Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
File: BZqsWXzkoNE7edIrO_GKSJnddk8.mft (raw, json)
Hash identifier: /FZBx588tBSCrf6MFOOmg47WVbeJZColhpofw03XBmk=
Subject key identifier: 02:21:A6:E7:E6:A0:30:0E:56:ED:2C:EA:F4:7C:33:21:50:08:D7:B2
Authority key identifier: 05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
Certificate issuer: /CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Certificate serial: 01A0016FA7E3B150D7A037DEC319A4932F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
Manifest number: 0E8E
Signing time: Fri 14 Aug 2026 18:01:29 +0000
Manifest this update: Fri 14 Aug 2026 18:01:29 +0000
Manifest next update: Sat 15 Aug 2026 18:01:29 +0000
Files and hashes: 1: BZqsWXzkoNE7edIrO_GKSJnddk8.crl (hash: h2jDvhAe7K4RV/efIRMjPLDsq3RC6rqPa1Tdh3pYkow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:a7:e3:b1:50:d7:a0:37:de:c3:19:a4:93:2f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Validity
Not Before: Aug 14 18:01:29 2026 GMT
Not After : Aug 15 18:01:29 2026 GMT
Subject: CN=0221a6e7e6a0300e56ed2ceaf47c33215008d7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ba:95:bd:c2:33:0d:6a:d6:7c:16:fb:42:0b:
31:45:95:4c:e2:1a:61:9d:88:07:f8:64:2a:24:94:
df:79:67:4a:84:3f:f1:05:2f:4f:63:e2:35:3e:e7:
49:00:03:b9:93:cb:10:0a:b7:05:7b:7b:2c:04:74:
61:dc:ba:0b:6c:f6:1c:55:e0:eb:f5:0e:21:d8:8d:
5d:1f:ef:89:16:eb:d1:70:e3:19:7b:9b:90:8f:7c:
73:e1:a7:4d:16:0d:e7:0c:a3:57:2a:e0:86:39:76:
93:d2:f6:2f:f5:25:57:65:da:5d:e7:ed:84:81:82:
80:4c:cf:a4:8b:66:30:56:0f:86:2b:7b:17:0d:40:
7f:92:85:df:08:0a:0c:5e:ba:ef:95:b0:62:69:9e:
4b:72:b5:8a:78:a3:11:76:cc:c7:4b:8b:ad:ba:07:
8e:5c:bd:18:5c:22:22:f8:7f:56:50:9f:b4:c9:ea:
a9:fa:e8:d2:d7:8a:46:b3:cf:1f:ef:5f:a4:92:bb:
d8:b5:49:d3:f4:86:d4:a2:2d:f4:65:e2:04:78:1b:
e8:33:30:1c:06:7e:40:dd:5a:3b:57:d8:ff:74:c8:
2d:37:c7:c6:46:83:41:f9:0a:55:1d:b6:88:93:d3:
00:df:dd:3e:c6:29:e4:4b:19:70:18:64:6d:8e:1c:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:21:A6:E7:E6:A0:30:0E:56:ED:2C:EA:F4:7C:33:21:50:08:D7:B2
X509v3 Authority Key Identifier:
keyid:05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4d:54:0b:32:1c:4d:4c:e5:f5:a9:07:66:e2:a2:cd:41:39:
45:ee:0b:17:bf:af:bb:8b:9c:32:59:3f:6b:8b:bc:22:30:05:
53:8e:7a:6b:96:60:20:df:7d:3c:a6:7a:db:7a:11:10:e7:f9:
b5:38:8c:31:5f:f1:c1:a7:b1:f5:aa:80:d5:10:f6:85:01:74:
81:31:f7:2f:50:89:8c:e0:7a:1f:75:c5:43:bc:87:2e:c1:6e:
1c:2a:11:58:72:24:34:91:99:cd:8a:2b:30:76:92:02:53:b5:
de:b7:f2:8b:11:09:39:20:a8:0d:46:31:70:56:dd:b7:5f:27:
81:4c:4e:c4:91:89:0a:c3:bb:a2:54:e2:aa:dc:97:c9:af:7e:
22:9b:b0:e1:d7:4b:e7:9f:20:b1:07:62:d1:56:25:e9:e2:e0:
02:22:a5:00:9e:01:ea:8f:bb:a1:06:0a:84:e1:37:4b:9f:0c:
b9:c5:25:16:d5:95:38:c0:26:39:e6:32:c8:98:a2:e0:c2:7f:
af:e8:b0:d7:89:64:5f:27:76:59:f6:06:1d:0f:3e:ff:aa:21:
52:69:7f:4f:ff:9e:e7:9a:b3:54:85:7e:b4:bb:93:8d:ba:62:
f7:a7:c2:58:04:5a:be:5b:25:4a:f5:dd:39:8b:3f:d8:fb:25:
a4:11:25:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb6fjsVDXoDfewxmkky+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OWFhYzU5N2NlNGEwZDEzYjc5ZDIyYjNiZjE4YTQ4OTlk
ZDc2NGYwHhcNMjYwODE0MTgwMTI5WhcNMjYwODE1MTgwMTI5WjAzMTEwLwYDVQQD
EygwMjIxYTZlN2U2YTAzMDBlNTZlZDJjZWFmNDdjMzMyMTUwMDhkN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bqVvcIzDWrWfBb7QgsxRZVM4hph
nYgH+GQqJJTfeWdKhD/xBS9PY+I1PudJAAO5k8sQCrcFe3ssBHRh3LoLbPYcVeDr
9Q4h2I1dH++JFuvRcOMZe5uQj3xz4adNFg3nDKNXKuCGOXaT0vYv9SVXZdpd5+2E
gYKATM+ki2YwVg+GK3sXDUB/koXfCAoMXrrvlbBiaZ5LcrWKeKMRdszHS4utugeO
XL0YXCIi+H9WUJ+0yeqp+ujS14pGs88f71+kkrvYtUnT9IbUoi30ZeIEeBvoMzAc
Bn5A3Vo7V9j/dMgtN8fGRoNB+QpVHbaIk9MA390+xinkSxlwGGRtjhxfhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIhpufmoDAOVu0s6vR8MyFQCNeyMB8GA1UdIwQY
MBaAFAWarFl85KDRO3nSKzvxikiZ3XZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpxc1dYemtvTkU3ZWRJck9fR0tTSm5kZGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iYWI4OWEtZDk5MC00ZmM3LTg2ZGQt
ZTJjODE2ZGI4MWNjLzEvQlpxc1dYemtvTkU3ZWRJck9fR0tTSm5kZGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iYWI4OWEtZDk5MC00ZmM3LTg2ZGQtZTJjODE2ZGI4MWNj
LzEvQlpxc1dYemtvTkU3ZWRJck9fR0tTSm5kZGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnU1UCzIc
TUzl9akHZuKizUE5Re4LF7+vu4ucMlk/a4u8IjAFU456a5ZgIN99PKZ623oREOf5
tTiMMV/xwaex9aqA1RD2hQF0gTH3L1CJjOB6H3XFQ7yHLsFuHCoRWHIkNJGZzYor
MHaSAlO13rfyixEJOSCoDUYxcFbdt18ngUxOxJGJCsO7olTiqtyXya9+Ipuw4ddL
558gsQdi0VYl6eLgAiKlAJ4B6o+7oQYKhOE3S58MucUlFtWVOMAmOeYyyJii4MJ/
r+iw14lkXyd2WfYGHQ8+/6ohUml/T/+e55qzVIV+tLuTjbpi96fCWARavlslSvXd
OYs/2PslpBEljw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:35 2026 by rpki-client