Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: UFtpFi90hiAOK10eKNKYR072LXsPLb31xdJh2p0kysI=
Subject key identifier: FD:23:C5:26:E4:A9:23:EC:43:03:2C:D9:5A:86:80:34:EE:9F:EC:1E
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 019E1D905C48C4B4F9F7AEDAC14A41FEE7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 19:01:00 +0000
Manifest this update: Tue 12 May 2026 19:01:00 +0000
Manifest next update: Wed 13 May 2026 19:01:00 +0000
Files and hashes: 1: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (hash: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI=)
2: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: 9An52SRyg4bwkbUVonaOPfB8y9HG3nwd6Tsasozs9nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:5c:48:c4:b4:f9:f7:ae:da:c1:4a:41:fe:e7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: May 12 19:01:00 2026 GMT
Not After : May 13 19:01:00 2026 GMT
Subject: CN=fd23c526e4a923ec43032cd95a868034ee9fec1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:05:6d:75:c8:01:a4:81:a4:20:ce:3d:27:
ea:bb:f6:0f:fc:04:bd:df:1c:74:d9:18:a1:68:b2:
85:e9:84:0e:f8:58:ef:08:eb:e5:64:dc:ad:44:7e:
59:9b:92:65:9e:a0:0e:9f:84:62:3f:eb:25:06:da:
cd:20:f0:f4:3c:f4:25:d3:69:24:ee:75:b5:77:4b:
ed:3f:fd:86:0d:93:8b:d7:44:aa:71:e0:f9:7c:56:
af:7b:26:e9:44:b3:17:0e:a1:f7:a3:63:bc:0c:d4:
98:4b:a0:da:b5:7f:14:e6:4f:5e:04:3e:78:00:db:
08:d9:44:45:b0:ee:6a:12:e0:f4:0c:b5:02:ca:74:
b9:ab:82:e5:7f:a4:42:28:ee:17:a7:b0:6d:3b:fa:
2e:cc:3e:fc:c3:e1:0c:7c:cd:0a:78:06:bb:30:1b:
f2:c7:1d:78:a9:47:c3:b5:68:f4:3b:74:aa:f7:60:
7c:63:a8:ff:45:92:c9:26:b9:3b:76:aa:53:16:de:
35:88:24:8e:10:c1:b7:9a:68:bd:86:77:ef:ba:f3:
f9:b0:8e:51:d0:31:da:b0:67:80:8b:0a:8b:7f:0d:
c0:af:c1:4b:8f:7a:9d:b1:a3:4f:78:40:6a:20:42:
73:17:ce:9b:45:83:2c:22:06:6b:24:fb:0a:aa:ad:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:23:C5:26:E4:A9:23:EC:43:03:2C:D9:5A:86:80:34:EE:9F:EC:1E
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cd:e6:63:08:cf:9c:15:19:d4:cd:91:7f:19:63:9a:72:32:
8a:68:90:d9:65:7a:31:11:66:ec:34:11:21:40:51:b7:d0:f3:
41:3d:e9:43:ff:42:84:fc:34:f5:8a:c8:b4:4d:1e:ea:e1:0b:
3c:1a:36:31:d6:e2:98:42:65:17:29:1b:48:c0:6f:17:1c:0c:
92:fb:2d:75:09:2b:9d:3f:03:19:fd:fa:02:df:f3:77:f6:06:
c6:1f:ae:85:49:62:b4:b3:c3:00:b5:57:71:ec:fd:52:d3:a7:
c2:99:45:e9:78:49:d3:69:83:cf:a8:81:8e:05:a1:88:d4:c7:
7d:71:d7:41:bf:d3:29:31:d7:8e:61:4e:4c:f4:d9:e1:c7:94:
5e:39:4b:db:43:19:3d:92:ca:72:c3:0a:af:ff:57:50:95:c0:
c7:c5:38:32:d5:d0:1d:92:d9:35:4f:ea:5c:3b:18:d8:af:28:
aa:76:1b:6b:0d:69:59:6d:04:c7:5d:54:09:b0:cd:b4:8e:7e:
19:70:61:27:84:05:36:b6:a8:31:53:c8:04:ab:d4:67:b4:94:
61:08:94:44:03:42:89:f3:3b:90:ab:a6:1f:c5:84:70:7d:27:
38:7e:50:9c:2b:66:ca:b9:13:1b:43:c6:8d:db:31:38:51:b7:
e1:05:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:44 2026 by rpki-client