Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
File: bZxGACHwaOou2-X_UPueDJrrvXE.mft (raw, json)
Hash identifier: ad8NRRigPbtHmY19D1SM6Yb8QeNqrzUWN00xuoVsDLY=
Subject key identifier: 0A:15:FB:5B:05:65:91:A9:FF:90:AD:A3:09:99:17:74:08:8D:51:DC
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 01A0E362A3C66A26206F2AED4EB41B60F009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:01:27 +0000
Manifest this update: Sun 27 Sep 2026 15:01:27 +0000
Manifest next update: Mon 28 Sep 2026 15:01:27 +0000
Files and hashes: 1: 2mcmBph44T6F-kS8XWJD7lOyKpw.roa (hash: YgZT5uRBbUSFNWW/4uRQ1rHtYNnG1WTldBKIGXD9WOM=)
2: 8tLBF654pSFrtTZo6a2qR1LWWMM.roa (hash: Enj8RsjeWdg6DNXeEBjEHOQvivlKq9SbhBZo4JjBnWI=)
3: 9Wp0yEODLyFtAabFmIGNXyJJH0M.roa (hash: MDU9oyYCQf0/qP8XxFFcq2DKmq9IodMcE6wWVXgzdfk=)
4: HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa (hash: ifhkkPhpziHsauqMvFaIRDB08xUa/qaHainhKiKTunA=)
5: bZxGACHwaOou2-X_UPueDJrrvXE.crl (hash: HwNNGzSNjaPWftnKJHudlZXwfdJtlAmNt/AXZbIa/hc=)
6: kE-FnO_bKPVoHR9SA72KKPHWwKY.roa (hash: fR8CHLRHdM3OeZe9BDHG8eQXSpySKgVTJeF/UqX5ya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:a3:c6:6a:26:20:6f:2a:ed:4e:b4:1b:60:f0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Sep 27 15:01:27 2026 GMT
Not After : Sep 28 15:01:27 2026 GMT
Subject: CN=0a15fb5b056591a9ff90ada309991774088d51dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:31:15:15:ec:94:65:84:e1:8c:ab:95:06:
27:59:24:d4:54:50:a4:18:97:da:7e:4c:93:b4:b7:
18:d2:21:2b:46:71:56:e0:6e:05:75:13:9e:52:9d:
29:81:cf:1d:5a:a7:27:17:58:7f:24:16:67:17:24:
21:f9:3a:89:2a:ec:a2:f4:87:c1:93:cd:4a:c1:36:
1b:2b:51:01:95:ca:d3:4c:51:8b:93:49:c9:85:b9:
f2:71:44:4e:87:f6:de:86:92:f5:f9:0e:1c:51:cc:
33:8d:03:94:f9:e8:26:57:76:a0:94:60:82:5d:a6:
01:cd:fc:04:9c:6d:a2:89:d7:d5:82:fa:cc:c5:b2:
09:6d:1b:01:65:86:51:d6:a9:ab:04:a9:99:21:35:
ec:bb:dc:2c:41:f6:db:e7:06:a1:89:f6:8b:67:fd:
14:90:19:4f:79:00:95:27:7f:61:7b:b9:36:7f:db:
48:24:04:e5:5f:1a:5d:90:19:01:4c:d7:a4:ae:33:
d7:6c:0f:83:28:a1:ca:48:18:da:71:db:d9:d4:97:
2a:06:2f:e0:47:a6:9a:29:f6:b0:1f:25:80:ad:a5:
34:30:1d:a1:ab:cb:82:aa:70:4b:48:42:1d:41:24:
5a:5d:f1:f8:f8:f5:41:8f:80:49:1b:89:e5:0d:a4:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:FB:5B:05:65:91:A9:FF:90:AD:A3:09:99:17:74:08:8D:51:DC
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b8:3a:77:98:d3:64:53:26:07:77:e3:17:e1:c3:b9:05:ba:
74:7f:70:7b:0b:12:ef:53:a3:ed:26:3b:73:1d:f9:ba:57:4f:
36:a1:7c:c3:72:0f:ac:7e:c9:33:ec:cc:ea:36:a3:fe:ed:5c:
62:0b:3c:b7:a3:c1:d7:b8:e0:b7:a3:d5:77:42:16:47:6c:85:
7b:13:80:e3:82:14:98:be:f8:58:9c:fb:d8:b2:92:d2:97:e0:
61:04:4b:36:29:01:b7:c9:3b:cc:e4:18:01:d3:8f:5d:6d:f6:
ac:6b:35:77:dc:7d:ca:a8:8c:ad:67:13:f2:f1:42:b1:82:10:
6e:2c:57:6a:08:37:13:f5:f0:ec:50:36:2b:1e:0c:f1:1a:72:
08:61:08:5b:0b:20:1b:df:71:1f:f3:b5:55:5b:3a:ee:7b:8c:
3f:c3:37:e3:15:82:2f:fb:e5:02:9b:3d:8e:d4:4e:85:71:70:
6e:53:5b:ee:b5:6b:b3:23:59:53:b0:35:1e:a7:47:34:28:c0:
f3:02:d6:05:c2:9d:59:34:91:31:0d:3e:9d:d3:27:3d:55:de:
39:e4:f8:5c:a3:8e:47:9f:a1:a0:cb:c5:db:7b:25:52:89:f5:
f3:29:ef:4f:39:87:f4:c2:97:fc:0b:b5:0c:e5:03:40:2a:b6:
ec:fc:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:57:07 2026 by rpki-client