Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
File: bZxGACHwaOou2-X_UPueDJrrvXE.mft (raw, json)
Hash identifier: /R4Ebf6vrvssLYkZL9mjonauGUHNlkIEvg5g/D4oUUo=
Subject key identifier: C0:3E:C6:CE:19:0F:2C:35:94:09:04:BE:66:8F:4D:8B:9D:D4:E0:BD
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 01A11B634CE69DB86851B7748DFBD5F68558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
Manifest number: 010C
Signing time: Thu 08 Oct 2026 12:00:54 +0000
Manifest this update: Thu 08 Oct 2026 12:00:54 +0000
Manifest next update: Fri 09 Oct 2026 12:00:54 +0000
Files and hashes: 1: 2mcmBph44T6F-kS8XWJD7lOyKpw.roa (hash: YgZT5uRBbUSFNWW/4uRQ1rHtYNnG1WTldBKIGXD9WOM=)
2: 8tLBF654pSFrtTZo6a2qR1LWWMM.roa (hash: Enj8RsjeWdg6DNXeEBjEHOQvivlKq9SbhBZo4JjBnWI=)
3: 9Wp0yEODLyFtAabFmIGNXyJJH0M.roa (hash: MDU9oyYCQf0/qP8XxFFcq2DKmq9IodMcE6wWVXgzdfk=)
4: HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa (hash: ifhkkPhpziHsauqMvFaIRDB08xUa/qaHainhKiKTunA=)
5: bZxGACHwaOou2-X_UPueDJrrvXE.crl (hash: UTybpvjr8DI1dsyOgdjbv4lJhTk5kOC6k0XqWEbH8LA=)
6: kE-FnO_bKPVoHR9SA72KKPHWwKY.roa (hash: fR8CHLRHdM3OeZe9BDHG8eQXSpySKgVTJeF/UqX5ya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:4c:e6:9d:b8:68:51:b7:74:8d:fb:d5:f6:85:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Oct 8 12:00:54 2026 GMT
Not After : Oct 9 12:00:54 2026 GMT
Subject: CN=c03ec6ce190f2c35940904be668f4d8b9dd4e0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:e5:79:5b:5a:e7:c4:05:19:b4:a0:c0:65:
f6:ad:b9:aa:cf:db:84:00:4b:9d:9c:3d:31:ea:14:
c8:0f:6c:9b:71:55:2a:60:61:3d:08:71:8d:26:1c:
a0:cc:07:55:15:5c:5d:5f:a9:43:b8:7c:df:fa:20:
3b:7b:a4:d8:fc:35:b7:a8:96:3e:fb:92:6f:c3:87:
dc:d5:6b:74:27:eb:27:77:ba:22:a4:7d:23:31:67:
f2:a2:6c:cc:a4:3f:f6:40:f9:c7:ab:80:6a:b6:4b:
29:db:ea:39:12:b1:38:5e:46:b9:d6:e8:bb:7c:e1:
7a:9c:79:73:89:aa:1b:24:1e:63:71:bd:48:6a:85:
5a:7c:ea:d1:ad:b2:c4:76:ab:89:c1:80:4b:fa:dc:
9e:dd:05:2e:8c:c7:04:eb:fb:40:93:0a:c1:92:89:
94:d7:88:a9:ec:e2:e3:17:13:ca:ff:1f:3e:51:ba:
60:00:79:80:3a:58:36:a4:41:8c:3d:22:ab:f4:dc:
c2:88:48:d6:2a:3f:a1:a4:23:c1:9d:b2:7a:80:d4:
81:78:dc:55:aa:db:a3:91:ad:93:a1:ca:48:14:64:
05:e8:0d:2c:4e:c2:af:4e:c4:f3:db:37:3f:0a:a8:
16:0e:c1:86:72:f4:8a:d3:66:bc:f2:52:e7:9f:28:
bb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3E:C6:CE:19:0F:2C:35:94:09:04:BE:66:8F:4D:8B:9D:D4:E0:BD
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:33:99:db:83:3f:f0:b3:6d:c2:79:f7:d7:64:35:7b:78:ad:
d5:d6:f4:d9:89:f3:5e:1a:2c:79:e2:74:01:e7:9c:e5:c2:5e:
e2:20:14:76:bb:1b:af:54:55:c2:8f:2f:09:fb:9e:5f:e2:1e:
78:f5:9a:1f:b1:68:d5:f8:ea:ab:44:f8:7f:ca:78:49:34:63:
7b:51:d0:99:e1:e4:54:3b:c7:13:25:a1:19:b5:80:79:74:46:
01:84:ce:5a:f2:80:3a:55:d5:5b:13:83:c1:ab:cc:0d:cc:e7:
42:53:ea:18:97:7e:ac:2a:a2:da:25:d7:b6:2b:13:60:24:d0:
2c:6f:60:62:6f:13:9e:9f:03:5c:a2:28:6c:04:dc:af:b8:29:
a3:38:57:10:17:2c:04:ca:8c:12:e9:5d:d4:3e:73:da:e3:b5:
e6:00:5e:e9:94:42:e1:e7:f0:06:24:e3:0a:c0:4d:03:eb:80:
67:3e:c9:8f:f1:80:f0:3b:c4:fd:c0:b4:b9:6b:25:a9:8d:dd:
6d:d4:06:4b:86:52:b0:58:44:f3:93:ea:4d:55:25:7b:15:71:
2a:d5:6f:9b:37:90:98:fa:4d:33:67:54:40:46:76:39:19:4c:
a4:af:a9:cf:74:cd:8e:59:07:0c:57:72:c4:d9:76:f5:f8:ba:
8d:cd:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:06:52 2026 by rpki-client