Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: telvlsqSh0ivE9ycc8Mn/rIL6CFkxhoKhfT33Q1HZrY=
Subject key identifier: 4B:1D:59:B4:A5:2D:32:74:0A:67:BD:01:3E:15:80:14:83:B2:3D:12
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 019F9248123143008B221FD0EFB31556CE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 04:00:24 +0000
Manifest this update: Fri 24 Jul 2026 04:00:24 +0000
Manifest next update: Sat 25 Jul 2026 04:00:24 +0000
Files and hashes: 1: B3vEmndp_x6YAMvLtgQ70Ik6U0I.roa (hash: bqi4W7Nv7XoPhrNwH2N+CzXFN/qDDhLjqU9t3bRJqlI=)
2: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: wcLKcL60kHM2nr/ux0qZz0IB+WGoIXxRZu/SZ8ydEGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:12:31:43:00:8b:22:1f:d0:ef:b3:15:56:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Jul 24 04:00:24 2026 GMT
Not After : Jul 25 04:00:24 2026 GMT
Subject: CN=4b1d59b4a52d32740a67bd013e15801483b23d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:8a:57:e9:c9:56:4b:67:0c:1c:15:02:6e:
81:db:0f:1e:f3:50:18:30:32:65:6c:a7:51:17:84:
42:08:dc:3c:c9:03:e4:bd:c5:3d:ae:a5:9b:1a:c5:
59:75:a3:c9:af:69:e1:34:3f:f0:04:4c:1f:e4:29:
f7:3e:53:b3:37:49:04:40:12:05:85:54:8b:a6:87:
91:7b:32:aa:47:e2:c5:90:ca:b1:ae:b3:eb:37:1f:
f7:10:4b:c9:2d:ac:1b:bd:06:96:ef:37:2f:56:bd:
4b:a5:b5:54:ae:ff:78:9c:1d:ac:f8:c3:fa:b9:8d:
34:1d:d0:2e:68:e6:e9:fd:48:1b:39:d8:46:b5:a4:
ab:f4:79:36:0e:87:d4:00:23:e8:41:d5:60:5e:de:
43:48:0b:d6:d0:a2:d5:87:32:15:26:19:eb:b3:02:
0e:5a:8a:6e:9c:34:14:41:a7:00:ed:67:c7:b7:2a:
43:1a:55:42:2e:a4:a9:74:73:41:a9:13:d0:7e:be:
ba:f7:2f:12:c6:61:ad:bf:dd:e4:cd:ee:fe:87:f8:
b1:a6:68:4d:56:c3:c3:75:ab:28:14:d2:70:58:36:
d0:90:42:bc:52:40:0c:88:ad:e0:be:2f:32:d0:cc:
09:8b:6b:65:b9:79:a4:d8:c1:43:59:51:95:25:dd:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1D:59:B4:A5:2D:32:74:0A:67:BD:01:3E:15:80:14:83:B2:3D:12
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7d:17:f2:35:e3:c2:a4:92:38:fd:cb:3a:0a:c1:1c:e0:35:
ce:c7:cf:0a:cd:a4:b1:19:7a:4f:dd:4b:d0:3f:33:8c:3c:d4:
d5:61:9f:d7:3c:ab:b1:a3:7e:15:29:2e:9d:65:a6:c3:f3:cb:
fa:f5:8b:0a:4c:31:48:3f:0d:38:57:34:96:82:eb:7c:0e:b8:
94:d2:f5:9a:bd:2d:40:51:86:9e:10:f3:ab:6c:9b:6b:6f:9a:
77:89:4e:b5:d5:8d:31:b7:fe:04:43:01:45:a0:0d:2d:fc:49:
66:70:d5:b0:4b:30:06:fa:aa:48:16:ff:d4:a2:1d:00:f4:fe:
c4:82:53:b9:a0:f4:4a:00:41:db:f3:f4:98:d0:82:81:02:e9:
1d:16:27:a7:04:c0:b2:af:ab:7e:8e:07:74:28:14:0a:97:d6:
4f:d3:15:41:ba:ab:70:cd:d6:60:7e:6b:66:17:d2:27:9e:1b:
3a:d0:10:31:2b:39:f7:89:ec:ea:e1:aa:a7:56:1e:1a:2e:c8:
11:fa:97:84:c3:ac:4a:94:42:8b:87:bc:6c:95:28:c7:7b:c6:
6a:c3:7c:b8:ad:9e:c3:25:ab:cc:f5:8d:12:ef:b0:9e:07:f9:
a4:5f:b7:f8:b8:6d:70:63:dd:cd:a0:fb:e8:9a:d4:68:2f:60:
d8:58:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:41 2026 by rpki-client