
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File: BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier: +XFWaZGA+NOxXECxZ/aOvWUvfL6jlR9YsZm9FOfD0tc=
Subject key identifier: A5:09:2D:73:5F:99:94:EA:F1:C3:81:9A:F0:BD:B8:ED:11:BF:FF:52
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial: 01A0D7CCCACF874EA8B29943B569C4C0EA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number: 1A77
Signing time: Fri 25 Sep 2026 09:01:57 +0000
Manifest this update: Fri 25 Sep 2026 09:01:57 +0000
Manifest next update: Sat 26 Sep 2026 09:01:57 +0000
Files and hashes: 1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: XEo24/jiYI1mhfmZgUQycMIOtzpXLKpI5WugOUaL1dE=)
2: Qh3-2TMMaClcKooNJ3fndADjiYo.roa (hash: OrsiroKPXNo2SdBOxZVVTepz1ZwF+w/R3aYOwgk/QnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:ca:cf:87:4e:a8:b2:99:43:b5:69:c4:c0:ea:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Validity
Not Before: Sep 25 09:01:57 2026 GMT
Not After : Sep 26 09:01:57 2026 GMT
Subject: CN=a5092d735f9994eaf1c3819af0bdb8ed11bfff52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:87:40:9a:2d:8b:fd:d2:18:97:ad:59:6d:
fa:21:80:6b:e2:06:10:ce:ca:e2:a4:3c:ed:20:7f:
22:15:a9:cd:1f:a4:68:e2:bd:c5:ec:4c:47:08:f8:
c1:44:fd:75:8b:63:2d:c8:13:3f:28:16:f1:47:a7:
92:1f:d2:11:6c:9c:22:c7:1c:17:7a:6c:1e:b2:9e:
09:51:a9:9a:1b:27:72:ad:11:d0:68:6f:20:df:b7:
93:2d:5e:bf:60:4a:10:5d:12:25:3b:45:2c:f0:7f:
45:66:24:a0:31:82:75:3e:45:88:87:d5:00:88:a9:
05:1b:0a:1f:ba:a3:a2:72:c4:b3:0d:57:93:bc:49:
9a:76:99:16:08:6f:bc:e8:02:a1:1a:94:ea:ca:2b:
89:82:52:41:cd:bc:f6:3b:92:ab:e8:5e:e7:27:ef:
d0:ec:31:b2:05:43:3f:74:af:ab:f9:9e:56:70:57:
07:4b:29:ab:d5:c7:9a:38:c0:35:00:10:74:a6:c5:
f1:5c:45:17:63:6e:2a:2e:6d:ac:8b:14:5b:a7:9f:
88:86:35:eb:11:ec:f4:96:7b:f0:0d:b4:5d:21:55:
99:12:59:f4:21:d8:d3:67:fe:b4:8f:fc:ee:d2:e8:
79:bf:ff:8e:85:53:eb:04:a2:7f:42:5f:e2:64:19:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:2D:73:5F:99:94:EA:F1:C3:81:9A:F0:BD:B8:ED:11:BF:FF:52
X509v3 Authority Key Identifier:
keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1e:04:16:0b:19:02:9a:6d:10:bf:4c:39:1c:e9:c5:7f:fa:
ec:31:96:e9:fb:a5:56:d0:28:df:24:c2:42:d8:b4:86:f0:f1:
a9:9a:0f:1c:a4:11:f9:2c:4f:b2:76:e1:9f:1d:3c:fd:04:6d:
7c:14:15:b6:13:b4:85:4a:0b:08:6f:fe:3f:b9:4f:a5:df:66:
63:81:2a:b9:2e:45:88:22:6f:a9:d5:53:04:d1:09:af:9d:38:
89:47:7c:4c:8a:42:62:7e:42:39:dd:ad:16:4f:ba:d7:45:a7:
e2:07:17:91:a2:bb:63:5a:99:70:91:9e:b9:c0:42:a1:99:98:
4c:dd:80:b8:d3:b8:03:3a:1a:c1:9f:9f:1f:08:0d:a8:d0:bb:
8d:b2:b4:ff:15:61:a0:1f:a8:c3:1e:27:ff:80:a8:2e:4a:61:
e6:2a:c3:f1:75:df:81:0e:f4:f1:8c:18:86:c7:a6:c8:0e:e7:
b4:49:b8:4d:d0:8b:e3:8a:b6:23:7e:f1:e2:fc:ab:74:36:90:
87:c6:99:7b:1a:cb:d6:2d:2f:54:32:36:6d:78:43:b3:67:a3:
5e:76:33:77:c4:bf:8d:31:a6:3b:7b:75:49:9b:6c:d8:82:3a:
70:78:3d:fe:b7:45:eb:a8:d4:44:1f:38:d6:3c:1d:3a:95:4a:
6b:d2:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:51:46 2026 by rpki-client