Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: wGa+pHMUFxz18OME8+Hgxi9rBs4uJ8BAoSjp7wBbvWQ=
Subject key identifier: 1E:A0:AA:9E:F5:1C:10:2A:40:B8:1B:51:56:FE:24:15:20:C5:28:05
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 01A0C5208AC6CF6C36F3C6EB2F3540D354C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 18:00:39 +0000
Manifest this update: Mon 21 Sep 2026 18:00:39 +0000
Manifest next update: Tue 22 Sep 2026 18:00:39 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: OLH1NJrSSn1zIHCiHL4cBpznD4opv+1OUxvWklPsxgU=)
2: IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa (hash: gkV9ez5h044OMkSTspKV9neDGkCTAKH1+BcOktle2ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:8a:c6:cf:6c:36:f3:c6:eb:2f:35:40:d3:54:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Sep 21 18:00:39 2026 GMT
Not After : Sep 22 18:00:39 2026 GMT
Subject: CN=1ea0aa9ef51c102a40b81b5156fe241520c52805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:0f:ff:4f:57:75:bd:c1:55:21:f3:e4:ce:
f0:79:ec:60:68:c5:b2:db:9a:e2:85:1d:a7:71:41:
0e:e0:4e:cf:3a:9a:ef:40:28:48:18:6a:63:86:3a:
47:46:19:90:a9:9c:c4:25:48:8f:14:fd:aa:13:d8:
2f:f6:63:1a:64:51:0e:c5:24:62:4b:42:60:7b:aa:
71:4d:e6:57:82:bc:3c:a9:d4:b2:d3:bb:24:70:e6:
7c:00:d7:47:ca:20:47:cb:2c:34:22:79:30:ff:ce:
3e:6c:8a:7a:49:05:de:9b:d7:8c:f1:9a:b5:2b:01:
ff:b7:12:94:e7:82:fc:ac:97:de:9c:cf:7e:7b:91:
29:fb:69:7f:0a:cd:75:ca:5c:18:54:74:3d:3d:47:
36:a4:b1:69:88:e1:41:05:30:d1:8c:7d:2e:f7:5f:
95:83:6e:9e:ae:c1:6b:87:e9:48:14:c6:f8:9c:0a:
85:74:03:cf:e4:4b:6b:64:79:63:41:90:17:0d:ec:
8e:75:24:a0:55:92:f6:a3:7a:c9:26:e0:a2:68:27:
dd:b2:20:39:bd:99:37:a6:a4:a5:49:30:5b:94:33:
60:86:a5:4e:b5:34:b0:29:0a:37:90:db:07:dc:d5:
a8:b0:67:2a:6a:3d:c7:ff:65:60:d8:55:15:92:5a:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:AA:9E:F5:1C:10:2A:40:B8:1B:51:56:FE:24:15:20:C5:28:05
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:20:db:3e:ec:64:31:7f:cb:e0:59:88:86:69:a5:03:3b:b0:
fb:a2:6e:ea:ee:1b:0b:7c:cd:11:91:27:da:15:0a:aa:bb:51:
aa:2f:ba:2e:2e:3f:60:03:e1:53:44:32:06:7a:37:df:ab:a9:
cb:6f:27:33:4b:37:29:e6:e1:aa:3f:f1:19:75:f6:e8:aa:f2:
a7:f5:83:06:d7:da:69:eb:73:7f:cf:a1:a5:f4:c8:f5:69:9c:
e0:c3:f4:a6:fd:b4:ca:8f:ba:b6:fa:93:f7:df:b2:33:93:5c:
24:ae:c2:f6:b6:0b:d7:4f:e6:c5:64:be:56:89:a1:65:87:57:
6f:dd:fb:3c:c4:64:b9:d1:79:ed:5c:69:76:bf:4f:5e:93:f5:
4c:a5:33:d8:9b:8f:84:f1:68:d8:12:8e:5f:bb:f0:ca:6c:35:
db:9d:4f:12:59:e6:a7:ff:40:64:23:8a:9a:6e:fb:db:f2:c7:
9f:57:e2:44:f2:69:f7:fd:bc:64:a1:48:0e:6a:76:2d:8b:ea:
e7:7b:f7:b9:0f:9c:fe:97:b2:4e:7c:26:46:42:7d:f5:58:33:
c2:ea:32:e6:34:96:f1:72:75:49:27:6d:3d:f8:f7:20:77:5e:
49:ba:b8:8c:b2:54:65:b8:da:ea:e7:6b:70:64:ca:92:8a:5d:
cc:fa:d9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:51:39 2026 by rpki-client