:6b:1a:8c:79:a8:88:4b:8a:08:89:
ef:36:b1:0f:15:e3:7c:ba:92:2d:3f:e1:b5:55:09:
b1:0e:cc:9c:bb:b5:f4:d9:f4:a9:41:c1:f1:52:5b:
89:e2:90:f3:74:e7:2e:55:a8:f9:71:7c:75:6a:b8:
95:74:ac:c3:b6:49:ff:3d:a1:06:9b:3f:d2:3b:19:
a4:49:b8:a8:17:28:b7:da:ec:d2:1a:bd:35:94:a1:
65:86:7e:82:f3:0c:74:3c:1b:4d:0d:12:e8:ee:d3:
ec:3f:1a:7c:8b:59:cc:ac:b3:03:f2:2a:49:23:a6:
a6:e1:c5:74:23:8e:4c:10:e4:16:91:78:be:7d:66:
96:96:c8:6d:dd:f6:3f:f1:de:7f:58:74:ce:7d:96:
50:4f:58:40:85:72:fe:be:10:a9:09:7e:f2:c0:7d:
27:f4:9e:cc:ff:5d:02:1c:a5:05:40:3c:21:50:01:
1f:2a:50:8f:c4:97:6e:39:8d:78:2b:9f:23:23:75:
86:87:10:33:4e:48:2d:50:95:a0:75:ae:4d:f5:5c:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:0B:5C:6C:2C:C6:0F:37:79:14:BB:8C:56:42:3E:1F:66:7B:5D
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3c:bd:48:21:eb:8a:21:bb:5d:f5:73:ff:b6:1c:dc:18:8b:
a3:23:58:d5:73:c4:f7:cd:81:5b:d6:df:22:e8:6e:ed:00:18:
0f:a9:3e:8d:4d:ae:df:08:19:5f:c9:67:32:e9:c1:48:ba:b4:
20:df:50:0a:13:dc:f4:2e:e1:4e:2d:27:17:f7:cd:66:aa:fc:
f7:72:5a:bc:30:ec:ab:a9:12:17:fc:24:27:98:a4:3b:eb:cc:
e4:53:56:b1:13:24:e5:e6:c6:36:6f:35:01:92:82:40:ac:0e:
9c:c0:87:9d:1b:2d:2a:cf:d2:ab:6b:5f:93:43:3c:2b:e3:0e:
d3:ae:12:92:a6:05:58:c5:0d:b9:55:a1:6f:02:ec:ba:9a:b2:
32:03:63:56:5b:d2:34:f3:c3:22:8c:c1:53:71:bd:63:a5:32:
c7:91:fe:c2:41:e3:f8:8d:52:84:e8:6b:54:64:71:b7:25:72:
7c:48:54:cf:c9:1e:f3:d9:98:75:d6:5a:c8:18:28:bc:99:1c:
47:e8:8e:4f:20:f3:d6:14:1c:61:81:fc:95:0c:87:4e:2f:e1:
6f:14:bd:35:ca:0d:9b:1c:03:a3:54:72:76:f1:81:61:f1:2b:
3b:51:a4:55:d4:69:c7:e2:2a:d3:7c:ea:47:e3:5e:86:0c:76:
b2:bb:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:05:24 2026 by rpki-client