Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: 94705O4jujex5qqytWVezN3+G71rgiz1ZjgpPgmmfjA=
Subject key identifier: 5F:6A:E1:48:19:B9:3A:63:96:94:A1:CA:9B:A8:6F:40:87:0C:CB:66
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019D9A753C19E77AA26B76FD89114EAA2C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 0318
Signing time: Fri 17 Apr 2026 08:01:07 +0000
Manifest this update: Fri 17 Apr 2026 08:01:07 +0000
Manifest next update: Sat 18 Apr 2026 08:01:07 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: P5ANfYV3eRgVxKw5S2TBb/p21BmLqIfLkn199IhGgGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:3c:19:e7:7a:a2:6b:76:fd:89:11:4e:aa:2c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Apr 17 08:01:07 2026 GMT
Not After : Apr 18 08:01:07 2026 GMT
Subject: CN=5f6ae14819b93a639694a1ca9ba86f40870ccb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:c1:cf:38:51:85:db:89:c3:6c:e2:db:98:
51:80:1f:67:e2:c6:2b:11:1a:37:4a:88:6b:87:ca:
a8:ac:50:8c:eb:e4:2b:a2:5b:7d:37:dc:b4:93:5a:
95:09:dd:cd:4b:cc:84:3d:a4:15:1f:20:34:87:25:
13:35:5d:f3:5e:f3:28:c7:a2:66:15:58:67:3f:56:
35:2e:78:cd:00:67:e1:92:02:4c:c2:8e:d7:bd:47:
27:53:29:36:49:3c:63:5e:78:07:61:0b:d6:61:3d:
62:5f:77:3f:36:ea:89:73:ad:1b:91:13:ad:96:24:
bd:9d:df:41:27:5c:a0:c3:19:07:1b:8c:c2:6a:f0:
80:91:4e:6f:47:f3:dc:52:81:18:8b:58:00:27:0c:
91:c1:4d:c5:a6:71:58:89:ce:84:e1:23:19:71:07:
17:8b:57:57:c0:26:87:a7:81:22:b6:2d:61:3a:7f:
fc:cd:65:6a:cd:cd:2e:ae:06:67:22:d4:d1:3a:e1:
7e:5c:93:30:c7:4a:01:ec:b2:ca:9d:42:d6:8b:59:
2a:0e:a0:5b:f1:dd:a1:a9:91:7d:e5:3d:7e:36:73:
d7:5d:c7:af:78:43:76:4a:b4:00:c7:80:60:08:39:
67:6e:7e:b6:f6:29:ca:ba:4a:d5:6d:48:0b:84:01:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6A:E1:48:19:B9:3A:63:96:94:A1:CA:9B:A8:6F:40:87:0C:CB:66
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7f:dd:8c:58:f6:7b:4b:dd:81:ae:1a:d3:55:c3:a4:81:58:
f4:89:ee:bb:43:fe:e0:bc:b8:e6:a7:4a:c9:3a:39:aa:d4:e3:
41:51:ad:7c:31:41:03:34:92:f1:d8:77:f6:05:ac:7b:f4:94:
f9:bf:7c:6f:47:fe:4e:7f:0b:a8:11:70:cc:b9:6e:9a:44:c2:
f3:7d:b2:4d:d4:26:5e:36:23:62:b2:b7:0c:19:5e:9d:3b:db:
fc:d5:0a:35:48:e7:ac:84:b7:4c:5e:a8:84:31:ca:b1:37:e2:
34:ef:68:44:c6:cb:70:67:52:c5:f9:e8:4a:75:25:51:46:31:
5b:d4:24:ff:4d:6d:95:37:ce:bf:f5:b9:5d:b3:46:db:a7:ab:
f1:ca:71:90:94:5e:6a:3b:bb:b0:d8:92:28:1b:ba:7a:29:ca:
38:ef:fb:66:86:12:95:7e:94:a2:ad:63:a7:d6:eb:a9:ed:11:
d8:a3:a7:03:6f:66:15:1e:65:c4:1c:b5:48:25:d4:d7:f5:fe:
70:95:b9:0c:6c:52:e6:0d:de:51:94:80:01:54:8c:a5:90:d8:
ef:21:6a:43:42:4c:1c:d9:5b:b2:eb:fd:13:e3:a3:bd:7f:79:
cd:09:b1:dd:3c:98:55:c3:b0:c4:ef:94:fd:62:7e:7b:d0:b9:
99:99:41:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:24 2026 by rpki-client