Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
File: bZxGACHwaOou2-X_UPueDJrrvXE.mft (raw, json)
Hash identifier: Z0RJNI4UyGpDuf6pkFl44CRdusPKn8J8N5oyMILoYyg=
Subject key identifier: D1:01:45:19:17:3B:DE:A6:E5:56:EE:2C:FA:50:AB:82:A7:D5:E3:A5
Authority key identifier: 6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
Certificate issuer: /CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Certificate serial: 019F916C80E80BCECA6E2B5BC529A9CCA547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:34 +0000
Manifest this update: Fri 24 Jul 2026 00:00:34 +0000
Manifest next update: Sat 25 Jul 2026 00:00:34 +0000
Files and hashes: 1: 2mcmBph44T6F-kS8XWJD7lOyKpw.roa (hash: YgZT5uRBbUSFNWW/4uRQ1rHtYNnG1WTldBKIGXD9WOM=)
2: 8tLBF654pSFrtTZo6a2qR1LWWMM.roa (hash: Enj8RsjeWdg6DNXeEBjEHOQvivlKq9SbhBZo4JjBnWI=)
3: 9Wp0yEODLyFtAabFmIGNXyJJH0M.roa (hash: MDU9oyYCQf0/qP8XxFFcq2DKmq9IodMcE6wWVXgzdfk=)
4: HRBcyl3Xpg9Zozz3fH3C56xSwdU.roa (hash: ifhkkPhpziHsauqMvFaIRDB08xUa/qaHainhKiKTunA=)
5: bZxGACHwaOou2-X_UPueDJrrvXE.crl (hash: Zt+Ky6ZgR3v1fX7PcdeftI7OhGU2tvzPREFZmOE3R2o=)
6: kE-FnO_bKPVoHR9SA72KKPHWwKY.roa (hash: fR8CHLRHdM3OeZe9BDHG8eQXSpySKgVTJeF/UqX5ya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:80:e8:0b:ce:ca:6e:2b:5b:c5:29:a9:cc:a5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9c460021f068ea2edbe5ff50fb9e0c9aebbd71
Validity
Not Before: Jul 24 00:00:34 2026 GMT
Not After : Jul 25 00:00:34 2026 GMT
Subject: CN=d1014519173bdea6e556ee2cfa50ab82a7d5e3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6b:73:7b:9e:7d:ce:eb:42:69:bb:9c:1e:cc:
a0:e2:93:da:c7:a2:00:88:7c:fd:58:be:7e:a4:1f:
b3:73:99:aa:13:57:18:13:94:60:e1:ea:6e:2c:22:
71:d1:dc:25:11:c7:8e:9b:de:bf:2d:1a:d0:4a:2f:
0a:5c:b8:95:48:a4:d7:76:24:e1:f1:97:08:ef:48:
4e:4e:d9:5d:61:77:c9:05:db:92:07:98:32:0e:47:
54:71:c1:6e:55:af:a0:be:44:52:02:2b:a9:6c:14:
22:91:d3:56:99:d2:77:af:1d:0f:a5:a9:36:a7:d5:
5c:c6:b8:ed:40:1f:f3:5b:75:e6:c3:59:09:6f:68:
a9:46:78:44:10:6a:98:3c:4d:66:fc:a1:0c:92:90:
f7:e9:ad:0c:69:9d:ec:89:30:d9:3d:5d:96:af:b9:
a5:f8:e8:81:99:5c:66:54:d4:d9:84:8d:5e:0a:f9:
03:c4:08:d1:fd:f1:e5:fc:ce:ef:66:0f:f7:2d:e3:
6e:61:9d:ee:92:35:98:c8:66:d5:4e:0e:95:f0:2d:
96:e5:22:a8:e9:ba:eb:68:c3:b7:61:07:c3:d7:f9:
d0:0b:c3:36:8a:1e:e7:40:28:52:c6:98:49:60:4c:
60:01:1e:9e:5e:0c:47:ee:d0:97:07:7d:65:fd:1b:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:01:45:19:17:3B:DE:A6:E5:56:EE:2C:FA:50:AB:82:A7:D5:E3:A5
X509v3 Authority Key Identifier:
keyid:6D:9C:46:00:21:F0:68:EA:2E:DB:E5:FF:50:FB:9E:0C:9A:EB:BD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZxGACHwaOou2-X_UPueDJrrvXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/bZxGACHwaOou2-X_UPueDJrrvXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a2:3a:c5:a8:9b:5a:f9:d4:4c:0e:59:4b:be:fd:8d:70:ab:
b2:7c:a4:bf:11:40:04:87:83:38:88:de:e1:f3:92:0f:b0:42:
09:a2:6f:b7:96:22:2b:8d:01:9f:0f:1c:69:9a:1a:6c:90:5b:
ff:de:5d:f0:49:2a:63:3d:81:cc:62:70:60:4e:04:77:9e:25:
10:80:fa:81:15:a7:b8:1b:86:18:f5:bd:e4:d4:6b:5a:cb:ff:
bc:8e:35:6a:a2:1a:0c:90:62:6f:7a:72:47:eb:75:33:12:a4:
bf:44:81:87:fd:98:d3:27:10:0b:cf:91:89:72:2c:f3:cd:0a:
db:b2:e9:6a:d4:19:b2:37:61:8b:78:c9:29:3e:ae:dc:d5:48:
9a:60:71:85:5d:1d:ec:87:3b:9c:62:cb:0f:13:53:50:7f:ce:
86:4b:b4:62:4c:64:2c:77:9c:57:20:46:80:01:ec:7c:50:9a:
38:be:31:ed:bb:f0:33:a0:d6:e9:3d:82:3f:89:98:d0:d6:e1:
de:00:7b:36:10:4d:81:3c:36:ef:1f:d8:70:50:0b:32:0d:26:
8d:02:69:c2:36:82:90:75:74:d6:51:07:07:56:db:0c:e6:03:
0f:66:9c:3e:b7:dc:fe:89:f5:3f:f6:14:f5:2b:50:12:9e:a7:
95:3f:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:59:29 2026 by rpki-client