Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
File: bZxGACHwaOou2-X_UPueDJrrvXE.mft (raw, json)
Hash identifier: lVsUQ1Nb70bYaVk1ugGZjaQzNK6gEMfb6fKozvbui0Q=
Subject key identifier: B1:90:47:1B:96:81:1C:C7:80:3D:83:63:E3:D8:58:56:70:E8:69:9E
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 01A1705CD9FBF33F54BC0C27A73C7CC1D566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
Manifest number: 0138
Signing time: Sun 25 Oct 2026 00:01:35 +0000
Manifest this update: Sun 25 Oct 2026 00:01:35 +0000
Manifest next update: Mon 26 Oct 2026 00:01:35 +0000
Files and hashes: 1: 2mcmBph44T6F-kS8XWJD7lOyKpw.roa (hash: YgZT5uRBbUSFNWW/4uRQ1rHtYNnG1WTldBKIGXD9WOM=)
2: 8tLBF654pSFrtTZo6a2qR1LWWMM.roa (hash: Enj8RsjeWdg6DNXeEBjEHOQvivlKq9SbhBZo4JjBnWI=)
3: 9Wp0yEODLyFtAabFmIGNXyJJH0M.roa (hash: MDU9oyYCQf0/qP8XxFFcq2DKmq9IodMcE6wWVXgzdfk=)
4: HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa (hash: ifhkkPhpziHsauqMvFaIRDB08xUa/qaHainhKiKTunA=)
5: bZxGACHwaOou2-X_UPueDJrrvXE.crl (hash: rJjUrBYZrHQXjYYkkZvRYtZBW6vjo6uCWDCjQKpJGj4=)
6: kE-FnO_bKPVoHR9SA72KKPHWwKY.roa (hash: fR8CHLRHdM3OeZe9BDHG8eQXSpySKgVTJeF/UqX5ya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5c:d9:fb:f3:3f:54:bc:0c:27:a7:3c:7c:c1:d5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Oct 25 00:01:35 2026 GMT
Not After : Oct 26 00:01:35 2026 GMT
Subject: CN=b190471b96811cc7803d8363e3d8585670e8699e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:a8:2e:cc:31:4b:a0:74:58:7e:73:de:d8:
2f:f6:99:09:c8:8f:c5:86:b0:b6:8d:88:6c:94:b0:
73:8f:51:2d:36:fb:05:7f:42:e7:36:44:e7:70:72:
20:f7:a6:ae:a3:d3:42:af:77:d4:fc:08:72:69:38:
d5:f8:fc:18:48:28:3c:aa:d3:7b:12:43:b1:f1:e8:
da:5c:8d:4f:13:1e:af:61:c3:22:03:78:49:d4:68:
90:e3:05:f8:df:af:35:1f:83:4e:68:c1:5e:2d:0b:
7b:6d:44:16:1c:62:dd:46:ea:73:55:fa:39:2c:5e:
c1:85:af:36:d0:f5:a0:77:99:6c:02:61:c5:6d:ef:
71:fd:e9:ca:a2:a6:6c:8a:e1:8b:8e:42:5e:87:5d:
20:81:d3:1f:87:2d:5b:a0:52:04:38:5e:14:1e:17:
73:ee:16:0a:30:f3:84:00:5b:d1:dc:c9:c6:fb:07:
db:5d:74:c8:63:36:aa:d0:82:00:ba:93:46:b3:a8:
80:53:a7:d1:88:0b:0e:4e:26:63:30:70:84:c7:57:
8f:34:c5:0f:55:e5:2e:d9:00:d4:d3:35:32:db:73:
d9:bf:c2:8c:a1:90:90:68:5d:40:72:7b:c2:9e:af:
58:fb:81:83:2c:90:ba:7d:67:1c:54:d7:6d:30:d3:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:90:47:1B:96:81:1C:C7:80:3D:83:63:E3:D8:58:56:70:E8:69:9E
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:18:4e:32:9d:ec:1b:6b:8e:c4:69:bf:54:a7:37:d6:08:
02:d4:81:bf:7f:6c:31:b9:b3:08:55:dc:ed:ad:80:cb:aa:ef:
4c:d0:8c:46:49:26:a5:9f:a4:30:5d:94:e5:88:f8:28:b8:60:
ef:3d:6b:7f:aa:10:58:3c:dc:37:ee:54:e4:96:95:88:b7:4f:
41:a7:c2:7f:c1:87:ca:62:b5:d0:77:17:fe:9f:be:31:ef:be:
28:1c:2d:be:2e:8a:10:a8:65:cf:82:cf:a6:61:da:c4:ee:d7:
0c:a5:7b:f0:9a:e1:c0:d7:0f:85:f2:fc:82:ed:3d:5b:98:1f:
8a:57:a3:26:8e:d8:50:02:b4:ed:5d:4d:66:23:53:e5:44:3e:
95:6e:30:02:f2:e0:81:20:fd:67:7f:e2:25:f5:e4:89:f0:4a:
41:95:c0:e3:da:f2:f7:e9:69:f9:2f:09:01:e1:7a:2e:a7:74:
29:ad:be:31:4f:86:02:3a:0c:cb:ea:d4:d8:37:37:32:7e:43:
0c:b1:43:66:48:c7:e4:ab:72:b9:0a:95:45:95:2f:78:b8:75:
7b:96:e7:65:4a:ed:fd:fd:7f:d9:51:0c:65:78:05:66:4c:b8:
51:63:13:6b:2f:cc:5a:5e:91:0d:52:b7:34:16:44:db:5e:91:
c6:8b:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:11:19 2026 by rpki-client