Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
File: BZqsWXzkoNE7edIrO_GKSJnddk8.mft (raw, json)
Hash identifier: QG7eThLYQVTnHMPt90w7rnB4HrLnhWyt1IFFRZ77HHY=
Subject key identifier: 3F:9A:5D:75:2B:6F:6B:F4:D3:40:DC:5A:B5:28:2E:9E:A8:70:AD:DB
Authority key identifier: 05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
Certificate issuer: /CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Certificate serial: 019F916D35B5DAA127EED12C5E9C33A99C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
Manifest number: 0E54
Signing time: Fri 24 Jul 2026 00:01:21 +0000
Manifest this update: Fri 24 Jul 2026 00:01:21 +0000
Manifest next update: Sat 25 Jul 2026 00:01:21 +0000
Files and hashes: 1: BZqsWXzkoNE7edIrO_GKSJnddk8.crl (hash: 3bu1krOrTTmqBwpVHtfD4rYL4FHcuzoCu/R75EBDTkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:35:b5:da:a1:27:ee:d1:2c:5e:9c:33:a9:9c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Validity
Not Before: Jul 24 00:01:21 2026 GMT
Not After : Jul 25 00:01:21 2026 GMT
Subject: CN=3f9a5d752b6f6bf4d340dc5ab5282e9ea870addb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:87:ac:2e:d9:1d:50:c4:6b:6b:d5:75:b2:
ca:10:26:e4:b9:26:d8:34:c0:ca:83:ac:fe:88:26:
00:de:7f:f7:37:3a:aa:71:cb:3c:66:d1:4d:ea:8b:
00:e6:2f:d0:57:df:76:d8:da:de:62:24:31:f3:e2:
9d:87:dc:2c:c3:d9:fb:bd:18:35:92:03:30:82:13:
32:21:42:c9:03:d7:d7:8b:5d:3c:a1:7a:e6:77:d6:
48:f2:72:ad:b2:f6:8f:7d:cd:ad:ef:24:6c:65:a7:
61:cc:b3:93:7f:5c:21:16:a3:a5:0a:8b:fb:d2:cd:
31:5b:4e:1c:b1:aa:9b:55:76:3b:16:60:b6:5c:23:
6e:d3:8d:be:2f:2e:c3:aa:cd:dc:50:d7:07:e6:8e:
59:bd:fb:b7:d0:f1:8c:e8:84:58:47:af:dd:73:08:
49:58:ad:f4:53:0a:6a:39:cf:45:cb:eb:c8:98:9e:
b8:05:09:de:5f:bc:db:9c:45:40:66:da:d8:0b:98:
83:22:53:f0:bf:de:2c:27:4d:c6:cc:34:44:bd:64:
9e:a7:3b:85:ee:d5:c6:d6:a3:78:fe:d3:f2:9a:33:
a8:40:96:94:bc:76:97:e7:1f:f0:48:cc:7c:18:d6:
6d:eb:4e:07:e1:73:37:10:2d:69:4c:e0:26:e9:be:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9A:5D:75:2B:6F:6B:F4:D3:40:DC:5A:B5:28:2E:9E:A8:70:AD:DB
X509v3 Authority Key Identifier:
keyid:05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d4:a8:5f:36:ea:7a:41:32:b0:db:90:6d:37:12:34:ae:e9:
55:7f:28:2b:91:32:af:a5:5c:9c:53:a6:01:c0:58:58:4b:2c:
28:b2:2b:b6:a4:c0:3a:13:3a:3e:62:65:ba:9a:1b:2b:b3:38:
05:12:f3:4e:67:5b:87:c7:b5:17:df:78:f2:30:03:f6:b3:6f:
4f:ba:9c:4a:79:77:cc:11:10:a5:14:a1:df:63:f7:07:ed:c7:
a1:f3:55:0d:f8:7d:dd:d5:ac:07:21:1d:b1:d8:3f:4e:3e:84:
5a:46:9c:d9:38:29:e2:91:d5:df:76:63:d2:f5:ad:3e:03:cf:
3b:3d:49:cb:22:8b:87:77:ff:82:e9:eb:1f:52:d6:b3:51:5e:
67:f3:14:18:15:09:cf:12:31:4c:00:52:98:9f:8a:7d:a5:3c:
f4:df:19:97:e4:27:3d:bb:12:73:6e:98:e9:9d:9b:96:00:52:
6b:63:48:0a:41:e6:f4:3a:22:c7:b1:c3:ec:ab:5a:9c:26:4b:
0b:65:c3:10:5e:69:05:1b:ba:41:2e:a8:43:b9:55:87:c1:09:
42:76:4e:a5:4f:0a:56:41:d4:e7:55:39:26:45:19:eb:bf:f7:
51:cc:f4:57:03:7e:d7:e9:8a:c4:c2:74:80:4a:02:31:78:a7:
78:3f:13:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:15 2026 by rpki-client