Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: xa/Ob0iRPQHUsOO3u4cYbciIhWDYd2pH0HrqgEK/jzU=
Subject key identifier: E6:AC:B0:43:1A:C3:9C:7B:7C:3E:0B:BE:3D:73:04:D9:96:E2:10:08
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 01A10F5EA5E3A2B2651B234EC670BC1F49B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 1A99
Signing time: Tue 06 Oct 2026 04:00:23 +0000
Manifest this update: Tue 06 Oct 2026 04:00:23 +0000
Manifest next update: Wed 07 Oct 2026 04:00:23 +0000
Files and hashes: 1: EcTxX-SiywrzoNwOuII1aWR6zHs.roa (hash: beN8BaOivwm2yhNJxlNC7Uur/3tPi7/Y31IRkJGKn0c=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: XM6/aJAdf8KP34O5FB0zJ4MJEdJNTLsNTmYZNc90Yro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:5e:a5:e3:a2:b2:65:1b:23:4e:c6:70:bc:1f:49:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Oct 6 04:00:23 2026 GMT
Not After : Oct 7 04:00:23 2026 GMT
Subject: CN=e6acb0431ac39c7b7c3e0bbe3d7304d996e21008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:2c:ca:8f:78:95:d5:62:27:88:65:33:7a:
ff:ea:b2:46:1a:bd:e9:df:66:f6:9e:28:f6:b0:fd:
f0:d2:d3:99:42:92:16:d1:5a:42:db:f4:80:1f:57:
72:f5:3d:a3:89:7e:81:98:03:b2:15:5b:fb:77:c2:
5d:0b:9d:62:6a:c7:73:5f:74:24:8d:f4:86:f2:8d:
e0:22:80:f6:ce:55:2a:04:32:32:e1:a9:fe:8f:c5:
6f:c9:b1:a6:a5:69:6d:b6:76:6c:ce:14:3b:16:30:
16:ed:25:04:28:11:a1:0d:22:01:08:9b:e2:a2:7c:
84:37:c6:2d:2c:fd:13:68:0b:15:3f:8f:e3:89:91:
cd:95:cb:cd:53:bf:6c:b1:76:2c:a9:b3:63:76:22:
e9:21:19:5f:09:36:5f:8d:97:54:bb:73:b4:ac:f1:
70:db:c3:f7:09:14:33:2c:00:c2:df:12:b0:50:2f:
65:56:cc:2f:a5:35:67:50:b8:8c:ef:4d:da:82:85:
85:cb:88:3d:9a:ef:1e:06:16:62:be:ea:56:11:50:
f7:87:e5:8f:f6:75:43:83:51:a9:8c:7b:0c:0f:94:
23:26:43:eb:18:df:b7:f1:15:ff:d7:13:fd:f0:e5:
68:93:e9:36:36:44:d3:69:75:dd:a0:07:96:36:7c:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:B0:43:1A:C3:9C:7B:7C:3E:0B:BE:3D:73:04:D9:96:E2:10:08
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e8:5b:97:52:01:48:92:13:c3:4e:60:1e:3a:30:12:10:2f:
53:20:c1:13:c0:d0:a6:0d:ff:a5:b4:1f:44:98:b5:46:f2:d3:
01:a1:68:87:93:b7:72:b4:84:46:a6:e9:df:b1:00:9c:e0:f9:
8b:4c:39:0c:b2:3d:b3:f1:b2:e0:7c:57:55:a9:62:70:f9:57:
fa:d2:72:f8:fe:30:8b:23:e3:34:c4:87:08:16:dd:42:40:b8:
a0:67:e9:78:fc:c3:42:ed:d9:4b:da:fa:84:78:90:4b:c0:bd:
f8:3e:67:1b:41:15:51:87:40:d4:c1:50:69:18:31:9b:d5:7c:
83:d0:2b:5c:63:e0:49:bb:02:64:37:f0:e6:b1:e6:bd:d1:e4:
ae:73:51:23:88:2b:fa:9a:10:64:ef:ee:54:a3:f8:8e:a7:4c:
ad:3e:1f:3f:79:12:45:53:5c:21:67:35:b7:29:99:01:24:1c:
45:21:21:24:c1:98:8f:00:aa:b5:32:c1:38:41:cf:1a:46:d6:
cb:73:45:3a:b5:3d:51:64:3b:50:d7:7f:bf:35:6f:c4:c3:15:
96:fc:53:26:4e:a7:07:1a:cd:0e:ae:e5:db:3f:bd:9d:71:7f:
22:a4:32:ef:74:39:2c:de:ed:b8:d4:63:3c:75:b0:67:64:a6:
2f:f5:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:58:26 2026 by rpki-client