Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: 001MwRcnZIl2hddIeYy6acY1JLa8sMTgxsRgVAy7Xi0=
Subject key identifier: 91:F9:7C:57:54:E2:12:27:A4:4C:2B:BA:C3:4E:C6:00:D7:DB:3B:7F
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019CACEBB82F96D7E03328FC44A4D72D96B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 029D
Signing time: Mon 02 Mar 2026 05:00:54 +0000
Manifest this update: Mon 02 Mar 2026 05:00:54 +0000
Manifest next update: Tue 03 Mar 2026 05:00:54 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: jvHJxO6ASAZrqfLb6aJ6/6GEXkA8AgHT3akBuZgwatk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b8:2f:96:d7:e0:33:28:fc:44:a4:d7:2d:96:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Mar 2 05:00:54 2026 GMT
Not After : Mar 3 05:00:54 2026 GMT
Subject: CN=91f97c5754e21227a44c2bbac34ec600d7db3b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:a6:44:a2:3c:97:ea:82:dc:8a:44:65:25:
30:9c:fd:9d:15:d8:99:5f:29:3a:7c:74:75:a0:d9:
d7:e3:90:17:37:bf:d3:19:bc:c7:ad:f0:54:48:55:
98:ea:5d:9f:55:b7:94:21:66:5a:c1:7f:c2:1f:7c:
43:c9:a6:b8:97:99:4c:8b:2a:e6:26:55:31:38:c5:
6a:44:3c:bc:74:fa:e3:ca:4c:57:29:bb:17:02:38:
74:d0:40:e9:1f:c0:44:a5:36:25:d6:48:c3:c0:07:
25:29:39:46:68:9c:8f:f9:ad:d8:e9:e2:17:d6:8a:
80:95:3c:ab:e6:38:14:90:bb:24:cd:ed:77:15:e0:
1d:1b:16:9d:a2:7f:47:78:b4:3c:33:ce:ea:0c:c0:
83:3b:10:c8:bb:fd:bc:c0:94:1d:c9:b3:f3:c0:01:
8f:ca:8a:c6:06:02:0b:76:02:a4:c1:19:5f:27:62:
5d:ae:9d:53:f6:f9:01:1c:34:b8:d4:62:1d:5d:bc:
72:e4:dd:0d:31:7e:1e:a5:04:35:39:8b:93:24:5f:
4d:5d:2f:e1:cc:a6:4a:f8:95:be:c1:9c:99:61:23:
a3:84:ad:11:11:f2:00:71:0b:2b:17:f0:c8:65:80:
3f:49:2a:83:6f:9e:e4:76:92:7f:76:ab:f4:fa:9e:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F9:7C:57:54:E2:12:27:A4:4C:2B:BA:C3:4E:C6:00:D7:DB:3B:7F
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:33:22:0e:05:45:fc:1a:48:17:bc:bd:92:f9:a3:54:ee:0a:
48:cf:34:4a:f0:e0:e0:e0:70:1e:84:7b:b5:ee:4d:aa:b9:0a:
c1:7f:aa:62:93:d5:c7:85:26:82:cb:a8:59:6c:9e:e2:52:c8:
54:65:a3:da:83:e8:d7:3d:cb:1c:21:42:9b:f6:05:32:72:42:
88:31:8e:7b:67:7d:ad:98:ef:5a:75:15:a9:0f:9c:e5:1e:d9:
1f:22:e7:6d:14:56:3a:64:91:3d:d5:d3:f7:05:f4:dd:fc:27:
e0:47:87:4f:7e:58:a0:8b:55:97:b5:f0:a8:9c:a8:5e:f2:35:
46:d0:1e:ac:b1:ae:ed:82:b3:c3:97:df:eb:ea:de:85:f2:e1:
39:88:fc:52:56:1e:c4:eb:41:52:68:49:f6:f3:17:0d:b3:67:
cc:be:fc:9c:01:a8:56:8b:36:c1:35:5e:8c:52:18:79:2c:4b:
37:9d:50:ab:08:18:46:1f:0c:02:e6:99:bd:5d:80:2b:4f:c1:
4a:69:74:2a:2e:2a:e8:1f:13:9e:38:d4:63:c7:b5:a3:cd:78:
be:c4:a7:cf:a5:6a:51:7c:33:12:e4:78:b0:c8:a5:ca:0c:f2:
18:dc:b8:a6:9e:92:38:90:05:81:3a:cc:c4:48:aa:09:7f:9d:
47:f3:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:11 2026 by rpki-client