Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
File: BZqsWXzkoNE7edIrO_GKSJnddk8.mft (raw, json)
Hash identifier: wM6WOTMpyf2Ssg/BJHuQZDk0hTjaFVtu2l0koMcI0KY=
Subject key identifier: 13:68:56:1D:FD:EE:B3:0B:06:9E:42:4B:7C:EF:05:D9:C1:63:EC:AA
Authority key identifier: 05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
Certificate issuer: /CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Certificate serial: 01A13E25CCE0AC97A99B2FCBCD9A9CB68678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
Manifest number: 0F32
Signing time: Thu 15 Oct 2026 06:00:26 +0000
Manifest this update: Thu 15 Oct 2026 06:00:26 +0000
Manifest next update: Fri 16 Oct 2026 06:00:26 +0000
Files and hashes: 1: BZqsWXzkoNE7edIrO_GKSJnddk8.crl (hash: klT93RMzpUome8tl2vscMQ0GbfsvKJFJk1wjSkH87co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:cc:e0:ac:97:a9:9b:2f:cb:cd:9a:9c:b6:86:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Validity
Not Before: Oct 15 06:00:26 2026 GMT
Not After : Oct 16 06:00:26 2026 GMT
Subject: CN=1368561dfdeeb30b069e424b7cef05d9c163ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:09:34:d8:d0:6c:28:b8:88:48:59:7e:30:
10:0b:78:60:c2:98:96:90:83:2b:c4:6e:30:6e:70:
17:44:1b:04:b1:21:72:13:e4:3d:3e:be:92:da:a6:
82:4c:82:13:77:ae:07:fb:59:c2:09:6d:68:89:4e:
c9:f0:6d:30:12:b2:91:7f:ad:97:ab:70:41:b7:88:
d4:59:f1:59:ac:2a:b3:cc:d9:d9:e2:bc:a9:ea:5b:
ab:b7:ee:23:6b:ee:06:41:ba:0a:b5:a7:e9:eb:c8:
1d:26:4d:24:02:f8:6f:72:b5:37:a5:ab:d1:c3:6e:
ed:23:57:df:3c:8c:a5:e4:6a:aa:4f:84:b3:85:a3:
f6:28:90:06:45:85:3a:ac:ac:73:60:92:7e:ce:db:
77:be:a5:19:97:02:9b:5b:34:dc:7c:08:5d:32:ac:
74:2d:a8:10:e0:a5:9e:2d:53:7f:07:9e:8a:f3:39:
87:c9:2d:56:a1:b9:44:e0:c9:d6:9f:d5:0b:b1:46:
64:4e:0c:a4:a7:68:26:e6:95:19:50:cd:1f:ef:51:
fa:51:5f:c8:80:35:ce:c4:01:ae:67:84:5d:f0:4d:
43:08:28:6e:4b:9c:5c:ad:61:ff:87:52:58:64:d1:
0b:0f:34:ca:49:fa:67:c9:42:a7:e6:77:0c:ff:37:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:68:56:1D:FD:EE:B3:0B:06:9E:42:4B:7C:EF:05:D9:C1:63:EC:AA
X509v3 Authority Key Identifier:
keyid:05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2c:0d:10:8b:d5:ff:40:82:68:01:1c:12:40:f1:47:ab:2b:
c8:4c:4b:c8:1e:81:52:52:cb:5a:5f:29:65:21:47:bd:18:28:
07:7e:b2:56:da:f3:0b:4c:7b:9c:b8:40:8c:62:6c:31:51:33:
5a:d1:e0:1c:6e:97:2d:35:8f:e1:61:96:9a:1a:df:42:00:e5:
8f:1f:92:b1:bf:0f:34:fc:b8:6c:07:f7:11:58:a6:37:b8:19:
a4:d0:72:e0:59:2c:31:50:3d:53:1a:3b:1d:3c:6c:92:e0:87:
c5:95:3f:81:79:2b:38:21:86:0a:c8:30:6e:b5:69:ba:46:96:
13:9f:cf:7c:7d:a0:24:46:8a:3e:1a:af:b1:a2:47:c5:49:36:
7a:06:bb:47:56:4e:8b:c0:1b:1a:78:78:1a:43:03:d1:7e:b0:
ec:c9:d8:f0:c0:06:31:72:33:0b:34:31:51:32:2d:05:1c:11:
06:7f:17:1f:15:c2:38:e4:c0:76:dc:dc:be:6f:81:d5:41:db:
6f:1d:94:7b:22:d7:69:11:34:a4:f0:fc:6d:c9:f7:a0:48:21:
2a:0e:9d:5e:36:6f:9c:1a:5c:77:ea:00:66:93:53:59:03:72:
b5:2b:03:01:26:2c:f1:ad:3c:5f:35:b7:ce:90:55:ba:17:8a:
b0:c1:5c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:20 2026 by rpki-client