Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
File: BQ867ltqqRtsCUJRHgGsuhnnijk.mft (raw, json)
Hash identifier: gOXRD5YgUGT+5l6LVqFRQuAUyRaevv+1z1kjeFvBOK8=
Subject key identifier: E9:EF:A2:DD:E6:0A:F5:3A:06:2D:3E:46:C3:7C:09:2F:1C:EA:B8:6E
Authority key identifier: 05:0F:3A:EE:5B:6A:A9:1B:6C:09:42:51:1E:01:AC:BA:19:E7:8A:39
Certificate issuer: /CN=050f3aee5b6aa91b6c0942511e01acba19e78a39
Certificate serial: 01A0CA7D67B0789F6914564215FB372FE968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ867ltqqRtsCUJRHgGsuhnnijk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
Manifest number: 23
Signing time: Tue 22 Sep 2026 19:00:10 +0000
Manifest this update: Tue 22 Sep 2026 19:00:10 +0000
Manifest next update: Wed 23 Sep 2026 19:00:10 +0000
Files and hashes: 1: BQ867ltqqRtsCUJRHgGsuhnnijk.crl (hash: 0sXKPKRSC1icFJK9Tpaz8PEkCrGQMFyJMGzRU3fHbzU=)
2: ChG4Yj-7xo0fiewB8yaAUWU01Ms.asa (hash: fXWaCSxM8wHBYkUaaTNdf6219McvjQ8qX1GvLGW14vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ867ltqqRtsCUJRHgGsuhnnijk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:67:b0:78:9f:69:14:56:42:15:fb:37:2f:e9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050f3aee5b6aa91b6c0942511e01acba19e78a39
Validity
Not Before: Sep 22 19:00:10 2026 GMT
Not After : Sep 23 19:00:10 2026 GMT
Subject: CN=e9efa2dde60af53a062d3e46c37c092f1ceab86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:65:cb:f6:81:e5:11:23:6d:c0:c9:cf:8e:
9b:89:0d:46:a5:19:5a:a1:0e:63:28:4f:e5:b4:12:
e6:73:53:51:e1:4b:f5:60:dc:91:7d:03:fc:e5:0d:
1c:d0:91:fa:d7:21:f1:9c:32:d0:6a:b0:86:7a:a3:
47:1b:ea:79:73:31:f3:4d:fc:c1:59:fe:e6:d2:e1:
ce:59:c0:02:e7:78:cd:53:3f:98:2c:19:e4:aa:0d:
b1:58:0f:66:fb:7c:71:df:eb:f0:b1:8a:57:82:c7:
9d:dd:fe:9e:b8:f3:f6:34:cf:4b:f5:0e:56:a5:f6:
3a:dc:56:b7:c2:b7:33:49:bd:e7:c8:bb:b4:6b:27:
1b:72:34:20:71:ad:5f:53:59:3f:4b:62:68:2a:a0:
1c:9f:c4:68:ae:fb:87:2c:2d:a3:d4:1c:0f:ef:0b:
54:0d:1a:33:47:4d:f3:32:51:02:05:4b:d8:07:bc:
cf:ec:6d:ac:08:94:90:4d:8d:ac:7c:e0:e7:04:4b:
9e:86:3b:b0:cc:a9:1b:eb:f2:ff:30:37:31:d9:fe:
79:54:e0:5a:c6:20:ce:a5:09:ef:61:84:69:59:8a:
9e:82:fa:19:48:13:f9:2e:a5:78:06:35:41:00:82:
c0:5f:f5:2e:8a:2f:28:f7:59:34:3c:19:40:a4:c2:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EF:A2:DD:E6:0A:F5:3A:06:2D:3E:46:C3:7C:09:2F:1C:EA:B8:6E
X509v3 Authority Key Identifier:
keyid:05:0F:3A:EE:5B:6A:A9:1B:6C:09:42:51:1E:01:AC:BA:19:E7:8A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ867ltqqRtsCUJRHgGsuhnnijk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/08727a-7183-4f13-96c6-65c2e968bae3/1/BQ867ltqqRtsCUJRHgGsuhnnijk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:36:d0:ca:35:6d:55:bf:90:8d:a2:10:bf:20:20:68:6c:41:
bd:0e:2f:72:cc:b4:86:cb:d9:4e:c4:75:35:49:d9:a8:04:6b:
13:8b:00:bc:72:2f:23:c0:7a:68:e7:e2:d2:34:57:79:0e:0d:
e5:82:e0:45:f4:bf:49:11:65:8e:d0:08:ea:c0:de:f8:97:a5:
81:d0:1f:0a:16:81:8a:48:92:11:f0:72:8d:6b:b6:40:38:65:
40:64:84:0d:55:3c:78:0c:b0:4c:88:c7:a2:78:43:79:2c:18:
33:51:c8:59:f2:d0:4c:e7:69:92:c8:ae:dd:39:1a:4d:3b:3d:
03:0e:68:94:f9:1e:39:c8:f4:14:44:85:84:6d:3d:b7:29:50:
bb:8f:2d:52:fb:31:6b:4f:70:a3:dd:bf:dc:3c:98:43:d5:e3:
cd:39:2a:c6:8d:96:f5:cb:be:77:ab:47:b8:a5:4b:c2:fb:da:
2c:e8:6f:73:8b:67:e3:7c:3a:ad:cf:91:15:b8:24:fc:d1:04:
6e:1e:9b:e9:2e:51:9c:31:b6:81:aa:cf:06:c4:21:2f:fe:16:
fd:2e:83:a9:92:c1:d5:60:bc:57:9d:34:61:9f:63:6f:41:d5:
e7:44:e1:3c:ab:4a:d6:49:fd:2f:55:7a:ad:05:1c:8f:4d:7a:
0d:6e:d8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:13 2026 by rpki-client