Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File: BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier: jzLKrJjVvYkwHZe4SR+fYZApupTSEHvc+9F/PBTDoXY=
Subject key identifier: 8A:40:A2:CA:F5:D2:7E:13:CC:E4:5E:1B:02:33:8A:18:1D:A8:58:99
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial: 01A1A0A4CEC4B1E0351C29425E64DF9B5960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number: 1ADF
Signing time: Tue 03 Nov 2026 09:01:57 +0000
Manifest this update: Tue 03 Nov 2026 09:01:57 +0000
Manifest next update: Wed 04 Nov 2026 09:01:57 +0000
Files and hashes: 1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: 2h6jlkTa2AsZwO63Iy6br8uJadjkrxPwM3ur6N9HrxM=)
2: Qh3-2TMMaClcKooNJ3fndADjiYo.roa (hash: OrsiroKPXNo2SdBOxZVVTepz1ZwF+w/R3aYOwgk/QnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 09:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:a4:ce:c4:b1:e0:35:1c:29:42:5e:64:df:9b:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Validity
Not Before: Nov 3 09:01:57 2026 GMT
Not After : Nov 4 09:01:57 2026 GMT
Subject: CN=8a40a2caf5d27e13cce45e1b02338a181da85899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:9b:e3:9d:d6:8f:9d:ce:6e:7f:2e:ae:fc:
9a:0d:89:67:cc:5a:f9:c2:b2:aa:c7:18:be:ad:18:
6a:4a:a3:9f:98:e2:05:63:93:8a:c7:d6:8c:7b:ed:
e6:20:96:38:de:4f:20:25:31:ba:09:0b:28:7a:8e:
9f:f7:e9:9b:b8:87:9f:7c:3c:95:5c:c9:d9:51:49:
1b:77:76:7a:97:5d:37:5a:25:01:71:ee:f0:e7:31:
05:58:22:bc:c8:b2:3e:0d:ae:d3:3e:57:13:95:c0:
cd:16:86:81:ba:92:15:03:42:af:43:de:d5:c9:63:
bc:0c:6d:42:49:e5:75:d1:73:9b:24:bb:7b:72:89:
69:df:84:d3:97:e5:c4:94:94:ce:c1:f3:52:5f:f6:
1f:ac:e9:cb:99:83:da:71:41:4e:d2:fd:1a:96:fb:
f5:6c:53:73:68:cf:74:93:57:b3:6c:4e:c3:7b:f0:
c4:59:f0:49:06:48:3e:29:ad:13:b2:1f:c9:92:47:
60:82:51:65:50:e9:25:dd:cc:1f:51:85:3f:fb:93:
be:83:28:5f:96:a6:9c:72:88:01:6e:cf:60:70:3c:
01:ea:fd:24:f7:b2:b9:39:2a:3e:c4:ba:72:55:80:
fc:b5:00:6b:7d:6f:18:d9:93:16:60:29:f7:29:34:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:40:A2:CA:F5:D2:7E:13:CC:E4:5E:1B:02:33:8A:18:1D:A8:58:99
X509v3 Authority Key Identifier:
keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:87:d9:a6:2c:fa:2c:19:58:20:22:d9:0f:da:d3:08:2f:93:
ca:29:a5:21:4f:fe:ea:e5:a7:41:25:fc:33:11:2a:29:3f:ac:
43:ca:0b:a4:e5:85:3a:a3:b1:cd:38:22:38:ce:1a:aa:4c:64:
ac:1e:d6:c5:b7:77:3e:94:34:25:60:d9:c4:e6:74:37:90:76:
32:e7:b8:b1:96:fb:03:9d:b0:9d:b8:f3:63:69:d2:7e:89:83:
0c:a8:b2:60:32:d8:c8:bb:2b:9a:c8:a5:45:f9:ca:79:e9:87:
65:ab:5c:0c:fd:ee:b3:bb:05:39:87:18:ad:60:14:ff:96:a1:
0a:27:3a:75:88:e4:2a:79:74:45:35:a7:16:d0:35:35:7e:d6:
e8:4c:a3:7d:ac:05:be:a5:98:e4:f2:b2:d3:61:af:ba:8a:9e:
b8:25:34:7c:d5:15:dc:78:b4:25:e0:07:03:28:1d:7a:30:73:
5c:6c:c0:f9:40:2f:3c:a3:d8:e9:d1:70:a2:31:bb:63:e7:14:
f8:49:36:29:7a:cd:9f:a7:f0:5c:67:5b:29:20:7c:26:53:37:
70:0c:a4:06:7f:c0:45:77:c7:64:55:01:14:58:98:2b:e7:90:
2c:e9:d6:31:52:e1:a3:02:81:24:cb:97:e6:1f:ef:c6:46:c1:
ac:a1:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 16:21:29 2026 by rpki-client