Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: qXPNmFTCMkt4GQYH7ebsvNJDgYV41aA/ge8sK/pWKCk=
Subject key identifier: 6C:C6:0E:23:94:EF:1D:B9:6A:1A:D1:D4:74:9C:50:72:66:0B:DB:2E
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 019CABD8F98B82506666987269210CA8D84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:00:49 +0000
Manifest this update: Mon 02 Mar 2026 00:00:49 +0000
Manifest next update: Tue 03 Mar 2026 00:00:49 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: MVmTP9d7sHb6W/05h47aATvqb2+Lt+bIOgkneBJ9DZU=)
2: rdPF1oSF697o-6J7h737TTdZ1tI.roa (hash: sMXUA/wK5htTFnsVDTj5g0Rhpnmfg7FybwvswSl03mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f9:8b:82:50:66:66:98:72:69:21:0c:a8:d8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Mar 2 00:00:49 2026 GMT
Not After : Mar 3 00:00:49 2026 GMT
Subject: CN=6cc60e2394ef1db96a1ad1d4749c5072660bdb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:9c:93:d2:a6:81:03:1a:d7:19:4c:b1:5c:
45:8c:79:9c:33:92:1e:9f:e2:5e:ba:94:43:b1:d9:
00:64:1f:bf:08:22:12:9f:94:2f:79:fb:92:4d:69:
51:70:03:bc:a0:0a:dd:23:19:51:d9:21:06:63:b5:
12:ec:14:d1:29:d0:b6:ad:6a:cd:2e:99:c4:2f:22:
9d:68:d9:30:bb:6d:d6:00:d2:54:22:2d:4c:09:1f:
53:67:27:10:f6:07:52:c9:b2:aa:26:ec:e3:5a:e4:
8e:05:2f:f4:d2:fb:b4:0b:6d:cb:4b:f3:d7:53:1e:
af:ae:c9:6c:a5:a0:71:f5:7a:92:ef:ce:cd:76:5b:
fd:a0:ca:7a:bf:fd:86:7a:6e:1d:e1:c4:9f:a6:96:
19:94:e0:a4:98:da:52:c0:48:bf:18:b7:cb:0e:bc:
bb:a3:f4:5d:ec:7c:45:14:c1:d6:21:f7:14:50:3c:
10:7c:f5:3a:a1:bb:10:e7:83:23:eb:05:6a:c9:65:
45:f2:d1:03:16:3c:c4:8c:c3:ff:f6:fa:f9:56:6a:
26:62:a0:9e:96:aa:24:db:3b:6c:14:e4:90:8b:aa:
c8:df:06:90:64:2f:e4:02:75:45:50:72:1a:1e:62:
f2:f5:e7:7e:c3:c8:25:f3:14:55:bd:d1:ec:7b:40:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C6:0E:23:94:EF:1D:B9:6A:1A:D1:D4:74:9C:50:72:66:0B:DB:2E
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d7:e7:fc:92:fe:6f:a2:65:46:90:94:b1:e0:63:9c:47:fb:
d8:1a:f6:c9:2c:a6:d9:5c:26:a1:aa:fe:5c:91:b0:69:9f:a1:
d0:5d:17:0e:d5:bd:4c:07:f3:e1:cc:6b:cc:71:80:fe:bd:60:
17:d9:d7:35:e5:19:88:96:f8:da:e2:22:3a:24:9e:5e:e6:2c:
c0:4e:bc:51:06:81:67:00:1c:19:ee:c3:55:e7:e6:9c:2b:72:
33:fc:f3:9a:af:fb:84:18:22:14:37:f9:b8:87:cd:0a:0b:7c:
2d:cb:62:b7:78:a5:80:c2:86:ad:7a:01:0c:35:14:14:c4:22:
67:9a:ef:1a:fa:e8:fa:5f:0c:80:e2:73:7f:b8:21:69:68:be:
64:db:24:62:e7:07:d1:87:53:67:47:91:56:81:fa:a0:fa:6b:
73:6a:8b:e0:bd:bb:a6:57:77:e1:ae:1f:c2:07:65:64:73:df:
93:b0:9a:36:20:77:a8:37:56:55:02:e2:c5:af:2a:cd:3c:62:
af:c3:82:77:d4:fd:21:7c:ce:d0:2d:ee:35:40:87:86:b5:4c:
dc:e5:37:fd:b0:3e:64:75:4c:1e:bb:a3:0c:ae:e4:88:5a:b0:
1c:30:01:21:a5:01:8d:08:3a:1c:63:28:e8:f5:fc:54:16:16:
49:b5:6d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2PmLglBmZphyaSEMqNhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2M1NDA4YjJmNjcyMzNmNjBkNjNmNzQ5YWM0ODNlYjY2
YWU3YzgwHhcNMjYwMzAyMDAwMDQ5WhcNMjYwMzAzMDAwMDQ5WjAzMTEwLwYDVQQD
Eyg2Y2M2MGUyMzk0ZWYxZGI5NmExYWQxZDQ3NDljNTA3MjY2MGJkYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMGck9KmgQMa1xlMsVxFjHmcM5Ie
n+JeupRDsdkAZB+/CCISn5QvefuSTWlRcAO8oArdIxlR2SEGY7US7BTRKdC2rWrN
LpnELyKdaNkwu23WANJUIi1MCR9TZycQ9gdSybKqJuzjWuSOBS/00vu0C23LS/PX
Ux6vrslspaBx9XqS787Ndlv9oMp6v/2Gem4d4cSfppYZlOCkmNpSwEi/GLfLDry7
o/Rd7HxFFMHWIfcUUDwQfPU6obsQ54Mj6wVqyWVF8tEDFjzEjMP/9vr5VmomYqCe
lqok2ztsFOSQi6rI3waQZC/kAnVFUHIaHmLy9ed+w8gl8xRVvdHse0AJwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzGDiOU7x25ahrR1HScUHJmC9suMB8GA1UdIwQY
MBaAFG88VAiy9nIz9g1j90msSD62aufIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUt
MThmMzRhN2RiZGQ5LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUtMThmMzRhN2RiZGQ5
LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyNfn/JL+
b6JlRpCUseBjnEf72Br2ySym2Vwmoar+XJGwaZ+h0F0XDtW9TAfz4cxrzHGA/r1g
F9nXNeUZiJb42uIiOiSeXuYswE68UQaBZwAcGe7DVefmnCtyM/zzmq/7hBgiFDf5
uIfNCgt8Lctit3ilgMKGrXoBDDUUFMQiZ5rvGvro+l8MgOJzf7ghaWi+ZNskYucH
0YdTZ0eRVoH6oPprc2qL4L27pld34a4fwgdlZHPfk7CaNiB3qDdWVQLixa8qzTxi
r8OCd9T9IXzO0C3uNUCHhrVM3OU3/bA+ZHVMHrujDK7kiFqwHDABIaUBjQg6HGMo
6PX8VBYWSbVt5A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:16 2026 by rpki-client