Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: r9Ssmjlzu0Xl4JkD1Y/Y1vVFQMD/TiOj4ZBna2YY+FQ=
Subject key identifier: A7:FD:FC:53:1F:B3:AF:48:8B:A0:33:28:BB:F9:EC:D4:16:93:42:39
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 019FA93E2016647E1FBD0D5587548D174D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 15:00:48 +0000
Manifest this update: Tue 28 Jul 2026 15:00:48 +0000
Manifest next update: Wed 29 Jul 2026 15:00:48 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: kBKUzyWrxKWUHmC+RAyiEUbctVHaXv19YfpDzLp0P9s=)
2: IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa (hash: gkV9ez5h044OMkSTspKV9neDGkCTAKH1+BcOktle2ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:20:16:64:7e:1f:bd:0d:55:87:54:8d:17:4d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Jul 28 15:00:48 2026 GMT
Not After : Jul 29 15:00:48 2026 GMT
Subject: CN=a7fdfc531fb3af488ba03328bbf9ecd416934239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:88:24:fb:c6:dc:ee:8a:68:51:45:8a:fb:
d6:77:e9:1e:0f:f4:66:25:3c:1e:96:8e:02:85:c9:
e5:f6:f6:fb:df:3e:0f:3e:3d:16:da:90:33:c7:ea:
20:6c:84:aa:b3:4d:a9:d9:79:bb:77:94:da:9f:34:
cd:25:60:e9:16:ae:a3:9f:9d:7f:77:80:cd:66:f8:
b7:3c:9c:eb:27:79:14:9d:42:8f:2a:11:2f:a2:17:
bc:1f:db:75:7f:7a:b5:f6:b3:b9:dc:d2:82:46:a7:
56:6a:44:0d:99:18:0a:e9:dd:a3:eb:42:24:fc:a6:
41:ac:f5:75:8e:ae:8b:ed:64:df:af:3d:77:62:99:
a0:50:31:f6:1c:a4:72:ab:61:54:b6:89:2b:4f:9e:
5c:4e:63:4d:3a:08:96:0f:22:65:98:9c:91:aa:21:
0e:07:05:1b:1a:0d:ce:39:e5:72:df:0b:b2:a7:9c:
4a:7c:ae:41:e3:30:b1:3e:3d:30:bf:79:76:cd:bf:
b8:a0:13:36:94:80:0f:c5:1e:f3:21:f2:47:c2:a5:
48:40:06:37:5c:43:99:ba:f8:48:d3:79:a6:5a:b4:
28:c9:94:de:6f:61:9a:f1:00:76:1a:0d:87:44:1d:
43:73:60:89:fe:d7:b0:fe:e5:e7:20:c3:03:dc:0f:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:FC:53:1F:B3:AF:48:8B:A0:33:28:BB:F9:EC:D4:16:93:42:39
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a8:2e:29:87:dd:7d:8e:4b:b7:9a:ca:74:01:9d:12:73:02:
2e:c0:97:c4:0c:28:27:13:67:37:bd:e2:a4:0e:a9:c9:e9:63:
8b:ef:d0:be:f2:6d:35:ba:b4:85:0f:cb:89:c9:31:61:73:cf:
f7:e6:bb:b0:c3:ec:39:f1:f5:b5:21:4e:b7:7f:12:1b:0c:c8:
96:98:fa:b4:bb:af:9e:62:43:b8:f5:aa:15:d4:5e:5c:94:0a:
ff:21:91:14:4b:ce:8c:e4:d3:71:4b:31:6d:54:09:ef:02:84:
c1:35:10:ba:65:c0:54:a2:ff:0b:1d:c6:0e:c2:a6:6b:d0:f3:
8c:d9:16:89:6f:b4:2d:84:18:da:ff:34:ea:b0:82:77:10:a8:
d8:17:fd:af:5f:fb:9a:54:57:30:06:59:ab:74:e6:84:99:fd:
b0:2d:9c:b5:fd:4d:b2:9c:27:85:a1:04:79:dd:1c:7d:db:e6:
61:c5:d7:d0:5e:d8:8f:de:e6:80:02:60:51:bf:3f:3b:f7:3c:
fc:c5:ba:ab:1f:48:57:de:fa:17:06:81:cb:26:4c:dd:63:80:
b8:3c:54:b7:65:0e:85:56:15:94:66:e4:47:ce:25:14:ff:4f:
9c:63:ce:20:95:55:c5:f2:e4:aa:c7:11:0b:c6:7d:9f:0c:a1:
bb:4d:39:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPiAWZH4fvQ1Vh1SNF011MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OWZhNmE2YjFlYzdhZTZlYThiNDQ5MzRjZjdjM2Q0ZmE1
MDhlZjIwHhcNMjYwNzI4MTUwMDQ4WhcNMjYwNzI5MTUwMDQ4WjAzMTEwLwYDVQQD
EyhhN2ZkZmM1MzFmYjNhZjQ4OGJhMDMzMjhiYmY5ZWNkNDE2OTM0MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/CIJPvG3O6KaFFFivvWd+keD/Rm
JTwelo4Chcnl9vb73z4PPj0W2pAzx+ogbISqs02p2Xm7d5TanzTNJWDpFq6jn51/
d4DNZvi3PJzrJ3kUnUKPKhEvohe8H9t1f3q19rO53NKCRqdWakQNmRgK6d2j60Ik
/KZBrPV1jq6L7WTfrz13YpmgUDH2HKRyq2FUtokrT55cTmNNOgiWDyJlmJyRqiEO
BwUbGg3OOeVy3wuyp5xKfK5B4zCxPj0wv3l2zb+4oBM2lIAPxR7zIfJHwqVIQAY3
XEOZuvhI03mmWrQoyZTeb2Ga8QB2Gg2HRB1Dc2CJ/tew/uXnIMMD3A85GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf9/FMfs69Ii6AzKLv57NQWk0I5MB8GA1UdIwQY
MBaAFAWfpqax7Hrm6otEk0z3w9T6UI7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjkt
OGQ2NGRmMDFjMGM0LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjktOGQ2NGRmMDFjMGM0
LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKguKYfd
fY5Lt5rKdAGdEnMCLsCXxAwoJxNnN73ipA6pyelji+/QvvJtNbq0hQ/LickxYXPP
9+a7sMPsOfH1tSFOt38SGwzIlpj6tLuvnmJDuPWqFdReXJQK/yGRFEvOjOTTcUsx
bVQJ7wKEwTUQumXAVKL/Cx3GDsKma9DzjNkWiW+0LYQY2v806rCCdxCo2Bf9r1/7
mlRXMAZZq3TmhJn9sC2ctf1NspwnhaEEed0cfdvmYcXX0F7Yj97mgAJgUb8/O/c8
/MW6qx9IV976FwaByyZM3WOAuDxUt2UOhVYVlGbkR84lFP9PnGPOIJVVxfLkqscR
C8Z9nwyhu005eA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:35 2026 by rpki-client