Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: WbQyU54q4R50k9960eBvuU0dUeN8ZAx5fxHz8cmXlQU=
Subject key identifier: CE:93:F4:58:CB:E8:E9:87:70:F0:B3:1F:F5:62:4E:A2:6A:13:D1:AE
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019CAAC69A1080017BE1F30E209E3910AC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:01:08 +0000
Manifest this update: Sun 01 Mar 2026 19:01:08 +0000
Manifest next update: Mon 02 Mar 2026 19:01:08 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: yth+UMXV3vP4c7vKet3tH0NuiKtPyNryaRfDukRhtXA=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9a:10:80:01:7b:e1:f3:0e:20:9e:39:10:ac:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Mar 1 19:01:08 2026 GMT
Not After : Mar 2 19:01:08 2026 GMT
Subject: CN=ce93f458cbe8e98770f0b31ff5624ea26a13d1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:de:93:3b:71:dc:78:6d:de:ab:d3:26:e4:
55:c8:0e:0d:a4:78:35:44:92:04:7b:62:6a:04:53:
03:fe:b4:9c:22:b1:26:6c:71:d1:b3:c9:13:95:92:
77:76:82:bf:b5:d6:81:ec:52:0a:ca:ea:29:6e:44:
1e:32:23:47:d7:c2:42:c1:4a:96:a7:71:9c:01:6c:
0c:b0:fd:97:b2:29:bc:1d:0c:b9:56:16:2c:48:db:
04:a5:4b:f1:f4:0a:aa:a0:57:0e:21:0a:dc:be:4c:
5f:75:38:13:d5:62:7c:5e:5a:9a:82:5e:76:36:ef:
b0:d3:f7:22:70:01:45:a3:ad:bd:3e:06:f3:e2:6a:
87:f8:28:9e:30:39:29:ab:f4:4e:ef:b1:a9:4e:8c:
94:ed:e5:04:84:da:98:a3:32:32:04:a3:1c:d1:13:
d5:07:8a:be:8a:34:23:8f:5d:e6:d4:5e:93:ac:4d:
b4:67:2f:d8:bc:ff:33:86:09:76:f5:22:0e:11:f5:
da:bd:74:ae:f9:74:63:de:29:f0:1b:fc:9c:00:d5:
5d:36:f3:65:58:bd:a3:23:11:93:2f:f1:94:4b:3d:
b8:57:16:24:cd:4d:e8:a7:2b:0e:c9:81:11:25:91:
e4:9d:bf:f7:e7:18:10:fd:48:b8:ce:82:df:ff:25:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:93:F4:58:CB:E8:E9:87:70:F0:B3:1F:F5:62:4E:A2:6A:13:D1:AE
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6a:82:a6:fd:13:a8:56:21:9b:f4:f9:5b:c4:c7:5f:ee:8b:
57:fc:b8:58:2f:c3:7f:62:fa:1e:ce:6b:e0:cc:78:56:40:fb:
2f:34:98:f8:3f:7e:45:1c:09:7e:93:71:45:a9:bd:b1:25:5a:
ff:ba:98:1c:a6:f5:ca:d5:97:f1:5d:55:cc:35:af:e2:63:d5:
16:66:a3:92:43:36:dd:d1:d6:da:17:b0:b6:64:d4:d6:14:61:
79:55:77:a6:ea:d7:d0:2c:75:39:79:75:a5:cf:82:63:ad:23:
04:66:dc:05:27:98:e8:7f:dc:f9:18:28:87:81:ff:c3:aa:ac:
f2:1c:0a:1c:9f:b0:1a:0c:bc:58:c4:b0:3e:67:6e:0d:16:56:
38:e9:a6:3f:19:9b:e2:f3:52:2b:b2:d3:2e:4f:a4:df:44:c8:
f7:99:05:2d:f1:af:4e:29:7a:87:c4:1e:fa:21:ad:9f:56:20:
30:38:45:9a:e6:07:1b:7a:28:e9:02:2b:0e:21:f7:16:5f:32:
74:90:59:34:e2:cf:90:3f:1d:95:34:7c:81:6a:d7:e0:ae:2a:
5d:e7:b5:71:bb:d7:64:3d:6c:5f:69:42:6a:ed:d0:87:c3:87:
10:75:6c:33:f2:d1:21:a2:d6:2b:82:cb:4b:5e:c3:3e:c8:05:
f1:19:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:38 2026 by rpki-client