Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File: BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier: HuIQK6nYTqkBJh3uESo1d4IuZtOvC9ya+EtSaYxLlV8=
Subject key identifier: B7:F7:F8:5F:5D:88:83:05:3E:12:77:4E:45:EA:AD:B3:58:2F:ED:BC
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial: 019DCF75A31A0A8576CE036742A38581775E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number: 18E5
Signing time: Mon 27 Apr 2026 15:01:26 +0000
Manifest this update: Mon 27 Apr 2026 15:01:26 +0000
Manifest next update: Tue 28 Apr 2026 15:01:26 +0000
Files and hashes: 1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: Gq0XsPvTFbYjlFIzxZdNYbVg+9xePyt6i28iIo93Bg0=)
2: Qh3-2TMMaClcKooNJ3fndADjiYo.roa (hash: OrsiroKPXNo2SdBOxZVVTepz1ZwF+w/R3aYOwgk/QnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:a3:1a:0a:85:76:ce:03:67:42:a3:85:81:77:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Validity
Not Before: Apr 27 15:01:26 2026 GMT
Not After : Apr 28 15:01:26 2026 GMT
Subject: CN=b7f7f85f5d8883053e12774e45eaadb3582fedbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:c5:35:78:c3:35:90:56:ce:d1:2f:17:db:
74:34:35:be:d1:38:ed:68:0e:ad:bc:bf:c6:79:9e:
28:89:e7:48:74:5b:0a:e2:e3:4e:89:2c:bd:39:51:
d5:41:08:02:c5:a2:83:04:2e:5f:34:a1:d5:07:fb:
0d:88:18:61:9b:80:66:55:d9:3d:7c:d8:85:1e:1e:
d4:4f:03:1c:e0:c1:9e:45:d6:f4:c3:13:2f:dc:45:
43:2d:6c:4a:8f:85:f3:60:89:1e:6e:b2:04:f6:ec:
0c:0c:d1:fa:35:a6:a1:31:49:65:a7:4d:a8:72:75:
36:42:ee:4f:3d:b8:81:4d:eb:e9:7d:9d:a3:03:ff:
89:d4:b9:54:f5:f5:50:56:c3:d2:78:d0:43:38:ae:
ce:4a:ef:0b:45:d9:27:7c:99:5a:11:79:f4:94:c0:
02:ba:7b:11:5e:82:e6:e3:d0:4a:eb:02:c4:da:01:
0e:3c:99:eb:70:e1:2e:1f:01:7d:a4:40:d4:79:85:
7d:f3:28:ff:60:fe:39:6e:a3:b5:91:1e:f7:fe:f1:
c6:f5:08:3f:df:5d:c9:c8:53:23:05:27:24:de:03:
2c:02:48:86:e6:af:4c:b1:fc:bd:0d:40:2c:ce:98:
e5:7f:52:87:af:25:68:16:73:07:00:b2:61:91:b5:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F7:F8:5F:5D:88:83:05:3E:12:77:4E:45:EA:AD:B3:58:2F:ED:BC
X509v3 Authority Key Identifier:
keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7a:0e:9c:3b:89:ae:f3:ef:5c:1e:21:49:cf:3f:f0:05:7b:
e9:48:33:9e:ce:ab:64:84:5c:b4:6b:cd:34:7e:8c:ed:e5:b8:
45:d2:60:45:f7:ba:69:9e:66:ff:55:8c:f4:3b:12:49:a0:9e:
ee:67:81:8a:e9:2b:5f:da:2e:d3:11:f3:ac:cc:c5:db:6d:d5:
a9:30:83:4f:81:62:54:0a:9c:24:bf:94:bb:3e:81:b5:4c:81:
b3:1b:43:10:81:d3:cb:6a:23:40:75:f6:3f:e8:87:d3:a1:36:
95:4d:4c:75:10:d5:be:21:c5:ca:9e:19:6f:ee:56:5b:af:4b:
29:1c:44:58:b9:ba:fe:2a:09:0f:71:c3:4d:10:3a:88:8d:1c:
92:6a:bf:a9:fb:29:47:d9:c8:6f:e4:59:14:8b:5c:b2:83:1f:
e2:fb:28:3d:f9:bf:a0:ff:6c:e8:14:3f:0b:96:00:ed:bd:71:
a3:5d:43:17:55:00:e5:d9:95:ca:0e:b2:f8:f8:5d:7a:42:e9:
4b:ed:3b:30:44:03:90:cc:30:3d:8e:34:55:53:85:1e:e2:75:
a6:6c:73:4b:fc:f8:13:8c:8f:0a:f3:78:e0:3d:40:b4:dc:13:
b5:3e:d7:97:9a:cb:b5:1d:68:db:7e:9f:9e:19:37:b5:71:f3:
eb:db:bd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:47 2026 by rpki-client