Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: 2nmKR4yNbYg7NJHBkgIsdLtd+wEMngyD+n7/sf83RVo=
Subject key identifier: A1:39:B5:54:B5:AC:D2:26:C2:99:6F:4A:3C:23:45:50:5A:26:A2:6F
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 01A13F02245F38F0919641D600F6E9B9B0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 10:01:07 +0000
Manifest this update: Thu 15 Oct 2026 10:01:07 +0000
Manifest next update: Fri 16 Oct 2026 10:01:07 +0000
Files and hashes: 1: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (hash: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI=)
2: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: 1FwR4buyfto8FTS9Epe/TRDvffDUMlu5RHFDyywdWFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:24:5f:38:f0:91:96:41:d6:00:f6:e9:b9:b0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Oct 15 10:01:07 2026 GMT
Not After : Oct 16 10:01:07 2026 GMT
Subject: CN=a139b554b5acd226c2996f4a3c2345505a26a26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:87:ca:cb:78:ca:ce:53:92:67:15:ec:69:
c8:71:6c:19:20:c4:42:30:60:e1:9b:f2:7c:a5:2f:
cd:4b:68:f7:8a:6d:68:7c:cf:a4:22:5e:bb:26:17:
c9:73:c3:c7:3c:62:ac:88:57:2f:5d:79:83:9e:f8:
e7:fa:2e:61:93:4a:c6:f0:a3:38:09:29:f1:47:bf:
44:0a:71:cb:e7:eb:4c:30:62:40:aa:5c:9f:e6:47:
ef:6e:db:b9:95:8d:7d:f5:a6:0f:0f:b8:7b:d7:35:
e2:8d:7f:1a:20:ab:5a:c7:78:12:f7:c3:70:25:52:
46:c8:23:de:a4:7d:a5:37:7d:4f:ef:b7:4d:e1:50:
ff:e2:93:1d:dc:81:d4:bc:4d:6b:a2:80:dc:05:91:
61:9c:b8:f8:1e:ba:f7:9a:10:d4:fe:22:72:ce:48:
13:c3:af:66:31:da:cb:e0:fa:fa:53:68:dd:29:84:
0c:e7:22:de:b7:09:dd:2e:c9:5f:79:f5:8e:70:58:
30:39:53:ce:92:86:b4:c6:55:6e:cb:d1:b2:92:20:
95:66:9d:2a:29:69:28:ca:84:0c:4b:a9:97:04:d7:
2d:56:c8:89:0d:67:e5:dc:10:ac:ee:95:02:cc:a0:
08:26:ff:3e:08:a1:0d:ee:fc:d4:b5:09:2b:85:5c:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:39:B5:54:B5:AC:D2:26:C2:99:6F:4A:3C:23:45:50:5A:26:A2:6F
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5a:c9:5f:b2:84:01:3e:f2:7b:9a:43:3b:91:82:19:1d:47:
37:4d:f7:0e:27:55:a4:f1:d2:23:08:32:e9:9f:4e:37:30:1b:
f6:ad:18:a0:e4:db:0c:7c:82:88:e5:c9:94:69:bf:7e:43:eb:
d2:bf:06:22:1c:e3:a2:5b:34:d6:4a:79:cd:17:14:1e:c2:d1:
f2:51:28:f9:24:34:d2:42:cd:4a:b0:2f:e9:bd:f3:16:b4:0d:
6b:7c:b0:7a:8f:6f:46:38:66:35:43:3c:13:73:38:e1:1f:96:
24:11:81:36:fb:7d:62:c6:43:d5:00:94:3a:bd:b3:1f:17:b6:
55:a2:36:c1:be:cf:3e:5f:46:43:5b:e9:7e:28:0f:c7:89:d0:
d8:5f:72:0a:75:87:f7:4d:bd:52:23:e6:72:ac:8c:2d:76:09:
66:e2:92:a0:58:f1:67:f7:ae:be:97:ce:0c:d7:ac:db:81:38:
08:45:7e:e4:9b:6b:89:6d:21:b1:b2:3f:cc:69:16:68:f4:73:
30:6d:17:f9:f1:db:82:59:55:06:4e:72:a0:b2:49:c2:2f:04:
39:70:6c:8c:f7:d3:e0:bd:cc:a9:bb:f0:d4:a6:57:97:d2:a4:
99:f5:4a:d3:41:52:a0:14:c4:2c:aa:8b:0c:e3:93:84:31:43:
1a:86:17:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:17:59 2026 by rpki-client