Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
File: BZ9RaALCYTCaYQSHcubq_VhnqZA.mft (raw, json)
Hash identifier: XSAYMZAb3QUUM5dVrF0ythniDOqytPwuwitZZ4aOvnw=
Subject key identifier: F7:7B:DD:AF:AF:B4:6F:EE:9D:20:42:B1:0E:DB:5D:7F:F6:D8:5C:6D
Authority key identifier: 05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
Certificate issuer: /CN=059f516802c261309a61048772e6eafd5867a990
Certificate serial: 01A13F398D90B2AA177122000256D904A5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
Manifest number: 1962
Signing time: Thu 15 Oct 2026 11:01:38 +0000
Manifest this update: Thu 15 Oct 2026 11:01:38 +0000
Manifest next update: Fri 16 Oct 2026 11:01:38 +0000
Files and hashes: 1: 46krBMuMgQRTOnYjjiwz0jZnP9g.roa (hash: i+WuevI3Tnw5jBTEqmKxgeqDkLLDwvFZgvTXSU8JdlE=)
2: BZ9RaALCYTCaYQSHcubq_VhnqZA.crl (hash: jvR4XcCiX5Mc7R4x2YU4EMFt7ZGs8jj8V01IT/u5tPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:8d:90:b2:aa:17:71:22:00:02:56:d9:04:a5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059f516802c261309a61048772e6eafd5867a990
Validity
Not Before: Oct 15 11:01:38 2026 GMT
Not After : Oct 16 11:01:38 2026 GMT
Subject: CN=f77bddafafb46fee9d2042b10edb5d7ff6d85c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:e8:34:2a:08:1e:cd:64:74:1c:74:c3:44:
5f:86:02:5d:d2:92:84:e2:f3:07:43:29:99:de:82:
68:81:28:18:d1:cd:74:9a:9b:61:b4:df:8b:3c:58:
0b:34:f2:53:e3:97:aa:b7:15:45:d2:91:75:e3:76:
9b:de:3b:37:e1:90:86:19:25:a8:a8:05:4e:c2:29:
3f:67:73:dd:79:a1:6c:ea:90:d8:76:e2:85:6b:50:
34:8c:5e:8b:cc:ce:8e:35:63:fd:62:f8:e9:4a:c7:
65:6e:6b:f6:4d:ad:32:a5:82:77:97:18:8a:d7:42:
02:ac:c2:f2:c6:40:5a:f2:9d:32:24:b0:b4:ae:20:
0e:b6:fd:07:89:bc:77:d1:7b:11:3c:78:45:d1:81:
c2:c9:3f:09:13:bd:39:96:6d:5e:20:c9:97:9a:db:
39:47:58:dd:b6:28:0b:6f:40:5a:e7:7c:bb:ed:a0:
d2:37:68:ba:56:15:0b:c7:72:5b:8f:d6:45:a8:16:
25:27:1b:63:c5:90:85:43:59:b4:5d:f6:37:87:95:
0d:e9:4e:e0:67:da:22:d4:67:e2:7d:36:63:7f:ec:
d2:b0:f6:59:9b:01:80:c4:28:99:89:a9:af:f8:3e:
c8:4f:16:11:57:ea:1c:0e:2f:a5:a9:d8:94:c9:bd:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7B:DD:AF:AF:B4:6F:EE:9D:20:42:B1:0E:DB:5D:7F:F6:D8:5C:6D
X509v3 Authority Key Identifier:
keyid:05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:59:80:92:0e:40:28:f4:d8:7d:68:45:03:74:bf:ee:fd:8f:
9f:05:3e:3c:69:82:fd:38:a4:8a:e9:6e:62:c1:14:bf:85:11:
29:c9:e5:9e:73:0f:db:3f:42:4c:c1:f9:96:97:f6:34:24:7a:
5a:f8:34:b6:cc:c5:43:d2:e8:8e:60:5e:9e:1b:32:e8:d8:d9:
0a:b3:b8:69:80:82:cd:f1:d8:68:f1:f6:0d:3c:7b:2e:7f:32:
68:b7:40:36:ee:db:90:9a:45:96:55:d8:cb:88:07:98:49:d9:
ac:2a:00:d9:e7:b0:04:52:1b:48:ec:90:8d:4e:a7:92:84:8d:
e5:97:1a:83:66:83:b9:bc:bb:0f:4d:2f:af:e0:90:1c:c1:65:
d6:c0:91:47:84:c0:25:09:61:37:d0:9b:40:19:f6:52:4a:fe:
d8:c8:df:6e:26:99:c8:b5:a3:b8:3c:2f:1c:c4:eb:29:a6:3a:
60:d0:32:b4:d5:25:39:12:88:58:6d:11:93:c1:6b:c6:75:88:
5c:b0:3f:9b:c3:81:06:83:a1:60:6b:68:6c:7f:0e:2c:e8:88:
17:ec:d9:99:b3:fd:ec:6f:80:18:f7:58:34:41:c4:f9:c0:16:
1a:77:ed:2a:6e:08:52:a4:4b:68:54:4c:27:56:1c:4c:f8:2b:
5c:c7:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:58:03 2026 by rpki-client