Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
File: BZ9RaALCYTCaYQSHcubq_VhnqZA.mft (raw, json)
Hash identifier: 6wgf4xaJqkt5wu+baUGqqiKLLSGtgwrBHFyl6Db4ulo=
Subject key identifier: D5:DB:65:07:BF:A7:34:B2:AA:47:6E:FF:9B:C4:72:CA:22:06:72:26
Authority key identifier: 05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
Certificate issuer: /CN=059f516802c261309a61048772e6eafd5867a990
Certificate serial: 01A0CF367A10842F85A459319D76D9DAD6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
Manifest number: 1928
Signing time: Wed 23 Sep 2026 17:00:48 +0000
Manifest this update: Wed 23 Sep 2026 17:00:48 +0000
Manifest next update: Thu 24 Sep 2026 17:00:48 +0000
Files and hashes: 1: 46krBMuMgQRTOnYjjiwz0jZnP9g.roa (hash: i+WuevI3Tnw5jBTEqmKxgeqDkLLDwvFZgvTXSU8JdlE=)
2: BZ9RaALCYTCaYQSHcubq_VhnqZA.crl (hash: D+Miw+7sBBuGVTMjzqkwjrNtuXhS8h0buF2329OJOj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:7a:10:84:2f:85:a4:59:31:9d:76:d9:da:d6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059f516802c261309a61048772e6eafd5867a990
Validity
Not Before: Sep 23 17:00:48 2026 GMT
Not After : Sep 24 17:00:48 2026 GMT
Subject: CN=d5db6507bfa734b2aa476eff9bc472ca22067226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:c8:52:7a:c8:cf:2d:4e:53:4e:d3:a2:c9:
2c:28:cd:84:90:11:ad:c5:9d:0f:9c:93:ab:1f:b1:
cb:07:dc:bd:65:d0:38:c9:94:5c:ae:56:43:cb:60:
ce:ab:3d:88:9b:6d:8a:e4:de:be:4a:11:20:bb:a7:
ef:56:5f:3e:61:6a:5a:39:15:d3:7a:ab:6a:db:81:
08:b6:53:88:d0:ac:e1:6b:b7:1f:fd:5e:ea:fd:0d:
8d:e0:9d:9d:38:14:d9:5f:3f:26:ca:02:54:46:c0:
7a:68:1a:a2:ab:b0:78:fb:b2:35:85:6c:3d:70:f6:
73:3f:3e:f4:97:7f:e3:ae:4a:e3:63:eb:1e:c6:6c:
7e:4f:c9:a7:d8:b7:7c:40:df:d5:c4:6a:05:82:6b:
5a:09:83:4b:eb:ef:d0:b2:27:32:d8:4b:d9:1f:c5:
e5:55:29:d6:4f:05:1c:66:52:75:95:0d:85:ac:8f:
bd:d0:5d:6f:28:77:f8:77:54:a7:44:06:fa:13:25:
78:13:cb:a4:da:0b:e9:72:ba:52:b1:bd:51:9f:0b:
e0:77:14:24:a5:7e:61:9b:c2:fe:dd:0f:62:3d:29:
9b:85:48:ef:e6:d4:71:f4:78:4c:2a:a2:7a:28:1f:
58:a8:bc:96:df:57:a8:9e:f2:f8:cd:8c:71:24:de:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DB:65:07:BF:A7:34:B2:AA:47:6E:FF:9B:C4:72:CA:22:06:72:26
X509v3 Authority Key Identifier:
keyid:05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5e:18:40:5e:80:66:27:91:02:46:10:2f:c4:f5:c2:fa:b2:
3f:80:fe:cb:03:69:81:f4:85:2d:b7:90:5c:d6:c0:e3:59:90:
ca:90:a7:73:bd:90:d2:37:62:f2:56:a3:ba:ee:fe:91:2b:ce:
d3:a8:38:27:eb:8d:1e:bf:fd:86:1c:e9:28:4b:05:b8:19:d0:
81:3e:b2:49:7d:7a:11:76:8f:c4:36:fa:08:30:fd:a8:62:dc:
2b:6e:b1:d3:1b:d3:fc:95:8c:a4:fe:1c:c7:28:df:0f:19:05:
50:e3:dd:50:7b:dd:34:e5:44:ad:24:c5:0a:fc:5b:74:32:13:
e1:f1:82:aa:b9:78:53:08:ed:e7:94:0e:eb:90:ee:b5:f3:f4:
ef:34:ba:4a:f5:a4:7c:4b:13:09:c6:a3:04:fb:5f:78:17:d5:
49:d5:23:8a:fa:e6:bd:f5:d7:e8:6c:71:c3:7b:69:3d:6e:a8:
05:d8:e8:a8:c9:38:a1:5d:07:d5:a2:f9:f3:71:a8:50:f8:db:
2e:0f:f5:bb:6b:e6:b1:53:48:07:30:d2:a8:a6:d5:8a:94:3a:
9c:fe:c5:b2:5c:64:7f:3f:10:f7:14:5a:27:ba:6d:64:01:15:
69:6a:ef:d4:1b:f2:5b:36:10:63:f4:40:3e:64:55:b0:a6:fd:
b7:d4:3f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:15:59 2026 by rpki-client