Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: GcKkS9V/nReNymbqA8MTfv8Bmo1O7NpJDm1llwFjm4M=
Subject key identifier: 03:B9:97:53:6F:25:7D:6E:C5:3B:98:AC:FF:37:67:06:1B:76:B9:A7
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 01A0D2DEEE03709DF6013A341C85F8218E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 10:03:40 +0000
Manifest this update: Thu 24 Sep 2026 10:03:40 +0000
Manifest next update: Fri 25 Sep 2026 10:03:40 +0000
Files and hashes: 1: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (hash: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI=)
2: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: YJ1OxdVQPr+uwl1Z1q7nLNUZZU7jbzbFb4esn/yqdp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:ee:03:70:9d:f6:01:3a:34:1c:85:f8:21:8e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Sep 24 10:03:40 2026 GMT
Not After : Sep 25 10:03:40 2026 GMT
Subject: CN=03b997536f257d6ec53b98acff3767061b76b9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:c8:4a:9c:fe:83:70:38:ff:53:bd:86:e6:
20:7c:a6:20:cb:54:d2:0e:0c:cb:77:34:4b:8a:07:
1c:93:ee:b2:10:97:a5:5e:98:99:ee:c3:ce:46:20:
51:2d:44:a1:40:c9:7c:30:6a:73:41:b5:77:4f:3e:
29:d1:9b:a5:fe:85:c9:31:66:71:14:03:27:f5:b4:
41:20:e9:72:fd:1b:e1:81:70:06:3a:f6:29:09:48:
f1:0c:92:a8:32:5a:b1:e0:60:19:98:7a:d2:fd:7e:
78:df:d1:84:0f:13:0c:af:6b:ea:0f:5e:26:53:5c:
f2:e4:2d:6f:da:6c:1a:c3:5e:de:b3:e6:40:99:40:
bf:9e:10:64:10:45:59:88:50:d0:d9:a6:aa:dc:08:
84:cc:85:46:13:b1:cb:a2:20:fa:6d:50:4c:26:bc:
de:ea:d2:8f:ba:16:be:37:02:4c:7e:c3:0b:21:cb:
3c:7c:b7:cd:7e:29:16:69:c3:cb:8a:cf:24:ce:3a:
f4:8a:2f:14:8b:0c:2b:20:ac:53:70:9c:d4:50:9c:
07:f6:d0:bd:78:d0:77:59:13:85:3c:8a:a7:7f:6d:
a4:23:37:b8:27:80:eb:f3:3e:72:0d:bb:07:2e:c3:
e3:e6:34:4e:9a:9c:55:70:97:59:49:af:2e:43:74:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B9:97:53:6F:25:7D:6E:C5:3B:98:AC:FF:37:67:06:1B:76:B9:A7
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:50:bd:4d:41:a0:9a:cf:71:09:63:a4:83:96:7f:34:b5:0a:
67:ee:9f:ad:1e:b0:99:1d:77:5d:f9:d3:bc:72:57:77:71:6f:
c8:b8:47:5a:dd:ac:48:98:7c:9b:48:71:f4:85:38:0d:9d:9a:
36:0f:64:0a:99:d7:fb:1b:9e:2b:5c:9f:ae:cd:8f:d2:33:b2:
ff:c0:24:d3:c3:bf:0e:d3:48:d3:4b:e8:1f:f7:ac:b7:68:ef:
39:89:3f:1b:94:78:b9:bf:1a:ed:25:78:81:d3:62:f2:48:df:
45:0d:42:1c:10:21:95:69:45:42:e6:59:12:36:71:48:14:7d:
6d:da:a6:8b:d6:b6:64:ba:79:a1:9f:b6:1e:aa:9d:a0:61:60:
d6:23:b6:35:57:cc:a9:ae:9e:75:74:75:04:ff:c9:a1:74:40:
98:19:b6:ae:4f:b1:51:a4:c1:9a:cc:1d:94:6c:e0:c8:b9:bf:
b2:5b:c9:9f:79:44:d6:0a:c0:74:45:b1:ac:3d:f1:2e:6c:d3:
79:8c:fb:ab:fa:b8:92:b9:75:d6:00:20:3e:c4:f6:1d:7c:57:
34:b8:84:cc:3c:98:ed:f5:c4:23:f2:46:3b:ca:85:9c:85:0a:
52:c3:9c:db:b2:c1:0e:eb:6d:97:2a:e5:7a:b7:aa:39:82:59:
96:f8:eb:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3u4DcJ32ATo0HIX4IY4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MzVkYWE4Y2ZlMjVkZDEyYTJjMjZlMGZmY2NlOTc2MzY3
NDhlYmQwHhcNMjYwOTI0MTAwMzQwWhcNMjYwOTI1MTAwMzQwWjAzMTEwLwYDVQQD
EygwM2I5OTc1MzZmMjU3ZDZlYzUzYjk4YWNmZjM3NjcwNjFiNzZiOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3fISpz+g3A4/1O9huYgfKYgy1TS
DgzLdzRLigcck+6yEJelXpiZ7sPORiBRLUShQMl8MGpzQbV3Tz4p0Zul/oXJMWZx
FAMn9bRBIOly/RvhgXAGOvYpCUjxDJKoMlqx4GAZmHrS/X5439GEDxMMr2vqD14m
U1zy5C1v2mwaw17es+ZAmUC/nhBkEEVZiFDQ2aaq3AiEzIVGE7HLoiD6bVBMJrze
6tKPuha+NwJMfsMLIcs8fLfNfikWacPLis8kzjr0ii8UiwwrIKxTcJzUUJwH9tC9
eNB3WROFPIqnf22kIze4J4Dr8z5yDbsHLsPj5jROmpxVcJdZSa8uQ3TqfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAO5l1NvJX1uxTuYrP83ZwYbdrmnMB8GA1UdIwQY
MBaAFAc12qjP4l3RKiwm4P/M6XY2dI69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAt
Njc5Y2YwMjEwZDQ5LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8yYTRiZjUtNDBjZi00NDdhLTk3ZTAtNjc5Y2YwMjEwZDQ5
LzEvQnpYYXFNX2lYZEVxTENiZ184enBkalowanIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1C9TUGg
ms9xCWOkg5Z/NLUKZ+6frR6wmR13XfnTvHJXd3FvyLhHWt2sSJh8m0hx9IU4DZ2a
Ng9kCpnX+xueK1yfrs2P0jOy/8Ak08O/DtNI00voH/est2jvOYk/G5R4ub8a7SV4
gdNi8kjfRQ1CHBAhlWlFQuZZEjZxSBR9bdqmi9a2ZLp5oZ+2HqqdoGFg1iO2NVfM
qa6edXR1BP/JoXRAmBm2rk+xUaTBmswdlGzgyLm/slvJn3lE1grAdEWxrD3xLmzT
eYz7q/q4krl11gAgPsT2HXxXNLiEzDyY7fXEI/JGO8qFnIUKUsOc27LBDuttlyrl
ereqOYJZlvjrqw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:30:26 2026 by rpki-client