Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: r9R+TSMRyTQoZqfMjjCSzOZE+icjQ4B6dzQoQMTtjEY=
Subject key identifier: 00:74:81:B0:6A:76:F4:24:7E:EA:26:0D:EA:E6:EC:73:C9:43:D2:A2
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 01A0C745C06B25A9E47DE8DD7D59746FD269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 04:00:32 +0000
Manifest this update: Tue 22 Sep 2026 04:00:32 +0000
Manifest next update: Wed 23 Sep 2026 04:00:32 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: Odttgj2QvswL7KKyVMMQXB+xqGFfjqORtFkSmafjuew=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:45:c0:6b:25:a9:e4:7d:e8:dd:7d:59:74:6f:d2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Sep 22 04:00:32 2026 GMT
Not After : Sep 23 04:00:32 2026 GMT
Subject: CN=007481b06a76f4247eea260deae6ec73c943d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:33:b7:93:87:61:65:bd:2b:93:dc:18:c8:
75:ce:40:9d:ed:d2:65:8e:1b:94:3d:4c:df:a8:4b:
99:0d:52:29:0b:f2:9d:4b:3c:76:61:74:ad:d7:c7:
e5:1e:21:5c:18:b7:ca:ab:6a:3e:af:1f:a8:e6:d0:
2c:34:46:eb:19:dd:a7:db:b6:3c:7f:1c:de:92:c5:
5e:a3:3e:07:f3:f6:14:57:56:af:57:30:10:4f:53:
d3:ed:28:da:17:02:0c:57:bb:77:15:36:ee:21:30:
aa:ca:9e:c7:a2:ee:4e:23:7d:80:12:97:ab:56:da:
03:35:c9:96:d5:9e:e2:89:fc:01:d5:52:69:6d:b9:
98:1f:16:fc:ad:d7:9f:7a:65:66:95:5d:bb:6f:d2:
fe:55:2c:3b:1c:1a:b4:2d:72:d4:d1:1a:01:65:e9:
c2:0b:2e:4b:2a:e2:cc:d7:e1:6f:dd:59:43:c7:6d:
c7:0e:51:46:83:94:1c:33:e7:0f:f6:c7:0f:60:7e:
15:f2:14:8c:04:5c:5f:c0:75:f7:82:b4:46:45:fa:
3d:c2:d0:b4:58:b8:8c:f0:8b:9a:fd:c2:f0:cc:be:
cf:58:aa:6c:b9:8e:ec:fd:eb:ec:49:5f:39:f6:ac:
d8:f7:f8:65:01:db:0c:01:f2:27:b9:58:a7:69:5b:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:74:81:B0:6A:76:F4:24:7E:EA:26:0D:EA:E6:EC:73:C9:43:D2:A2
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:3c:8f:9b:d2:3c:1f:18:66:1c:21:cb:05:b0:f5:cb:50:
c7:46:2e:b5:83:c5:d5:ee:77:c4:b7:f6:da:51:da:59:e0:fe:
6a:60:30:ce:a1:78:ed:7f:8d:c0:2c:9c:c7:4d:d2:45:e6:72:
12:f9:a1:bb:43:ea:4b:1a:1a:6b:67:c7:8d:85:4f:a8:2f:0b:
49:40:0e:3a:e1:fa:63:a8:83:e7:85:b9:d6:62:a6:f1:bd:e3:
54:f2:5d:2c:40:2a:17:35:63:ea:04:be:4e:0e:60:10:7f:9e:
3f:b0:90:7b:c0:91:04:34:86:fc:1b:c5:87:cc:a9:d2:c0:39:
cf:dd:ed:d2:9f:5a:c6:96:f4:a4:42:42:71:31:68:25:d0:da:
9c:98:d9:e2:de:36:80:ac:8d:1a:1c:3a:c9:cf:2b:e3:13:ae:
6d:ea:22:af:79:a0:df:27:bd:ed:58:cd:9b:12:dd:b8:bd:18:
d7:1f:6d:d8:62:15:50:a9:d8:50:7a:b5:74:f0:5f:f9:69:86:
5f:c0:a2:51:6c:d6:04:3a:f9:94:09:00:5f:d1:e7:47:62:af:
c3:a2:e2:d6:b1:4e:24:c5:fb:26:79:ba:24:f1:94:f9:79:94:
20:b8:e5:94:a1:aa:27:09:cd:dc:e2:6d:be:4c:04:ea:57:35:
93:fe:6d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:19:48 2026 by rpki-client