Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: tjqYgw2cqpCYYDrZIZZxjWhgGvOh4Ch32vaw9UrL+CA=
Subject key identifier: 11:5A:69:EA:1E:2D:1A:6F:9E:17:D9:23:F4:B5:FF:D3:0A:C2:A7:A0
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 01A1C40B974CFDB024B3996DCFABBAE905FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 1AEA
Signing time: Tue 10 Nov 2026 06:00:56 +0000
Manifest this update: Tue 10 Nov 2026 06:00:56 +0000
Manifest next update: Wed 11 Nov 2026 06:00:56 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: jyFalCd1Y/K+0GFTLJ+ygKy98tnVq9w8EnZGz9KZiCQ=)
2: IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa (hash: gkV9ez5h044OMkSTspKV9neDGkCTAKH1+BcOktle2ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:0b:97:4c:fd:b0:24:b3:99:6d:cf:ab:ba:e9:05:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Nov 10 06:00:56 2026 GMT
Not After : Nov 11 06:00:56 2026 GMT
Subject: CN=115a69ea1e2d1a6f9e17d923f4b5ffd30ac2a7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:7f:70:d2:03:f1:bc:65:64:4b:67:9c:4c:
4e:11:e6:3b:f3:39:a2:d4:26:d6:29:c6:06:00:87:
3e:6c:66:3b:f5:04:82:ea:d6:56:9f:12:e2:c5:7c:
70:3c:74:6f:46:77:db:14:0a:ce:8f:87:b1:20:52:
8d:c9:45:4f:72:ab:dd:05:7e:f7:8c:e8:fb:17:5a:
11:6e:38:b4:7b:00:ff:62:22:c2:80:e1:6b:64:36:
56:d0:98:5c:41:0a:62:5c:3f:de:4d:40:4c:9b:ae:
1a:3d:8f:25:ab:b5:01:80:32:30:f9:a7:96:83:b0:
33:dd:7e:59:86:8d:98:cd:7d:f2:40:21:33:a8:65:
dd:b0:e2:a8:ef:49:62:94:c4:7c:9c:32:3b:c5:b0:
5e:8f:77:ed:cd:0c:4b:1a:d2:c5:b3:cd:07:b4:68:
8d:13:7a:00:35:3a:ef:a2:60:ce:81:c7:8d:31:8a:
8f:aa:ae:9e:79:16:88:72:7a:0b:18:51:34:1c:61:
3c:b9:03:6e:d5:fd:62:3b:f0:56:d7:e2:89:f8:91:
35:d1:3a:cd:ef:70:62:cf:ea:40:d9:f2:36:ac:40:
f6:31:33:c4:2e:d5:6c:84:b7:b9:de:a3:67:e1:7d:
46:21:f2:50:2d:bd:42:fa:80:cd:f5:79:93:fd:4f:
81:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5A:69:EA:1E:2D:1A:6F:9E:17:D9:23:F4:B5:FF:D3:0A:C2:A7:A0
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2e:e7:42:d7:dc:6e:e5:8c:5e:fd:2d:0a:e3:1c:95:04:6c:
c8:d3:75:58:f2:0c:6e:cd:0c:aa:38:a1:c3:31:e4:9a:72:3a:
36:7f:d9:a6:1a:65:99:6a:e8:4e:12:83:8e:db:d9:aa:59:71:
2c:3c:78:7e:fe:07:c9:c8:b8:88:64:a6:77:c3:5d:a3:26:52:
09:05:61:1a:c8:1e:e4:9d:fc:ed:32:a8:b5:7c:35:37:4f:c0:
de:f1:fb:33:31:08:a1:d4:4a:92:c0:e5:b9:de:20:ac:d3:fd:
75:06:e4:5a:90:dd:01:4b:6b:22:06:0a:84:47:b5:f7:76:13:
cd:97:95:1e:cb:95:9d:65:30:43:a1:87:ac:ec:0a:bd:a1:8b:
96:d9:8f:1a:93:f9:96:cb:f4:36:24:c0:a6:0c:b7:5c:46:d9:
58:f0:73:0a:31:08:51:cb:e3:f8:a8:ef:fd:6a:33:32:a7:21:
c6:6f:e3:c2:bf:73:3f:54:c0:96:a7:b4:cd:ad:8a:65:8c:69:
8f:df:a8:c2:da:46:ea:86:ce:74:48:89:41:53:70:f9:97:6e:
26:91:b9:ad:4a:bf:8c:e5:80:48:97:21:8c:5d:96:fb:e6:2a:
d6:53:84:26:9f:27:20:71:56:7c:e1:4d:a4:74:a1:8a:64:41:
31:9e:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:55:51 2026 by rpki-client