Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File: BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier: syMT+5aF1W0jpyUNfcsl5SgpVKj+VbJ2NgtaqAtNzzE=
Subject key identifier: 34:E3:5B:F6:7F:41:4B:C6:6E:A4:A4:4C:4C:BA:10:F1:B7:46:7B:73
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial: 01A0C66A5C1831D91A8249989F22523E38F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number: 1A6E
Signing time: Tue 22 Sep 2026 00:00:54 +0000
Manifest this update: Tue 22 Sep 2026 00:00:54 +0000
Manifest next update: Wed 23 Sep 2026 00:00:54 +0000
Files and hashes: 1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: 2p69p0MJx0eHVsfZSyXPECpY/fEeC7NQKWBGJnRn0YQ=)
2: Qh3-2TMMaClcKooNJ3fndADjiYo.roa (hash: OrsiroKPXNo2SdBOxZVVTepz1ZwF+w/R3aYOwgk/QnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:5c:18:31:d9:1a:82:49:98:9f:22:52:3e:38:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Validity
Not Before: Sep 22 00:00:54 2026 GMT
Not After : Sep 23 00:00:54 2026 GMT
Subject: CN=34e35bf67f414bc66ea4a44c4cba10f1b7467b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:88:d5:b4:d4:ab:37:b4:cd:d9:4f:93:13:
52:5e:37:d0:9e:b9:08:e3:3f:66:b2:7e:79:ef:fc:
21:eb:b3:67:65:f0:76:39:15:1b:ef:aa:73:15:40:
a4:55:f8:74:ae:44:29:51:37:00:d0:d0:a8:d3:09:
0a:42:ff:56:9d:f2:07:12:1b:2f:17:f7:13:62:4a:
43:a6:d2:45:91:3d:bc:ae:a7:93:7c:7a:81:f1:af:
66:f2:fe:90:3f:6f:9c:e3:ff:eb:c0:62:a1:aa:53:
7c:ab:40:30:8e:88:27:a2:d4:12:b2:f6:b4:f6:28:
5d:d1:1c:02:d7:ea:e2:27:f7:30:c6:5c:28:d2:f2:
70:c0:5a:2a:87:4a:ec:0d:9d:82:77:d9:ef:89:58:
e7:f7:0c:61:b0:db:d4:e5:81:4b:c3:04:a6:e3:ce:
a1:f6:15:01:dd:22:61:b5:11:5e:1f:3b:aa:fd:9c:
42:5c:6e:c7:f5:46:23:c7:9e:20:ae:e3:ad:84:57:
14:63:2e:2a:6f:dc:76:07:66:c5:97:88:5a:48:da:
f9:ce:88:28:17:27:ad:db:8e:8f:ca:ab:9a:8e:05:
64:b0:bb:40:5f:bc:b1:68:1c:dc:fe:00:fe:5b:e2:
b3:4f:1e:27:85:40:c2:0d:f6:d2:c2:6a:68:9c:1e:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E3:5B:F6:7F:41:4B:C6:6E:A4:A4:4C:4C:BA:10:F1:B7:46:7B:73
X509v3 Authority Key Identifier:
keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e0:18:fd:8b:2b:48:87:af:53:4f:eb:f5:24:da:e0:d1:ed:
45:02:13:cc:91:8c:3e:d9:06:75:42:7c:a7:7f:1a:b8:2d:86:
b3:07:75:d8:7a:c4:80:2b:f1:e8:e1:1f:5f:4f:84:68:15:4f:
2d:94:9e:ee:85:48:6b:88:15:7e:cd:50:29:08:75:d6:5d:9a:
0a:b7:76:2f:2d:78:cc:70:9e:b6:49:56:81:fe:44:e5:19:d4:
e9:7b:69:4b:66:78:1b:97:34:ca:31:ce:b6:3a:5b:67:5a:8f:
80:f8:6b:e5:3f:33:4a:0e:66:31:73:43:47:f2:4a:27:22:e9:
11:08:c9:07:74:ae:e9:5b:b1:47:86:a0:89:22:ca:0e:4b:01:
18:58:a5:f7:16:d9:27:3d:8a:c5:64:2b:69:b9:29:e3:e8:4d:
be:f6:b1:b2:02:d8:31:cd:b4:b8:85:b2:6b:04:71:40:b9:b4:
b6:f2:2f:c2:2b:33:a4:a7:e2:55:7c:0a:62:0f:79:35:d3:f2:
fe:e4:06:cd:04:80:84:c7:c9:66:a1:a9:7e:d3:df:15:fd:88:
61:89:32:13:3d:0d:0e:f6:e2:02:91:9f:e9:11:7a:1b:09:f8:
84:7a:48:15:88:76:ed:03:70:fb:06:72:08:03:fa:22:19:8c:
38:72:e4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:37:34 2026 by rpki-client