Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
File: BZqsWXzkoNE7edIrO_GKSJnddk8.mft (raw, json)
Hash identifier: aCXaDMpmPlxcBAXKgvX+tNyrHsh/AUsfnSZmB9G2UT0=
Subject key identifier: 34:39:EA:66:38:D9:CA:DE:70:5D:B4:16:6C:94:F2:FD:E8:C8:26:31
Authority key identifier: 05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
Certificate issuer: /CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Certificate serial: 01A0C47C26070DCAE8641FC548E52DD72269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
Manifest number: 0EF3
Signing time: Mon 21 Sep 2026 15:01:05 +0000
Manifest this update: Mon 21 Sep 2026 15:01:05 +0000
Manifest next update: Tue 22 Sep 2026 15:01:05 +0000
Files and hashes: 1: BZqsWXzkoNE7edIrO_GKSJnddk8.crl (hash: beOKxH110MUSHRz70qmXgRMcbZ5i9IMgmHm3RzA8o7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:26:07:0d:ca:e8:64:1f:c5:48:e5:2d:d7:22:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Validity
Not Before: Sep 21 15:01:05 2026 GMT
Not After : Sep 22 15:01:05 2026 GMT
Subject: CN=3439ea6638d9cade705db4166c94f2fde8c82631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:c5:6b:3f:e7:d9:52:95:a3:e2:3d:16:64:
38:ff:4f:2f:c2:f8:49:d4:ce:22:4a:c6:b8:44:77:
43:74:3f:63:f9:b3:13:1e:72:dd:ad:47:90:46:8d:
11:e4:05:2c:19:e4:e4:e8:42:4e:06:48:20:77:28:
6e:11:0f:3a:db:c3:58:7b:ef:da:5c:a9:fc:2c:72:
02:a0:f0:91:73:87:04:bf:7a:46:dc:ea:90:c1:c8:
c9:8e:a7:44:1a:c2:d5:33:0c:e3:2c:a8:88:8c:25:
04:b3:0c:26:22:8c:bb:4c:ea:4f:f9:ae:ea:37:fe:
0f:c8:f8:4e:4c:be:25:c6:8a:86:61:f7:0e:e5:f5:
d8:f8:5f:cc:bb:4a:61:eb:18:c1:a7:98:37:09:55:
56:e6:5f:56:1a:61:8a:37:3c:bf:02:74:b9:2d:e3:
40:c0:b1:5a:1f:3c:56:0e:21:6c:13:a0:77:2b:54:
95:d7:75:28:c6:f1:6d:7f:c4:c6:c6:08:8c:21:51:
19:7c:8e:00:3b:ab:5b:e8:e9:1d:ff:d0:bd:5b:f5:
38:ee:96:81:fd:2a:bf:f5:c9:a0:5b:ef:00:0d:d9:
43:f7:04:b8:fb:8d:3c:a3:14:a4:86:ba:93:96:78:
88:8f:94:23:81:91:9c:40:78:c4:52:f0:99:4d:68:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:39:EA:66:38:D9:CA:DE:70:5D:B4:16:6C:94:F2:FD:E8:C8:26:31
X509v3 Authority Key Identifier:
keyid:05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:17:ba:e1:a4:0a:3f:a3:46:1d:af:8f:6a:73:67:88:7a:2a:
43:c2:cc:25:79:9b:5b:6b:ac:c5:55:72:fb:8b:61:b6:b7:a3:
a7:a0:74:89:88:86:96:09:1b:2c:fc:12:6e:bf:33:11:69:0b:
bd:72:a8:3f:8c:16:ae:10:3a:b8:92:9d:a1:2f:33:b6:c1:f3:
ea:b7:0f:be:c6:3b:a8:f6:db:7f:63:da:df:1b:01:b2:95:28:
38:6e:5f:ba:cb:20:0a:e5:83:64:78:ac:29:60:6c:f3:ed:cd:
3d:5d:ce:a7:db:ec:7a:48:31:fb:ce:cb:9d:c2:e2:4b:03:01:
69:08:8c:9f:39:67:c5:7c:fe:e4:4b:8d:b6:aa:72:7a:c7:87:
c2:20:73:3e:88:e7:e4:7f:fa:f9:e1:55:ce:97:05:44:19:a2:
5e:40:62:e5:67:1e:2c:e0:3f:c6:e3:60:b7:ba:f5:ff:61:2a:
89:18:c3:bb:08:2a:94:85:d5:99:4c:0b:69:81:79:cb:ac:7f:
a0:0f:85:d2:ad:a9:a0:8e:b6:70:9a:45:ad:2c:30:6e:c9:6a:
ad:b6:75:f9:81:4c:23:05:8f:dd:13:18:23:ea:5b:33:9e:12:
f1:99:d1:15:ec:c7:d1:e3:d2:f8:0f:5d:69:fa:b9:67:4d:12:
60:47:fb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:30:11 2026 by rpki-client