Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
File: bZxGACHwaOou2-X_UPueDJrrvXE.mft (raw, json)
Hash identifier: TRmY+LCu0Hiwpgu5WXOBCPs122shL+W1sQnYTDKIlfw=
Subject key identifier: 89:6B:6C:D6:0B:85:BC:7D:E6:B8:A4:AB:4F:D0:02:1E:13:AD:85:53
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 019FAA880A86B6856FCD08D1F4762FFC515C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:09 +0000
Manifest this update: Tue 28 Jul 2026 21:01:09 +0000
Manifest next update: Wed 29 Jul 2026 21:01:09 +0000
Files and hashes: 1: 2mcmBph44T6F-kS8XWJD7lOyKpw.roa (hash: YgZT5uRBbUSFNWW/4uRQ1rHtYNnG1WTldBKIGXD9WOM=)
2: 8tLBF654pSFrtTZo6a2qR1LWWMM.roa (hash: Enj8RsjeWdg6DNXeEBjEHOQvivlKq9SbhBZo4JjBnWI=)
3: 9Wp0yEODLyFtAabFmIGNXyJJH0M.roa (hash: MDU9oyYCQf0/qP8XxFFcq2DKmq9IodMcE6wWVXgzdfk=)
4: HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa (hash: ifhkkPhpziHsauqMvFaIRDB08xUa/qaHainhKiKTunA=)
5: bZxGACHwaOou2-X_UPueDJrrvXE.crl (hash: NOi7e9o0BPLqvi8CeoJsKNbWaTkFk93yjW9sN08C8+M=)
6: kE-FnO_bKPVoHR9SA72KKPHWwKY.roa (hash: fR8CHLRHdM3OeZe9BDHG8eQXSpySKgVTJeF/UqX5ya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:0a:86:b6:85:6f:cd:08:d1:f4:76:2f:fc:51:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Jul 28 21:01:09 2026 GMT
Not After : Jul 29 21:01:09 2026 GMT
Subject: CN=896b6cd60b85bc7de6b8a4ab4fd0021e13ad8553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:a8:f0:d1:34:f3:e7:bb:15:6a:74:3a:03:
14:cb:c1:fb:d3:37:a6:ee:33:76:07:7d:d8:c2:d5:
29:e7:05:2a:4c:ea:7f:1d:ed:f9:18:88:b6:20:79:
c5:0d:4b:2b:c5:8e:be:ca:4e:4c:a2:7d:41:46:6e:
20:9d:6f:3c:91:11:e4:f5:8a:a0:d2:71:20:58:e6:
f5:c4:68:bd:0c:2e:6d:46:9c:e9:17:85:0e:b0:f1:
67:6c:33:5f:a4:8d:06:3a:80:53:f3:04:00:86:65:
6f:37:72:e1:41:8d:f3:65:21:8b:a2:b6:6b:26:e5:
7b:66:b2:19:1f:96:f3:c7:e4:71:7d:1b:94:87:1a:
6f:dc:81:8b:9e:17:fa:35:df:ae:40:45:65:ff:c3:
25:6e:2b:a7:43:d5:0c:e0:98:55:59:41:c9:20:24:
0b:04:f7:38:f4:47:b5:82:df:25:e1:13:f5:87:21:
e2:e0:ce:cd:9b:37:c2:00:c8:27:86:fd:19:e2:cc:
69:64:c7:75:3d:75:2c:a4:06:1d:e3:6c:f2:cd:93:
77:e0:5c:9c:79:ce:f1:52:cc:47:85:b3:10:63:a4:
2a:f1:d7:20:99:3f:20:dc:c1:c9:b7:5f:10:b5:db:
70:f8:10:09:bc:29:f5:22:5c:d0:f6:5f:55:1a:83:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6B:6C:D6:0B:85:BC:7D:E6:B8:A4:AB:4F:D0:02:1E:13:AD:85:53
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b9:ab:39:72:ed:d9:3e:62:83:1e:d9:e1:fc:fb:c8:f0:21:
89:9d:a5:7a:c6:e1:9b:63:d9:e7:fe:a3:0f:06:96:e2:7f:00:
96:1e:ef:d7:29:ab:30:fb:c7:fe:a1:52:e5:1b:98:b5:66:73:
4f:51:0d:72:7d:e2:67:21:67:63:51:a3:65:fb:5d:c4:2e:04:
95:13:89:85:aa:66:30:8d:3a:9d:8a:db:b5:17:d2:3a:62:ce:
90:91:35:a8:d1:07:4e:8e:da:2d:ba:51:3d:15:c7:a3:b9:b4:
14:fe:0a:50:95:75:ae:e4:01:7a:3e:f6:da:09:eb:63:9c:2b:
7a:b7:0c:83:e1:d3:35:26:a1:f0:6b:9d:b0:68:3c:17:e2:a7:
23:a4:c3:81:19:28:66:9c:95:3c:f8:df:ca:f5:af:2c:96:ae:
d8:2d:83:1f:05:c6:0b:ce:1c:15:4e:a0:97:7c:fb:5a:76:96:
df:0b:fa:18:c1:fa:e9:81:a1:56:48:da:ee:b7:ab:81:aa:a8:
cf:a9:3f:c5:c8:6c:46:f1:26:e0:4e:8f:e6:95:37:53:3d:7d:
ab:fc:b7:5d:f5:34:b7:54:cd:bf:9a:95:d9:2d:b9:ad:38:6e:
6a:04:fe:82:40:1e:08:86:61:38:10:68:5c:93:44:b1:cc:32:
df:27:c8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:24:53 2026 by rpki-client