Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: W1NIOB/SKErMKFYpoPExobAT+zNU+IJf+rwWPD0cg38=
Subject key identifier: 7E:7C:ED:DA:03:30:9D:54:B8:42:B5:74:14:11:9D:EC:54:5A:A2:4C
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 019D33E39EF09F149594162FD34BECA034C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 188B
Signing time: Sat 28 Mar 2026 10:00:48 +0000
Manifest this update: Sat 28 Mar 2026 10:00:48 +0000
Manifest next update: Sun 29 Mar 2026 10:00:48 +0000
Files and hashes: 1: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (hash: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI=)
2: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: 3J6p6itQ8y2tk8uMkp5xYdGmx2L8A/2Po5C5GsI9kag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:9e:f0:9f:14:95:94:16:2f:d3:4b:ec:a0:34:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Mar 28 10:00:48 2026 GMT
Not After : Mar 29 10:00:48 2026 GMT
Subject: CN=7e7cedda03309d54b842b57414119dec545aa24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:01:af:54:5f:1d:32:2d:08:a3:67:9c:46:
4b:90:a7:f2:d2:a2:06:c5:f7:fb:ab:bf:2a:d9:f2:
05:c7:44:be:cd:25:4b:f8:f6:45:c3:ef:3d:f6:71:
37:16:ed:a4:0a:3c:27:53:48:14:73:a2:13:6b:0e:
e1:1e:4b:25:f9:be:a1:a0:52:2f:e1:86:10:d3:8a:
e8:eb:0c:6d:6e:a2:b1:2d:95:71:64:bf:da:ba:9a:
40:63:6c:0a:fc:e0:0e:9f:0d:09:27:34:5a:d8:5c:
5b:76:7a:31:36:09:47:de:8c:f3:cf:5b:c4:0a:65:
d9:6b:8c:e6:be:36:a0:1b:ed:9e:ce:12:53:36:2b:
3a:73:9b:3e:8d:ce:53:1f:82:13:00:1b:07:c7:3b:
69:47:4f:29:75:cc:10:36:f2:42:99:35:52:7c:0f:
21:df:1e:5f:f3:27:71:e6:86:d5:04:44:3e:89:8c:
66:da:7e:d5:29:81:1b:66:ec:b9:8c:ee:3d:a0:a2:
c6:af:81:e2:43:fb:a3:8f:cc:15:62:56:48:12:c1:
a9:55:19:60:fb:7a:99:bd:06:33:37:0f:24:c1:51:
71:25:c5:ab:4f:20:94:91:86:87:34:45:71:fe:d7:
ef:08:b2:6d:bc:c8:55:53:c4:e3:38:78:a1:0c:bf:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7C:ED:DA:03:30:9D:54:B8:42:B5:74:14:11:9D:EC:54:5A:A2:4C
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0a:29:ef:5b:26:03:10:bf:36:6e:39:17:5c:69:02:ee:c4:
4e:2d:2b:02:1a:aa:0a:ff:75:be:a0:4a:2b:ba:12:bb:e3:1d:
3a:5a:b3:40:3b:36:f6:a5:da:9f:ae:11:63:fe:81:37:d2:a3:
ed:ad:4b:bd:aa:b1:a8:e2:33:25:dd:ea:4e:66:2f:86:af:9a:
62:58:53:18:ff:5c:b7:39:f9:46:98:41:94:61:a8:b6:75:4c:
c5:3c:19:af:dc:d6:4a:7a:2c:0e:1f:cb:6b:1e:bf:26:d9:26:
99:46:49:8b:32:3b:94:7c:c9:70:a1:0b:8b:85:a4:df:92:f0:
e4:9e:29:69:2f:30:24:d2:e6:84:ec:3d:06:5e:97:04:b4:be:
fc:be:b1:6e:42:5b:97:53:1a:8a:a7:63:45:c2:6c:81:85:3d:
00:8e:fd:88:71:77:fd:d1:19:c2:84:45:a1:d4:76:7f:c1:8e:
9c:81:94:61:25:5d:c4:dc:ef:59:4b:de:ac:82:96:6d:d2:66:
f3:11:c9:4e:ca:e3:c3:2e:98:b8:09:0d:0e:a8:7e:44:d3:45:
81:aa:8e:ec:fa:a7:55:3c:10:cb:63:a7:7c:11:b3:35:fb:1a:
c5:d3:e7:19:31:ae:99:35:27:a3:29:88:df:1f:e9:2c:4b:8a:
ea:6d:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:03:00 2026 by rpki-client