
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: fS4FcCGJadSoOL5+XuZvQt2aNAqxYFQhxdIr5oue1uM=
Subject key identifier: 1F:4A:CE:1F:98:9B:77:AC:7C:11:0C:02:16:BC:2C:04:12:E0:BF:0A
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 019D9A3E786FACC3D6A271987ABF3BB781C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 07:01:18 +0000
Manifest this update: Fri 17 Apr 2026 07:01:18 +0000
Manifest next update: Sat 18 Apr 2026 07:01:18 +0000
Files and hashes: 1: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (hash: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI=)
2: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: KBUq6mVQesSvdHMKBIA9lk+uud5z6hfXE/rIsDQkYFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:78:6f:ac:c3:d6:a2:71:98:7a:bf:3b:b7:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Apr 17 07:01:18 2026 GMT
Not After : Apr 18 07:01:18 2026 GMT
Subject: CN=1f4ace1f989b77ac7c110c0216bc2c0412e0bf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:44:6e:5c:4b:53:23:fb:85:7c:46:71:5f:
47:b7:1d:32:5f:96:bb:65:e2:51:ee:08:46:c1:07:
6d:d7:6b:38:38:aa:4b:f6:06:86:cf:2a:a3:8b:2a:
a3:6f:2c:a0:e2:fb:77:3a:dd:b1:81:33:6e:82:2e:
2a:5d:dd:3c:16:fa:1b:0f:7e:89:4a:0c:11:9a:04:
a4:6c:ae:82:e0:a0:6a:4e:d9:f9:73:df:12:17:0c:
84:e3:1f:4f:31:9c:df:24:eb:76:81:a1:5c:b8:71:
cb:07:c7:60:c1:3d:4f:df:cd:18:98:3e:7f:6e:2d:
7b:72:0f:5a:a2:ae:b0:bd:4e:51:be:71:39:cb:0c:
7e:14:26:7e:03:4d:b6:1f:61:43:98:65:ec:56:91:
f9:0f:d6:bc:d1:5f:88:88:89:fe:fa:c4:c2:d7:0c:
5f:89:14:73:41:0a:f0:30:5a:ea:43:90:24:95:a1:
e8:f8:94:93:16:b4:5c:5b:31:0d:47:af:e6:2b:2f:
fe:5d:a2:f9:9f:c2:0b:c3:16:30:a2:80:c6:aa:8a:
bf:68:f5:9d:79:23:7e:3a:0c:bb:9f:0d:27:dc:d2:
d0:a7:72:f9:90:83:ef:b4:fa:0e:cb:df:ad:4a:2a:
c1:41:97:08:c0:b6:8a:78:b6:b7:8b:f4:58:50:83:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:CE:1F:98:9B:77:AC:7C:11:0C:02:16:BC:2C:04:12:E0:BF:0A
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4f:7b:e5:36:df:dc:d6:9f:c6:f9:99:72:37:a9:47:91:82:
03:a2:85:c4:60:18:7b:ad:8d:d2:d4:0a:3b:ca:49:13:93:77:
dc:e4:f7:d9:5e:7a:63:58:b2:9c:d6:71:fa:60:b6:7e:82:3d:
03:97:e3:e2:30:22:8a:33:ca:9b:02:8b:3f:33:c6:0e:13:5b:
f0:ee:c5:f3:49:8f:b5:82:e5:f2:ea:38:e6:8a:f1:c7:f3:d1:
62:cd:e4:13:6b:b3:b3:57:46:c7:cc:6a:ca:a7:73:02:47:49:
48:d4:64:2c:ec:d8:a5:d6:a8:2c:80:6b:b3:5e:ef:cc:f1:07:
d0:d5:0e:84:69:2c:39:fc:8e:0d:f2:9c:02:a2:a7:db:42:53:
3a:0e:2d:e6:0b:77:8c:a1:28:00:1d:5d:0e:d0:71:fe:b5:00:
0d:1c:5d:32:a2:71:8d:40:91:2c:cc:4e:f3:b8:f9:1c:0b:96:
cd:cb:e1:35:e7:8a:fb:8f:05:36:fe:2c:0c:51:66:53:de:52:
59:79:13:54:70:f1:76:3a:86:e0:28:61:6a:37:e4:64:25:7d:
c7:3f:7d:26:28:9a:12:7f:06:0b:1e:8c:0b:7c:4d:6d:82:42:
a3:24:4d:5e:04:f4:8b:16:34:57:ec:98:87:cc:78:c6:73:b9:
88:ea:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:46 2026 by rpki-client