Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
File: bZxGACHwaOou2-X_UPueDJrrvXE.mft (raw, json)
Hash identifier: MHYCWaagLgUQw064AHs9srnSuNGhIob1QJhoV01hTFw=
Subject key identifier: C6:45:03:1B:73:5D:D1:54:FC:38:F8:E0:B6:A2:1C:2F:61:2D:49:5A
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 01A1724B4C53C3B588E05F0530B5032CA26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
Manifest number: 0139
Signing time: Sun 25 Oct 2026 09:01:39 +0000
Manifest this update: Sun 25 Oct 2026 09:01:39 +0000
Manifest next update: Mon 26 Oct 2026 09:01:39 +0000
Files and hashes: 1: 2mcmBph44T6F-kS8XWJD7lOyKpw.roa (hash: YgZT5uRBbUSFNWW/4uRQ1rHtYNnG1WTldBKIGXD9WOM=)
2: 8tLBF654pSFrtTZo6a2qR1LWWMM.roa (hash: Enj8RsjeWdg6DNXeEBjEHOQvivlKq9SbhBZo4JjBnWI=)
3: 9Wp0yEODLyFtAabFmIGNXyJJH0M.roa (hash: MDU9oyYCQf0/qP8XxFFcq2DKmq9IodMcE6wWVXgzdfk=)
4: HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa (hash: ifhkkPhpziHsauqMvFaIRDB08xUa/qaHainhKiKTunA=)
5: bZxGACHwaOou2-X_UPueDJrrvXE.crl (hash: kIPhjIXteIGTnFFd/aRMkg8UWOknayg0aZzQrn0V7a0=)
6: kE-FnO_bKPVoHR9SA72KKPHWwKY.roa (hash: fR8CHLRHdM3OeZe9BDHG8eQXSpySKgVTJeF/UqX5ya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4b:4c:53:c3:b5:88:e0:5f:05:30:b5:03:2c:a2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Oct 25 09:01:39 2026 GMT
Not After : Oct 26 09:01:39 2026 GMT
Subject: CN=c645031b735dd154fc38f8e0b6a21c2f612d495a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:e0:fc:1f:21:9b:73:3b:8f:40:59:a4:d6:
e2:41:6f:f8:46:a7:17:39:49:80:25:e2:f8:a1:f7:
fc:4a:09:30:c8:f1:45:ce:88:22:57:0a:97:97:57:
99:9e:d4:7f:05:b9:f0:93:30:65:ff:35:40:a0:f6:
39:ca:98:87:56:55:99:21:89:1f:68:11:f6:60:4e:
fc:52:df:54:72:3a:a3:26:37:4b:af:af:c4:f5:f9:
25:e0:6d:ff:ee:3f:7e:71:9c:f2:2b:a1:cf:31:25:
d3:ca:7e:08:06:50:f1:dc:58:f4:26:a4:29:07:5d:
6e:f3:a4:4c:c2:09:f3:9c:94:85:86:2f:e0:e8:41:
3e:87:7f:c4:e2:cf:b7:35:57:ee:5d:1d:7a:a0:10:
7c:1b:ce:d8:d0:72:bf:69:2c:19:48:76:80:cf:26:
b6:cf:13:4d:d6:77:84:34:fd:b1:e3:0a:a4:a3:17:
23:c3:1c:b5:c2:0f:19:ec:e6:4f:25:a8:35:cb:b8:
24:61:27:6e:19:d6:93:25:65:1d:63:f6:a8:78:7c:
9e:37:d2:26:75:31:26:b3:0e:c7:69:02:36:99:70:
39:04:e0:42:34:e9:59:c1:4b:b5:bc:dc:58:7b:4a:
18:87:b1:7b:4c:e8:be:b9:93:2e:0e:1e:d2:c6:f7:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:45:03:1B:73:5D:D1:54:FC:38:F8:E0:B6:A2:1C:2F:61:2D:49:5A
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ec:ea:c5:e3:1d:70:b8:38:0a:a7:88:72:ff:5f:ac:eb:89:
e0:0e:5f:8e:b1:2f:10:c0:08:cc:eb:5f:59:2a:68:f3:66:90:
d1:d0:dd:2a:c1:bd:58:38:99:f8:ef:58:3f:f6:eb:87:b4:1d:
86:aa:0c:4b:8d:f8:f0:52:27:12:11:3a:bf:f8:ee:c0:d8:a5:
30:45:f8:05:b9:c6:2a:c3:81:2b:8f:7e:18:3c:e4:b3:e3:8c:
44:75:a2:8d:c9:79:69:27:d6:0c:d1:d9:3d:f6:fc:c3:d5:0c:
9f:76:e3:c4:be:e2:30:89:5a:20:e5:e4:1b:5e:05:60:af:7a:
b3:93:93:32:ce:85:88:fc:90:fc:33:bf:00:e2:94:9c:d0:43:
0c:a2:ec:6a:21:a9:e1:ae:f0:52:e9:26:f3:ed:bd:52:66:ec:
f1:56:40:63:ba:fa:eb:f6:fd:53:cf:25:61:5d:72:e5:dc:3a:
b4:4b:09:3b:e2:aa:81:63:77:82:58:86:00:14:a4:49:ec:b0:
4b:cb:84:e9:0d:aa:43:f7:1b:0d:b5:8b:2a:ec:30:b0:03:e2:
b6:5a:f1:a2:30:85:47:0a:83:75:3d:41:c2:9f:ec:cc:f6:fe:
ab:f0:ee:52:2d:25:83:a8:bd:82:cc:51:08:e4:db:46:0a:a4:
bd:b3:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:48:37 2026 by rpki-client