Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
File: bZxGACHwaOou2-X_UPueDJrrvXE.mft (raw, json)
Hash identifier: /sG0mYAHLLo5FaH2gCqY3DNwkUHSNli2A3JmVapN0LY=
Subject key identifier: 05:07:F0:A5:7F:6B:D6:C2:AA:D8:99:92:9C:DE:43:35:1E:09:1D:8F
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 01A06D94F475CA7C210613A14195E0309280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:13 +0000
Manifest this update: Fri 04 Sep 2026 18:01:13 +0000
Manifest next update: Sat 05 Sep 2026 18:01:13 +0000
Files and hashes: 1: 2mcmBph44T6F-kS8XWJD7lOyKpw.roa (hash: YgZT5uRBbUSFNWW/4uRQ1rHtYNnG1WTldBKIGXD9WOM=)
2: 8tLBF654pSFrtTZo6a2qR1LWWMM.roa (hash: Enj8RsjeWdg6DNXeEBjEHOQvivlKq9SbhBZo4JjBnWI=)
3: 9Wp0yEODLyFtAabFmIGNXyJJH0M.roa (hash: MDU9oyYCQf0/qP8XxFFcq2DKmq9IodMcE6wWVXgzdfk=)
4: HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa (hash: ifhkkPhpziHsauqMvFaIRDB08xUa/qaHainhKiKTunA=)
5: bZxGACHwaOou2-X_UPueDJrrvXE.crl (hash: 0WhxLefB02IDRqW4DbCZe4h2BJvERp4vCoqkUuwowgk=)
6: kE-FnO_bKPVoHR9SA72KKPHWwKY.roa (hash: fR8CHLRHdM3OeZe9BDHG8eQXSpySKgVTJeF/UqX5ya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:f4:75:ca:7c:21:06:13:a1:41:95:e0:30:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Sep 4 18:01:13 2026 GMT
Not After : Sep 5 18:01:13 2026 GMT
Subject: CN=0507f0a57f6bd6c2aad899929cde43351e091d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:cf:46:25:19:14:5b:37:8c:ea:ea:85:f0:
8c:2b:45:64:82:32:61:78:f3:9b:b4:e8:49:92:a1:
72:29:9f:8d:d7:c3:d6:3f:ca:15:69:79:b7:72:11:
f8:58:42:d3:03:18:dc:12:cc:f7:1e:1e:a8:2c:92:
c2:9a:1b:ae:e2:a6:6e:ff:b8:b2:16:05:8a:5e:42:
e0:4d:98:f5:f9:5d:66:93:3e:f7:5c:ec:7a:7f:c9:
c7:a9:39:09:5a:04:39:ec:3a:40:25:44:ab:01:18:
61:17:9f:9c:c2:d1:49:ad:65:59:e0:82:9c:5f:d4:
66:0f:65:87:e6:b1:ba:28:ae:67:5b:8c:77:20:b9:
cd:da:3e:8c:23:cb:59:5e:e2:d2:4b:5c:dc:5c:9e:
00:81:dc:4a:81:1a:f2:c9:d3:b9:22:e4:88:66:a3:
cc:83:97:e7:53:dc:73:c2:c4:b7:be:65:19:5b:29:
98:b0:d5:54:15:ee:c0:66:50:ae:67:fd:39:14:07:
61:a3:0f:9d:dc:51:1f:61:69:51:55:d6:69:99:cb:
df:66:8e:09:6c:bb:68:52:af:fd:72:69:18:ac:2e:
24:4a:d5:40:f2:cd:a4:1c:63:f9:21:63:6c:3c:4d:
18:a8:9e:eb:7a:5c:01:18:87:4f:ff:4a:17:3b:81:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:07:F0:A5:7F:6B:D6:C2:AA:D8:99:92:9C:DE:43:35:1E:09:1D:8F
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:15:32:c0:fd:5b:99:f1:2c:ed:b9:2c:f3:36:63:27:bb:
ee:67:14:6b:4b:b8:7a:cb:fd:74:f4:60:ba:35:ca:ec:19:81:
cd:2c:e5:a0:02:13:da:d2:b2:98:8e:fa:61:8c:32:ab:3e:20:
12:e3:83:c0:b7:9a:8a:a4:0d:c2:2c:24:ba:fc:12:5c:63:e0:
f6:23:0a:fa:2b:48:f8:51:f1:1c:f1:a9:fc:80:1f:ba:6d:38:
70:5e:67:65:97:f3:da:aa:6c:76:10:f1:6e:6a:64:7e:53:d1:
c1:84:f7:96:91:9b:54:bc:60:a8:65:27:f7:65:7d:6b:d7:1e:
de:d1:08:86:e9:f3:f0:84:c4:82:a2:bf:86:1a:5e:e5:6a:9b:
e5:5d:6f:ba:4c:df:03:a3:d1:cb:66:a8:35:f2:23:5d:60:d3:
1b:00:49:72:aa:1e:fb:c0:00:86:2a:3f:fe:ca:da:ea:b0:e2:
60:fd:56:28:1a:f5:3f:2f:6a:a2:82:ea:99:41:b0:fa:45:c7:
74:66:05:e7:ff:43:3f:cf:69:07:b2:61:bd:ea:e2:e2:eb:02:
86:7d:81:29:4d:f1:52:2c:c1:05:37:ed:de:36:d5:5f:90:8c:
9d:13:7d:4b:37:75:f8:ba:bb:36:36:44:7f:16:af:03:75:a5:
24:d6:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:57 2026 by rpki-client