Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json)
Hash identifier: rZ9Yh5Lg8QKZ56wxQChB+MaSc4Gt4xu+c52nuOVsays=
Subject key identifier: 72:C4:8E:1B:CD:B5:F2:3F:53:34:C3:16:B2:53:12:90:B1:54:9B:1A
Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Certificate serial: 019FA9AC2624DC089D3A270CE1C310CBB064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
Manifest number: 0429
Signing time: Tue 28 Jul 2026 17:00:59 +0000
Manifest this update: Tue 28 Jul 2026 17:00:59 +0000
Manifest next update: Wed 29 Jul 2026 17:00:59 +0000
Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=)
2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: AnDEZl3lYacwg7DwwJX1LUne1NyepZansfwQGUpapco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:26:24:dc:08:9d:3a:27:0c:e1:c3:10:cb:b0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb
Validity
Not Before: Jul 28 17:00:59 2026 GMT
Not After : Jul 29 17:00:59 2026 GMT
Subject: CN=72c48e1bcdb5f23f5334c316b2531290b1549b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:5e:09:44:22:1a:e6:49:21:dd:23:24:e6:
ad:1b:e5:91:5e:ff:a3:b8:35:fb:0a:1a:2d:3b:2c:
01:ee:d3:bb:90:da:57:30:38:b8:f9:a6:20:f5:c5:
33:3a:6d:82:56:1b:58:32:a3:8b:e9:93:b6:d2:2a:
e4:63:7d:0c:ff:ae:b9:f2:4f:36:59:fb:07:56:5a:
10:d8:43:3c:c2:42:a1:96:60:2f:13:a8:2e:c2:23:
a7:0f:27:4c:be:f6:6d:34:2e:eb:79:82:a8:ee:a1:
4d:0e:98:77:56:dd:b3:19:18:03:d8:72:e8:b2:d7:
7f:38:5e:bb:bb:3e:2c:23:54:03:af:98:8b:d4:56:
20:4a:11:1f:90:b0:32:ff:40:63:f3:f7:fe:4b:d0:
ab:75:e8:ce:05:4c:45:0e:ba:d0:d3:93:cd:7a:32:
5d:fb:7d:bf:2c:b1:16:9f:11:3c:46:5a:1d:51:f9:
7d:52:73:b6:bd:6c:cf:d5:7f:06:66:aa:5c:a8:32:
de:0f:ed:d2:4f:6f:d0:a3:cc:6b:47:39:bc:2c:31:
9e:f8:d5:e6:02:af:f5:14:14:9f:43:ec:51:e3:e7:
1d:82:d6:3e:8d:ec:cf:dc:66:c5:a6:b0:fb:8f:95:
d8:53:89:bf:54:ed:28:25:ed:5d:13:73:73:61:9c:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C4:8E:1B:CD:B5:F2:3F:53:34:C3:16:B2:53:12:90:B1:54:9B:1A
X509v3 Authority Key Identifier:
keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fa:89:7f:89:b2:61:17:5d:ed:8d:cd:4d:1c:85:26:1c:61:
bc:0c:d9:a7:e4:6c:8a:54:9a:eb:ae:f4:32:0f:5c:df:a8:c5:
81:c1:69:d3:32:e6:64:48:1c:6b:e6:6d:7d:cc:e3:b5:9a:98:
da:ec:44:03:27:b3:a0:56:ee:fa:0f:9b:b0:d3:08:87:51:77:
c6:ed:92:76:97:a9:2e:e4:90:12:2b:07:7a:2b:7e:ac:f2:a8:
85:82:2f:73:eb:0e:60:15:e1:3d:4e:c4:bf:d0:be:2a:fa:b6:
e8:93:ea:7e:d9:e3:80:6e:11:a2:9c:b1:fb:b8:4f:55:e5:73:
3f:a6:cc:7d:9c:e9:66:dd:53:35:d4:b1:90:25:f3:e6:f9:17:
d9:1e:01:0f:1f:0b:94:8b:bf:36:7d:34:00:fd:c5:ba:84:55:
68:4c:6c:96:3d:04:05:76:a6:42:47:e5:07:d5:57:e1:43:ca:
bf:ce:d7:1e:40:eb:a3:03:ab:7c:50:25:ba:47:1b:40:89:b3:
15:b1:e0:17:7c:63:c7:f5:d6:31:2c:f3:29:78:91:5d:d8:9c:
9b:34:07:98:9f:9a:c7:9d:ee:5e:41:85:76:61:92:41:2c:31:
e3:ed:bc:30:e6:76:53:6d:8a:97:30:0f:ec:b4:25:f7:64:0d:
2b:b4:49:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prCYk3AidOicM4cMQy7BkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTlmYTg0ODVmZjBmNGI4NWM3ZDRlZjQ3OGY5ODYwOTNk
OWVjY2IwHhcNMjYwNzI4MTcwMDU5WhcNMjYwNzI5MTcwMDU5WjAzMTEwLwYDVQQD
Eyg3MmM0OGUxYmNkYjVmMjNmNTMzNGMzMTZiMjUzMTI5MGIxNTQ5YjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EdeCUQiGuZJId0jJOatG+WRXv+j
uDX7ChotOywB7tO7kNpXMDi4+aYg9cUzOm2CVhtYMqOL6ZO20irkY30M/6658k82
WfsHVloQ2EM8wkKhlmAvE6guwiOnDydMvvZtNC7reYKo7qFNDph3Vt2zGRgD2HLo
std/OF67uz4sI1QDr5iL1FYgShEfkLAy/0Bj8/f+S9CrdejOBUxFDrrQ05PNejJd
+32/LLEWnxE8RlodUfl9UnO2vWzP1X8GZqpcqDLeD+3ST2/Qo8xrRzm8LDGe+NXm
Aq/1FBSfQ+xR4+cdgtY+jezP3GbFprD7j5XYU4m/VO0oJe1dE3NzYZxfRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLEjhvNtfI/UzTDFrJTEpCxVJsaMB8GA1UdIwQY
MBaAFAap+oSF/w9LhcfU70ePmGCT2ezLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQt
MmE0NjQwOTEzNTZiLzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQtMmE0NjQwOTEzNTZi
LzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/qJf4my
YRdd7Y3NTRyFJhxhvAzZp+RsilSa6670Mg9c36jFgcFp0zLmZEgca+ZtfczjtZqY
2uxEAyezoFbu+g+bsNMIh1F3xu2SdpepLuSQEisHeit+rPKohYIvc+sOYBXhPU7E
v9C+Kvq26JPqftnjgG4Ropyx+7hPVeVzP6bMfZzpZt1TNdSxkCXz5vkX2R4BDx8L
lIu/Nn00AP3FuoRVaExslj0EBXamQkflB9VX4UPKv87XHkDrowOrfFAlukcbQImz
FbHgF3xjx/XWMSzzKXiRXdicmzQHmJ+ax53uXkGFdmGSQSwx4+28MOZ2U22KlzAP
7LQl92QNK7RJtA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:39 2026 by rpki-client