Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: mxkIMlf74VSpO4glUP2YR7rFX+j5/1yrRRWw1W9XlCk=
Subject key identifier: 49:AC:77:0A:2F:AF:DF:99:8C:25:91:C6:F0:85:39:0D:2C:E4:EF:4D
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019FAB635D74D9A00430084A50E76DEEF64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 01:00:43 +0000
Manifest this update: Wed 29 Jul 2026 01:00:43 +0000
Manifest next update: Thu 30 Jul 2026 01:00:43 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: V2fJ704f1zqWByM2hMTga9Hs1gzKLHFFK25C5Qu635w=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:5d:74:d9:a0:04:30:08:4a:50:e7:6d:ee:f6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Jul 29 01:00:43 2026 GMT
Not After : Jul 30 01:00:43 2026 GMT
Subject: CN=49ac770a2fafdf998c2591c6f085390d2ce4ef4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4f:da:a8:7c:3c:2d:51:0a:52:6d:32:b7:5e:
1b:31:72:4a:52:b1:a1:64:d4:28:1b:59:44:08:5c:
53:9c:95:7d:cb:14:16:16:92:66:98:b0:6e:87:0b:
0e:2c:f4:9c:09:55:7d:b9:ab:58:26:3a:08:91:84:
4e:5c:00:7e:d3:59:ec:74:f0:6e:d5:3b:fb:32:1c:
ba:99:45:98:1f:88:a5:55:46:7b:d9:1d:4d:30:e5:
6d:2e:39:d2:0a:52:f4:08:2f:89:49:1a:fc:59:58:
76:c9:23:ee:0e:ea:90:90:1a:f2:be:d1:88:b5:ae:
55:0e:28:5f:28:f1:67:fc:0a:34:19:48:67:c8:77:
ac:0d:0b:5b:e3:43:5f:11:80:a5:a6:a4:b5:f6:71:
7e:92:ec:33:88:62:7d:10:1d:22:d6:37:18:bb:54:
14:26:00:00:7d:5d:85:f8:5d:aa:c9:d9:7f:cb:8e:
aa:62:05:3b:17:3e:8a:85:0c:c1:45:32:f1:98:f4:
29:6f:cb:cc:b6:62:df:7f:14:37:25:bd:ca:0a:6c:
d7:29:38:a4:98:26:b7:df:ff:67:a3:6f:76:f4:18:
70:04:c6:85:7a:48:6a:8a:84:ce:e5:cb:44:8e:35:
94:b2:2d:c2:f4:7b:34:e7:13:30:5b:c3:79:b6:94:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AC:77:0A:2F:AF:DF:99:8C:25:91:C6:F0:85:39:0D:2C:E4:EF:4D
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:81:1a:ba:5e:69:93:19:1c:37:bd:cc:3a:22:73:b9:a3:c0:
76:56:2b:ec:5d:f6:97:e9:24:20:9b:0f:73:cf:72:e7:98:c1:
f4:fa:7a:59:e4:77:32:b4:63:83:21:55:2a:e4:0c:2d:dd:e4:
9f:4e:3c:ba:10:44:fe:1c:76:d3:8a:fa:32:88:04:53:0a:7a:
40:cf:19:b0:d7:d1:f1:7d:45:78:4d:de:b9:11:57:fa:57:4d:
f9:25:de:58:2c:5c:57:76:cf:3d:14:c0:59:85:08:72:6b:d4:
04:43:9f:97:ea:78:51:79:a4:9e:5d:cd:bf:4b:97:9c:5c:5b:
05:02:c6:74:1e:f5:3b:16:ab:37:4d:07:9a:a7:25:0a:e3:0d:
68:3f:37:73:20:7f:40:a8:91:f8:0c:4e:e2:dd:34:ae:19:26:
7c:fe:6f:7e:1c:0a:b1:99:79:09:78:d8:41:6e:31:06:cd:cd:
d4:ca:86:b4:95:3c:f9:df:09:29:14:73:85:28:b7:f8:11:22:
c3:2e:d0:aa:7e:a2:d1:00:0d:13:c3:21:c0:91:a3:2d:b0:fb:
35:fe:f5:73:ae:a6:d0:9c:5c:c3:f6:53:5e:5d:48:27:9e:c6:
34:cf:f6:9b:f9:7a:fa:40:76:68:86:6a:4d:8f:ad:a9:42:5c:
44:fd:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:13 2026 by rpki-client