Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File: BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier: XrVrdXAPeCyz/c12z/+KtBfjVIxsE+jxM+vi2vvuQ40=
Subject key identifier: A3:F9:BD:3A:13:BF:8F:B0:D0:98:D5:09:D0:D5:A7:D3:CA:95:8F:54
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial: 019FA899B58614178D090B32B48EE2B7703A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 12:01:13 +0000
Manifest this update: Tue 28 Jul 2026 12:01:13 +0000
Manifest next update: Wed 29 Jul 2026 12:01:13 +0000
Files and hashes: 1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: NOQzFEf4lj2PL2c98yucT+kUusCkG5tjH/Uj+hpFNzY=)
2: Qh3-2TMMaClcKooNJ3fndADjiYo.roa (hash: OrsiroKPXNo2SdBOxZVVTepz1ZwF+w/R3aYOwgk/QnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:b5:86:14:17:8d:09:0b:32:b4:8e:e2:b7:70:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Validity
Not Before: Jul 28 12:01:13 2026 GMT
Not After : Jul 29 12:01:13 2026 GMT
Subject: CN=a3f9bd3a13bf8fb0d098d509d0d5a7d3ca958f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:4f:e5:64:82:0d:1d:47:41:50:c7:bb:a8:
0b:98:6e:6d:46:c9:5a:9b:16:d3:97:9f:59:80:f5:
fd:e2:f3:f8:2e:0a:4f:01:c1:11:fd:aa:a5:b5:34:
6a:45:6c:ff:2e:dc:9c:2d:4e:ba:ea:09:8e:32:55:
3e:ee:b6:d9:3e:2d:34:f2:11:db:10:4f:2c:76:d9:
49:8b:b3:72:5c:c7:77:5e:7d:6c:06:89:b0:b0:63:
1a:5b:49:2b:87:2b:19:66:fd:e6:e6:77:7a:01:77:
ab:53:f5:db:0a:1e:ae:0b:a6:1d:cc:6e:50:9b:df:
25:43:c2:64:3f:e6:38:19:a1:26:ef:5b:fc:04:ef:
83:21:9f:95:d1:20:9b:55:ac:04:bc:23:ec:6d:14:
04:bf:e9:65:54:d2:45:23:71:83:c3:20:ae:70:0d:
5a:68:63:bb:6b:d8:e6:92:67:af:42:98:01:54:07:
be:6c:62:e3:54:9f:16:21:0d:bd:1a:0c:7e:74:20:
84:e0:1e:63:59:01:3f:d1:2f:67:2c:a7:d9:a2:cb:
8c:71:47:6d:37:9c:cd:72:ca:c2:a6:1b:00:9e:71:
c5:fd:a1:4e:b1:c3:6a:67:c1:4d:13:7d:10:7e:5e:
ef:01:cf:28:22:a8:d4:48:e1:1c:15:5e:fe:58:25:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:BD:3A:13:BF:8F:B0:D0:98:D5:09:D0:D5:A7:D3:CA:95:8F:54
X509v3 Authority Key Identifier:
keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c7:8b:45:00:5a:fd:2a:97:09:96:4c:00:ad:8b:b0:64:2b:
8e:b2:2d:50:67:0f:cb:9f:9a:a9:46:ed:7b:ed:d9:79:e5:71:
c3:8b:e1:4f:18:33:e1:a2:8a:05:df:65:13:cc:36:d5:28:7a:
dc:82:a3:68:c3:2c:9d:31:6e:97:6e:b3:49:43:a5:cf:03:d2:
7b:4c:04:84:d7:30:ed:c7:a9:e1:81:d5:3f:5f:12:f4:0d:46:
2f:74:2d:db:3c:ea:d0:0f:cf:26:80:44:a1:65:4f:91:11:04:
dc:f4:eb:3f:6c:95:8a:b5:bb:a1:01:1f:2d:a3:5e:6c:50:fc:
95:49:14:74:b1:d4:63:ab:93:c5:09:de:1f:b2:0d:7d:7b:32:
50:75:0e:de:cb:f7:2d:5b:9f:02:82:9d:ad:c9:bf:78:bf:6d:
3c:f4:44:3f:62:36:b3:12:e5:09:8b:53:2d:17:56:4a:de:60:
8a:8f:89:6f:af:46:49:df:21:5e:92:b1:08:5f:0c:1c:47:f2:
36:27:23:71:45:da:13:c0:30:bb:13:68:03:6a:c7:6b:1f:cd:
d0:d0:b4:f9:11:bf:85:51:8e:df:5a:b8:7b:3c:cf:e4:0a:87:
9d:e3:7f:cb:a5:07:17:08:09:06:3b:9c:75:6e:61:ce:de:61:
d5:88:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:50 2026 by rpki-client