Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
File: BZqsWXzkoNE7edIrO_GKSJnddk8.mft (raw, json)
Hash identifier: 384Q/mExaBRLfwvBBJC8JObtmdYrmbTSwMRE79UcXgE=
Subject key identifier: 2C:46:1E:5C:F1:BD:68:5D:71:C2:A9:E4:CA:77:ED:20:4F:42:E7:A8
Authority key identifier: 05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
Certificate issuer: /CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Certificate serial: 01A0D0126C086B93F6BDB5DCE552553868E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
Manifest number: 0EF9
Signing time: Wed 23 Sep 2026 21:01:03 +0000
Manifest this update: Wed 23 Sep 2026 21:01:03 +0000
Manifest next update: Thu 24 Sep 2026 21:01:03 +0000
Files and hashes: 1: BZqsWXzkoNE7edIrO_GKSJnddk8.crl (hash: m9GnYe0uezSdcyt8oDRnoaMvt8t8qLlz/PLFEY/wrx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:6c:08:6b:93:f6:bd:b5:dc:e5:52:55:38:68:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Validity
Not Before: Sep 23 21:01:03 2026 GMT
Not After : Sep 24 21:01:03 2026 GMT
Subject: CN=2c461e5cf1bd685d71c2a9e4ca77ed204f42e7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:c6:f2:ad:fc:e5:e9:40:7b:b6:3f:04:a3:
10:f2:32:28:5e:97:00:34:29:28:98:c8:c7:bb:17:
a3:ab:14:03:b1:8d:17:7e:77:ae:5f:fe:c8:26:80:
60:2b:4f:5c:78:a4:c8:ea:de:7c:95:c3:17:60:10:
36:0d:2a:3a:86:66:45:91:96:95:fe:72:fd:1e:40:
b3:74:3d:81:cb:c3:82:10:95:80:7a:0f:d8:cb:e1:
fc:0e:74:bb:57:9b:0f:b3:6f:ae:20:bd:4d:9d:63:
ad:f7:c4:9e:db:6e:89:88:6b:9c:55:26:3c:b6:a0:
82:11:8d:06:1b:3f:5f:7b:da:1f:75:08:ad:c9:cf:
9c:f6:52:16:19:e5:61:67:e6:fb:e7:b9:ee:e3:ea:
25:31:ac:2e:a5:2b:e6:46:3f:b4:ab:22:c2:39:90:
bc:c3:88:66:fa:d4:70:6c:38:a2:17:56:56:fc:0d:
2e:b5:cd:5a:f7:fa:a3:38:35:56:b8:c1:59:86:e8:
1a:1d:cd:52:1b:45:ba:4d:5a:0d:98:75:9a:8e:fd:
e1:ce:31:cf:e6:b1:99:b3:e4:2f:a2:e4:40:f0:df:
07:e8:ad:76:7d:2c:4f:3b:1f:86:7b:7e:59:fc:47:
17:00:06:bf:b7:64:e3:1f:92:e9:7a:7c:39:ae:7b:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:1E:5C:F1:BD:68:5D:71:C2:A9:E4:CA:77:ED:20:4F:42:E7:A8
X509v3 Authority Key Identifier:
keyid:05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c2:fe:16:8e:37:ed:74:af:65:81:b7:63:c6:c5:4d:6c:75:
88:1d:c8:6e:3c:02:35:1b:1f:f2:3f:3d:38:59:5c:4e:dc:af:
4a:3f:05:12:1d:eb:03:61:50:f2:b9:e2:d8:27:a3:ce:15:ea:
3a:87:2b:83:a9:89:8e:37:45:53:48:61:a1:9e:10:6d:07:cc:
9a:57:9f:42:b8:89:32:8c:a0:27:e4:74:8e:9b:5f:ea:57:b6:
f8:bf:2f:96:8c:45:da:c7:77:8f:21:74:33:24:13:13:f0:7c:
dc:16:4b:96:31:bc:2a:1a:ae:9e:bd:90:4f:a0:13:df:0e:39:
04:90:65:8a:9c:1f:de:91:38:18:6e:16:a1:99:3c:0a:08:52:
f4:f3:e0:7f:66:68:a9:2f:c7:fb:31:0f:7c:d9:92:a0:83:93:
05:09:1c:f3:e4:e5:38:1b:b8:08:ae:5f:8f:77:4c:a8:c8:e2:
1d:5b:d5:53:ad:eb:0d:56:1e:0b:97:e9:39:0c:6c:1a:9b:02:
f7:c3:ca:1a:34:33:0e:60:79:f7:1b:7d:e8:62:93:48:9d:f0:
6e:47:7e:97:36:9a:56:2a:83:37:b0:90:b6:3c:de:59:87:46:
34:af:76:84:28:ec:b4:bf:a9:71:e9:3c:8d:b2:92:fe:14:44:
a7:9e:92:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:01 2026 by rpki-client