Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: EbSJ1SYcAYnz4Zxo0z2uvijTMt3w4kf93UjBJCerM90=
Subject key identifier: CA:D6:8A:E3:00:CC:87:F7:1F:69:0F:BA:81:A7:AF:CE:11:1E:55:B4
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 019CAD2304813E14555738B6B85D3F7AF7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:01:19 +0000
Manifest this update: Mon 02 Mar 2026 06:01:19 +0000
Manifest next update: Tue 03 Mar 2026 06:01:19 +0000
Files and hashes: 1: 2owrDtSSdVfxvYXAxMiLovDSXEU.roa (hash: 9L5ssgJ0+ShYxgpGMGCzPMDxEovXXE+mzE0m/NaKh/k=)
2: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: i67yIByU2hclGPUFPeQHvZ5Xk7YPIuTBFixuCKC4xl8=)
3: W2dqeQoexNzO-eZu-b3E0MsHT4I.roa (hash: xbkqBY08vRM/01LJVRXUSH6oRqaCojszvq1SR3phsH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:04:81:3e:14:55:57:38:b6:b8:5d:3f:7a:f7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Mar 2 06:01:19 2026 GMT
Not After : Mar 3 06:01:19 2026 GMT
Subject: CN=cad68ae300cc87f71f690fba81a7afce111e55b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:80:e9:80:c0:3f:cb:59:63:13:a9:d9:86:
b4:96:f4:3b:12:29:b6:69:f3:09:10:ca:4c:5c:f9:
3d:ee:4a:cf:44:c4:c1:b6:b0:f8:9f:87:19:78:a2:
34:15:94:41:d8:24:aa:4e:40:03:c2:ac:b2:ae:69:
4f:fb:6a:a1:73:38:2e:ad:f2:12:8c:cc:a7:68:1a:
3a:1b:03:50:32:25:cd:3b:be:a1:cd:3c:5d:cd:af:
bd:18:11:7c:d6:b2:7c:9c:8a:c7:90:53:08:0b:9e:
82:a9:b4:93:e7:f0:a0:aa:ef:5d:2f:dd:1e:bf:b7:
94:0a:a8:e8:49:b1:78:8f:b8:ce:a5:96:fc:f2:93:
5a:d4:d8:c2:d1:5e:e7:ba:1e:43:af:51:87:96:e6:
ee:ef:a5:de:ae:dd:d9:1c:a8:1c:43:27:4f:b0:95:
82:12:83:df:ac:28:46:bd:b1:6a:50:88:3a:e5:f8:
71:20:0f:c0:52:d8:df:dd:4d:23:80:c2:fc:63:3e:
55:08:14:31:d9:da:35:6d:2a:e4:0c:92:a4:d0:8b:
d3:50:3c:82:88:47:11:23:2b:bf:01:c0:6c:c6:c4:
b9:d0:f8:a7:34:c5:ad:67:b7:1e:0c:62:89:89:a5:
a9:5e:54:f9:e9:57:59:0e:a2:00:53:1d:bb:3d:2e:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D6:8A:E3:00:CC:87:F7:1F:69:0F:BA:81:A7:AF:CE:11:1E:55:B4
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:92:c6:e3:bc:9e:2b:08:05:1d:76:e2:4a:45:ec:53:d3:93:
5f:5c:b2:1f:e6:73:b7:58:b2:c7:34:84:9f:ee:80:a6:18:8b:
70:3e:14:df:78:fb:2f:2e:c5:f4:4d:da:df:e4:1e:36:5b:48:
b0:02:d6:d0:b5:d1:dc:af:b6:df:a2:f7:8a:06:4e:b6:1d:b1:
7f:26:a4:42:ee:ba:cc:e8:32:ac:01:30:8b:3b:e8:7f:db:39:
7c:17:a1:37:d2:e7:8d:d9:cc:a5:b5:c8:22:c4:c3:81:55:d0:
50:13:0e:5c:dd:9a:fc:d3:8c:cf:84:7f:8a:6c:03:8b:64:2d:
4a:1e:22:97:22:42:bb:87:5b:92:8a:5d:c0:89:57:7a:b6:49:
19:de:70:5a:a2:b6:a8:51:e4:95:f9:7d:b5:a2:fa:b5:c5:87:
89:76:15:12:30:d4:c5:0c:d4:d3:55:05:d6:5f:aa:77:65:1a:
e7:b3:5d:b9:de:38:90:f8:cc:c4:79:e7:cf:3f:be:14:f5:46:
5b:61:01:0d:bf:20:31:4c:a2:94:75:16:ec:6d:65:2e:f3:70:
2b:99:dc:0d:20:73:b8:a4:48:c5:93:40:4c:28:39:71:06:68:
7d:30:81:71:af:08:50:ab:5d:1b:ed:16:8b:ee:6c:ec:fd:6e:
2f:25:4b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:49 2026 by rpki-client