
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: uwpOSGA2zEDVtKeu+yd3iNTEHAa51yGC3OyXjtwtWbE=
Subject key identifier: CD:9D:9E:D0:8C:7C:FA:FF:72:55:A7:5B:69:A0:B1:A6:05:E5:19:B6
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 019F921157B645F24CE4CB4F7EF4A38BA43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 03:00:37 +0000
Manifest this update: Fri 24 Jul 2026 03:00:37 +0000
Manifest next update: Sat 25 Jul 2026 03:00:37 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: QHY/mUCaAHAY60l5gbl8xuVdIxbmv7ix/TtWue0F0NE=)
2: IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa (hash: gkV9ez5h044OMkSTspKV9neDGkCTAKH1+BcOktle2ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:57:b6:45:f2:4c:e4:cb:4f:7e:f4:a3:8b:a4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Jul 24 03:00:37 2026 GMT
Not After : Jul 25 03:00:37 2026 GMT
Subject: CN=cd9d9ed08c7cfaff7255a75b69a0b1a605e519b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:1e:94:32:f3:1d:32:1a:fa:08:66:ce:9c:
42:90:a0:47:3f:08:4f:74:44:0c:8c:ef:1c:e7:1d:
0b:d9:2b:73:82:19:97:31:f6:40:c6:c0:93:c1:d5:
9a:e4:3f:3d:c8:a4:63:9e:d1:2a:1d:b3:24:d1:f7:
4c:b6:dd:2f:e4:84:0a:f1:ee:ff:3b:ce:4c:bf:9a:
e4:88:b3:9c:28:a8:6a:c2:71:cc:ec:59:b1:c9:12:
a3:34:b6:e1:de:30:1f:dd:fa:c0:e3:bb:5e:d4:8e:
4c:e8:a8:4a:ec:57:75:4d:32:4f:24:84:7d:3f:c3:
bb:6a:9a:8a:d3:b8:55:01:37:c6:fa:11:07:8e:5d:
47:43:45:a2:d0:c0:5a:ba:3e:65:9c:38:3c:ba:07:
ea:36:3c:a9:44:99:a6:cb:ba:5e:81:f5:dd:46:80:
cb:d2:eb:91:97:ee:f7:1f:c3:b6:55:9e:8a:d0:6b:
af:9a:79:06:35:ea:7b:58:cf:9f:d1:a6:96:b4:05:
2e:b0:d1:20:7d:b7:6c:fe:24:3c:3c:8c:2f:b2:68:
20:a9:ef:ab:93:88:2e:72:6a:98:e7:82:50:51:b1:
ec:8d:b6:75:fe:cb:6d:54:a4:3b:0d:67:8e:a7:21:
28:de:c4:9b:16:d8:4d:0f:30:5d:de:3a:ab:98:f5:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9D:9E:D0:8C:7C:FA:FF:72:55:A7:5B:69:A0:B1:A6:05:E5:19:B6
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c2:ec:48:e3:d7:67:ca:15:21:62:d6:dc:af:2d:12:0d:d3:
b4:9b:4e:d8:19:93:07:60:8c:61:59:9f:b0:ae:d0:70:a7:35:
59:e4:7f:a5:e1:2e:e3:d0:57:cc:5a:70:31:44:0a:a4:15:3e:
b4:b9:fa:fc:46:60:ef:5d:5c:68:c0:40:48:be:99:80:ff:f1:
36:59:31:ae:22:05:a0:a5:22:a1:48:0d:81:d4:74:49:94:0a:
52:d8:3c:fc:60:c8:4c:b4:f8:97:e5:02:82:a5:ae:ac:00:68:
a6:49:28:57:03:74:22:0b:76:38:8b:16:82:d7:f0:23:32:83:
83:25:bc:35:2a:80:ab:ca:fa:62:3f:67:a8:f4:8d:c3:75:67:
83:67:56:ac:a5:1a:21:d4:fe:54:af:44:2a:e4:5d:0e:89:bb:
b1:56:0c:cf:84:23:f3:4e:39:8d:76:18:46:49:8c:ec:2d:17:
16:b1:4c:52:54:8f:56:62:96:4c:66:51:5d:43:d6:90:bd:50:
33:f7:8a:3c:cd:36:e6:dc:9a:83:41:d8:24:a9:85:28:e1:66:
a9:d0:8d:32:a2:73:e6:bd:28:01:25:37:d4:cc:ec:df:18:ea:
7c:81:2d:d8:bb:e3:15:67:b1:a0:33:ec:b2:33:5f:8b:ef:f3:
01:5b:d5:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEVe2RfJM5MtPfvSji6Q+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OWZhNmE2YjFlYzdhZTZlYThiNDQ5MzRjZjdjM2Q0ZmE1
MDhlZjIwHhcNMjYwNzI0MDMwMDM3WhcNMjYwNzI1MDMwMDM3WjAzMTEwLwYDVQQD
EyhjZDlkOWVkMDhjN2NmYWZmNzI1NWE3NWI2OWEwYjFhNjA1ZTUxOWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3oelDLzHTIa+ghmzpxCkKBHPwhP
dEQMjO8c5x0L2StzghmXMfZAxsCTwdWa5D89yKRjntEqHbMk0fdMtt0v5IQK8e7/
O85Mv5rkiLOcKKhqwnHM7FmxyRKjNLbh3jAf3frA47te1I5M6KhK7Fd1TTJPJIR9
P8O7apqK07hVATfG+hEHjl1HQ0Wi0MBauj5lnDg8ugfqNjypRJmmy7pegfXdRoDL
0uuRl+73H8O2VZ6K0GuvmnkGNep7WM+f0aaWtAUusNEgfbds/iQ8PIwvsmggqe+r
k4gucmqY54JQUbHsjbZ1/sttVKQ7DWeOpyEo3sSbFthNDzBd3jqrmPUoDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2dntCMfPr/clWnW2mgsaYF5Rm2MB8GA1UdIwQY
MBaAFAWfpqax7Hrm6otEk0z3w9T6UI7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjkt
OGQ2NGRmMDFjMGM0LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjAwY2EtYTY4MC00NGQ5LTkyZjktOGQ2NGRmMDFjMGM0
LzEvQlotbXBySHNldWJxaTBTVFRQZkQxUHBRanZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8LsSOPX
Z8oVIWLW3K8tEg3TtJtO2BmTB2CMYVmfsK7QcKc1WeR/peEu49BXzFpwMUQKpBU+
tLn6/EZg711caMBASL6ZgP/xNlkxriIFoKUioUgNgdR0SZQKUtg8/GDITLT4l+UC
gqWurABopkkoVwN0Igt2OIsWgtfwIzKDgyW8NSqAq8r6Yj9nqPSNw3Vng2dWrKUa
IdT+VK9EKuRdDom7sVYMz4Qj8045jXYYRkmM7C0XFrFMUlSPVmKWTGZRXUPWkL1Q
M/eKPM025tyag0HYJKmFKOFmqdCNMqJz5r0oASU31Mzs3xjqfIEt2LvjFWexoDPs
sjNfi+/zAVvVsQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:11 2026 by rpki-client