Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: oDjp6BVcHIRnGYss9HSVI9rjUUurJLT8tv54pv4/Kyo=
Subject key identifier: 84:4E:4E:DD:43:36:79:A9:8E:82:A5:6D:4F:F5:BE:95:C5:79:5C:C0
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019DA3E695FAAA8BCCB69D76B53304973F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 04:01:30 +0000
Manifest this update: Sun 19 Apr 2026 04:01:30 +0000
Manifest next update: Mon 20 Apr 2026 04:01:30 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: guvv3DBDDoRHbIX3scqMPcwX4uhwmfWENm0b7yCUhWo=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:95:fa:aa:8b:cc:b6:9d:76:b5:33:04:97:3f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Apr 19 04:01:30 2026 GMT
Not After : Apr 20 04:01:30 2026 GMT
Subject: CN=844e4edd433679a98e82a56d4ff5be95c5795cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:0d:73:37:15:94:36:dd:20:63:33:17:12:
ce:73:fd:e8:d0:39:bc:1f:71:69:49:12:1e:54:43:
d9:60:48:2c:53:5c:d5:27:20:a3:b2:06:4f:23:a9:
f8:22:f6:1d:af:39:4d:70:62:6e:3a:2f:f3:57:83:
4b:5b:ef:71:ce:47:21:ba:f9:c1:1b:83:f6:cf:5a:
2d:57:69:05:b3:19:80:0a:90:2d:d2:6b:1d:81:35:
27:e7:fc:d5:c2:23:4b:ba:f8:cb:aa:91:97:17:26:
cd:f0:da:94:b6:1b:71:cc:f3:f7:e0:be:23:d0:b8:
67:d2:03:e4:e4:16:6b:6b:57:50:40:41:d1:bd:87:
9b:54:7a:41:b5:f5:53:f2:70:4f:1b:b5:8f:b6:47:
e2:f1:73:ba:b8:d7:30:e7:e6:fd:f4:80:9d:d2:5a:
ab:68:3a:84:fe:de:ba:54:ea:7c:dc:9a:45:29:41:
06:76:94:a4:f3:24:b6:73:83:a1:35:b5:46:6a:63:
7a:68:b1:5d:3e:0a:b6:1b:78:d2:14:af:4d:97:a3:
1a:c9:99:b8:97:41:09:fa:45:8e:d8:4b:42:d4:92:
59:5f:95:c2:d6:d5:8d:5b:e6:af:47:07:dc:c0:85:
27:8b:26:a3:ed:1c:45:71:1c:e6:8f:33:46:1e:ad:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4E:4E:DD:43:36:79:A9:8E:82:A5:6D:4F:F5:BE:95:C5:79:5C:C0
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:94:cb:e8:0a:55:d0:f9:67:86:45:01:40:d7:0c:83:c7:0a:
97:a1:d0:61:0e:74:7b:f8:59:a8:c4:7c:bf:1e:3c:ed:f7:f1:
6b:72:ca:da:57:82:ef:dd:ad:9e:0f:6b:16:29:af:3c:8f:a5:
76:b9:e9:d1:f9:a9:d5:9b:28:e4:d3:22:48:c5:48:e5:f0:b1:
ec:25:d3:5b:b1:ce:e0:ad:a5:31:39:1f:e3:e1:e2:bb:0d:8e:
b2:2b:2f:28:c9:2f:7e:9a:62:9e:f4:70:b2:77:9f:bd:35:ad:
aa:f7:76:88:ec:12:3e:b8:5c:a8:79:67:9b:c9:34:19:2f:54:
c4:af:b2:65:c9:0c:3d:6d:49:7b:3e:ec:7f:35:a1:c5:49:63:
c0:7a:e4:4d:6e:ff:aa:5a:a9:0c:3f:a4:26:b1:9e:1b:f5:e4:
01:37:e9:0c:bd:d4:00:41:e5:63:a0:5e:db:70:26:f0:2f:10:
26:1a:76:0e:3d:9b:4c:57:6a:75:c9:ca:fa:9e:08:1a:fb:b7:
24:2f:5e:31:3f:34:43:8e:44:bd:4a:d9:67:d5:78:2f:e0:3b:
09:5f:9f:e0:04:36:9e:97:52:a5:c8:ef:5a:39:38:05:49:c0:
f9:86:da:20:7c:60:3d:9c:eb:d1:6d:be:f5:6f:53:52:4a:00:
7b:62:e9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:07 2026 by rpki-client