Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: 6Y2Jzk1BG3rC0Teln2WxSVgBeLQjytpm4SNrU2L3760=
Subject key identifier: B2:32:B9:C1:8E:29:50:9D:0D:FB:87:16:26:D2:05:AE:CE:4A:A1:BA
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 01A0D6B9C267DB9E6BC85F76E37838621CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 1A6D
Signing time: Fri 25 Sep 2026 04:01:33 +0000
Manifest this update: Fri 25 Sep 2026 04:01:33 +0000
Manifest next update: Sat 26 Sep 2026 04:01:33 +0000
Files and hashes: 1: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (hash: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI=)
2: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: MD1EDFb7hp/csiiQ762SAzwb3pt34vRTws0Ti1pUPNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:c2:67:db:9e:6b:c8:5f:76:e3:78:38:62:1c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Sep 25 04:01:33 2026 GMT
Not After : Sep 26 04:01:33 2026 GMT
Subject: CN=b232b9c18e29509d0dfb871626d205aece4aa1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:e3:41:aa:fe:2d:7e:d3:8e:83:89:dd:b1:
4b:f5:79:11:5a:4e:33:c9:e4:70:d0:78:bd:f5:2c:
e6:79:d6:15:4b:71:0f:1f:db:79:22:6e:e4:d4:93:
eb:14:87:6c:01:91:6d:dc:3f:72:9a:f6:6e:86:68:
4c:7b:ff:46:3e:d7:cf:9b:12:bb:f0:99:49:e4:d3:
fc:05:ba:a8:8a:f9:e9:c0:eb:60:e4:91:cf:64:9d:
b1:41:07:8f:a6:27:18:6e:ea:ea:96:33:8c:83:d3:
53:b3:d6:58:6f:2d:be:25:1c:03:b8:16:ac:d5:f1:
4b:00:13:78:3a:49:c8:43:e7:15:1e:b2:a1:9c:39:
b6:b1:fb:10:69:42:57:78:d0:ec:db:08:d7:55:b8:
36:5f:a7:b2:5c:c1:66:74:be:7c:77:e4:ad:d5:39:
10:b7:64:8b:37:e8:08:78:cb:78:6c:6e:5f:9c:10:
59:37:15:90:51:6d:a2:10:9e:60:19:0e:aa:54:9c:
24:06:72:c5:c6:f4:c5:a1:f5:49:e3:f5:e6:bb:53:
47:f2:b3:e7:16:78:7d:cc:a5:2d:7d:13:77:d1:bc:
02:a0:d8:33:7c:cd:ad:fc:a2:4d:06:48:bc:8c:5e:
05:74:b9:49:16:49:ea:95:c1:6e:db:0e:7e:bf:7b:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:32:B9:C1:8E:29:50:9D:0D:FB:87:16:26:D2:05:AE:CE:4A:A1:BA
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9b:38:85:51:99:e2:76:d6:6f:e5:34:dc:f1:09:05:d1:2a:
4e:d6:f7:4d:e1:38:ea:eb:84:6e:23:85:e3:37:86:09:1c:4c:
f1:a7:b2:87:2b:2f:35:a2:26:3e:61:72:69:f9:f6:d8:92:bc:
25:15:d7:5d:04:a8:e1:00:73:a7:56:4d:df:d1:98:d5:07:38:
52:d5:f2:c1:a7:63:46:d5:a8:b1:a0:10:61:ea:31:f2:90:07:
98:c4:ee:cb:d0:09:fc:70:7e:2a:1d:7f:1e:2e:dd:bf:a7:cd:
1d:ed:34:30:02:90:94:c2:f4:5e:2e:9e:31:fc:13:e3:45:97:
a7:6d:4e:14:cd:40:2f:e7:79:5c:b4:a8:e3:a6:f3:25:bf:09:
73:f1:c3:c2:33:4b:de:80:b3:7f:e0:68:5d:40:b0:79:f2:7e:
f3:75:43:a0:43:09:01:de:34:97:4b:c0:4b:7b:21:ad:35:70:
8d:c1:ad:ab:26:23:7a:40:1c:4e:22:4f:0c:c4:18:4b:f1:10:
8d:55:d3:a9:52:3b:d0:3b:fd:49:1c:f1:7f:7a:11:ed:4e:24:
af:91:5b:77:64:9e:81:5a:e6:ca:6a:34:48:82:3e:89:2c:6e:
40:f0:45:1b:6b:89:88:2b:86:b1:4a:34:f6:b4:51:b7:a3:92:
13:54:fa:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWucJn255ryF9243g4Yhy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzVkYWE4Y2ZlMjVkZDEyYTJjMjZlMGZmY2NlOTc2MzY3
NDhlYmQwHhcNMjYwOTI1MDQwMTMzWhcNMjYwOTI2MDQwMTMzWjAzMTEwLwYDVQQD
EyhiMjMyYjljMThlMjk1MDlkMGRmYjg3MTYyNmQyMDVhZWNlNGFhMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLvjQar+LX7TjoOJ3bFL9XkRWk4z
yeRw0Hi99SzmedYVS3EPH9t5Im7k1JPrFIdsAZFt3D9ymvZuhmhMe/9GPtfPmxK7
8JlJ5NP8BbqoivnpwOtg5JHPZJ2xQQePpicYburqljOMg9NTs9ZYby2+JRwDuBas
1fFLABN4OknIQ+cVHrKhnDm2sfsQaUJXeNDs2wjXVbg2X6eyXMFmdL58d+St1TkQ
t2SLN+gIeMt4bG5fnBBZNxWQUW2iEJ5gGQ6qVJwkBnLFxvTFofVJ4/Xmu1NH8rPn
Fnh9zKUtfRN30bwCoNgzfM2t/KJNBki8jF4FdLlJFknqlcFu2w5+v3snpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIyucGOKVCdDfuHFibSBa7OSqG6MB8GA1UdIwQY
MBaAFAc12qjP4l3RKiwm4P/M6XY2dI69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAt
Njc5Y2YwMjEwZDQ5LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAtNjc5Y2YwMjEwZDQ5
LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATps4hVGZ
4nbWb+U03PEJBdEqTtb3TeE46uuEbiOF4zeGCRxM8aeyhysvNaImPmFyafn22JK8
JRXXXQSo4QBzp1ZN39GY1Qc4UtXywadjRtWosaAQYeox8pAHmMTuy9AJ/HB+Kh1/
Hi7dv6fNHe00MAKQlML0Xi6eMfwT40WXp21OFM1AL+d5XLSo46bzJb8Jc/HDwjNL
3oCzf+BoXUCwefJ+83VDoEMJAd40l0vAS3shrTVwjcGtqyYjekAcTiJPDMQYS/EQ
jVXTqVI70Dv9SRzxf3oR7U4kr5Fbd2SegVrmymo0SII+iSxuQPBFG2uJiCuGsUo0
9rRRt6OSE1T6CQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:42:13 2026 by rpki-client