Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
File: BZqsWXzkoNE7edIrO_GKSJnddk8.mft (raw, json)
Hash identifier: tRrsI8K2UmUd8DfN653OSXNApNZktC4nVuqAQylTEfI=
Subject key identifier: ED:18:EA:A4:BD:A8:65:9F:37:EF:01:E7:0A:FE:2B:74:50:1A:48:76
Authority key identifier: 05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
Certificate issuer: /CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Certificate serial: 019FAA87CD04C28BA1954B600453BD35F2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
Manifest number: 0E61
Signing time: Tue 28 Jul 2026 21:00:54 +0000
Manifest this update: Tue 28 Jul 2026 21:00:54 +0000
Manifest next update: Wed 29 Jul 2026 21:00:54 +0000
Files and hashes: 1: BZqsWXzkoNE7edIrO_GKSJnddk8.crl (hash: qopF2/ygAaIqL903EbcmXwxZhTYErH4nshDHWaXGwIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:cd:04:c2:8b:a1:95:4b:60:04:53:bd:35:f2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Validity
Not Before: Jul 28 21:00:54 2026 GMT
Not After : Jul 29 21:00:54 2026 GMT
Subject: CN=ed18eaa4bda8659f37ef01e70afe2b74501a4876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5b:3f:01:42:81:5d:41:00:f2:bf:65:65:a8:
2c:86:62:98:7f:f0:88:06:9c:d1:7f:60:9e:04:30:
9d:71:f1:73:58:16:79:46:6c:ea:67:e3:6b:21:03:
d4:74:f0:02:cf:87:a9:37:7f:b9:32:df:3c:09:7b:
bb:a7:ad:96:e7:d3:bd:ea:60:42:b0:e5:9c:11:c2:
5e:d2:58:1c:4e:95:01:70:67:c2:54:05:50:02:ee:
85:80:15:cd:8b:d4:91:5f:1f:3a:c9:6b:0b:5a:71:
1c:31:60:19:0f:a0:a6:ac:63:9b:60:5d:d3:95:01:
40:d5:78:b3:77:48:a0:b1:36:35:f5:7f:2b:e7:24:
c0:9a:02:6d:be:b9:6c:aa:11:8b:e9:48:0a:46:33:
c5:f0:3b:13:91:6a:cb:83:b7:7e:a6:5d:a0:7b:c1:
e4:92:45:cc:42:6f:ad:3e:43:0e:d9:c7:1c:62:3f:
15:e6:7c:68:e7:d6:57:b7:44:e5:cf:d2:03:c9:17:
bb:64:12:fe:df:7c:14:37:0a:8d:88:37:1f:f2:29:
b4:49:fe:fc:03:21:25:5e:df:9d:e5:e5:d5:10:58:
d0:72:dc:eb:9a:e5:be:44:e5:ff:f1:ff:f6:e6:5e:
25:38:00:6e:98:52:c7:c9:ef:d6:50:2c:d6:2a:c7:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:18:EA:A4:BD:A8:65:9F:37:EF:01:E7:0A:FE:2B:74:50:1A:48:76
X509v3 Authority Key Identifier:
keyid:05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:17:0a:51:b8:35:26:e7:20:1e:ba:a3:bc:5a:b4:05:9a:07:
91:4e:bf:3d:d3:65:77:fb:db:34:3c:2d:69:64:ce:5f:13:4f:
36:8e:43:a2:5b:dc:fc:9a:1b:57:9d:ef:bd:35:19:1f:30:ec:
82:14:98:58:2c:f9:e0:93:e7:f5:69:95:41:0f:98:a9:23:32:
df:8b:5e:6e:a6:cd:fb:25:7a:58:df:3a:24:4b:37:17:5b:8b:
d4:5c:4d:d2:a6:41:a1:31:9b:8f:3b:a6:1d:43:60:0c:4c:0e:
74:95:51:69:96:f3:0e:73:6f:ef:e9:f6:c1:d9:a3:99:86:13:
1e:10:08:e3:aa:4b:51:b3:e4:c3:b6:c8:4a:d7:e1:ed:5c:9a:
75:0b:07:f3:70:ef:70:ed:03:a7:92:d4:7a:3b:75:db:a3:4b:
e0:dc:3b:c7:ec:53:cb:c6:87:e0:12:cb:ca:49:34:da:19:a2:
22:b2:60:35:87:3f:88:64:10:d5:84:20:0f:aa:75:cb:fd:bf:
53:de:98:d4:1e:2f:30:7d:a1:ec:22:bd:c2:3b:88:64:89:c5:
31:dc:d0:d7:86:04:b5:cb:61:c6:e0:eb:6d:c4:03:dc:b7:19:
0a:4e:c9:03:eb:fc:81:0b:1e:ec:3b:b8:76:ea:05:02:e0:35:
80:d6:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:42 2026 by rpki-client