Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
File: BZ9RaALCYTCaYQSHcubq_VhnqZA.mft (raw, json)
Hash identifier: 65Pq92fwn0yXEB0x5c9CiSeCVETPPje/VuTb15EWeZg=
Subject key identifier: 53:1B:8D:AA:79:FA:AB:71:95:28:76:21:7E:58:78:35:6A:25:D7:84
Authority key identifier: 05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
Certificate issuer: /CN=059f516802c261309a61048772e6eafd5867a990
Certificate serial: 019F90910BA009E9FD93EDE3EC1C259B3C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
Manifest number: 1883
Signing time: Thu 23 Jul 2026 20:00:52 +0000
Manifest this update: Thu 23 Jul 2026 20:00:52 +0000
Manifest next update: Fri 24 Jul 2026 20:00:52 +0000
Files and hashes: 1: 46krBMuMgQRTOnYjjiwz0jZnP9g.roa (hash: i+WuevI3Tnw5jBTEqmKxgeqDkLLDwvFZgvTXSU8JdlE=)
2: BZ9RaALCYTCaYQSHcubq_VhnqZA.crl (hash: pnTskV4Rkl837dcg1LAG+TklvQTAvIrz9VIE8oVWb4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:0b:a0:09:e9:fd:93:ed:e3:ec:1c:25:9b:3c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059f516802c261309a61048772e6eafd5867a990
Validity
Not Before: Jul 23 20:00:52 2026 GMT
Not After : Jul 24 20:00:52 2026 GMT
Subject: CN=531b8daa79faab71952876217e5878356a25d784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:bc:4c:1f:7e:b6:ba:42:66:55:2e:2b:c3:
ce:61:99:15:21:c4:0f:15:9a:69:28:32:3e:14:a2:
ec:9e:59:d7:d1:95:36:a0:76:83:5c:b4:c6:45:bf:
79:1c:05:e6:b6:7d:54:9f:90:47:28:2f:82:8e:9c:
b7:3e:5e:52:66:e9:ef:77:41:51:4b:49:8b:f0:5c:
c4:f4:b0:ea:0a:6c:87:f2:a7:f1:aa:71:b6:d9:f4:
b6:31:57:d2:a5:8b:dd:84:78:23:44:94:a1:1f:e8:
a2:7a:75:ef:2a:f1:36:c4:40:bc:54:9b:52:06:05:
52:3b:6f:38:91:79:08:48:71:9b:2d:48:39:93:dd:
6f:f4:f8:a2:6d:b0:60:cb:df:9b:37:c6:e8:b3:1c:
44:d7:72:81:64:94:57:ad:c0:1f:6b:63:ef:72:05:
f7:6e:d5:b6:cc:21:d3:98:8c:4d:0f:4f:a6:f6:be:
9f:92:b2:8a:e5:d0:84:b2:2d:46:bf:a3:24:80:09:
50:f4:44:4f:c2:16:d8:6a:4b:0b:7f:62:45:83:10:
cc:d5:13:86:80:45:22:f5:03:20:42:7e:8c:9b:6c:
34:73:70:15:9e:fa:dd:73:22:16:8e:21:20:9e:4f:
0b:a1:26:51:7b:47:80:f5:43:0c:50:88:01:cd:78:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1B:8D:AA:79:FA:AB:71:95:28:76:21:7E:58:78:35:6A:25:D7:84
X509v3 Authority Key Identifier:
keyid:05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1a:96:b0:f0:3e:b9:b4:39:b8:f7:4e:42:6e:3a:b6:6f:b8:
a5:7a:fc:c5:b8:3d:c4:ef:48:f2:c6:62:4c:45:2a:9a:1b:d4:
cf:3b:b4:f2:95:fa:8e:51:09:1f:e5:6e:ba:02:a2:3f:7c:48:
6b:65:9b:03:42:64:d8:2d:7c:62:97:29:59:07:b5:45:77:46:
df:00:17:06:33:a6:01:28:d3:de:cd:04:09:e0:5a:f4:76:98:
6c:68:73:6b:42:e7:81:78:15:b4:45:48:6e:ec:b6:bc:b4:ff:
eb:5b:4b:50:3e:6b:35:b0:ad:d6:cc:6c:95:f2:b2:e3:03:3d:
e2:a2:a4:a6:e5:69:60:8c:ff:8e:3e:52:fd:17:f0:ff:1b:79:
0f:fc:9b:df:e9:d1:a2:41:5b:f3:90:a2:7f:7c:a5:51:42:d7:
4c:7f:12:90:1c:17:c1:44:f8:ee:ae:0b:d4:5e:6b:5c:f4:53:
75:6a:52:20:39:f3:bb:63:7f:af:73:0b:c1:f8:8a:ea:2a:e0:
3d:6b:7b:f1:23:6b:35:a9:8b:05:22:64:c9:a2:a2:ad:e0:df:
a3:d5:ae:0c:21:3b:3f:56:35:ab:99:46:4d:e0:ee:77:77:39:
b0:89:3d:35:8a:49:33:4d:64:4f:ad:82:ee:37:8c:e5:71:54:
ad:6e:fb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:21 2026 by rpki-client