Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: jUBfwgiDgCP2W7w9LejIMEMQSmhudrlfrw4DdydtjKQ=
Subject key identifier: 8A:D7:D2:84:68:F8:79:F1:2E:B9:AF:4C:0C:3B:0D:61:DB:E5:F4:5E
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 019D9B50A88A1794720379C04897D92F184E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:00:47 +0000
Manifest this update: Fri 17 Apr 2026 12:00:47 +0000
Manifest next update: Sat 18 Apr 2026 12:00:47 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: 0KkV3AlpPhijvOKOacusZaYK9nlo5B9sZLvBKtiv9Eg=)
2: rdPF1oSF697o-6J7h737TTdZ1tI.roa (hash: sMXUA/wK5htTFnsVDTj5g0Rhpnmfg7FybwvswSl03mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a8:8a:17:94:72:03:79:c0:48:97:d9:2f:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Apr 17 12:00:47 2026 GMT
Not After : Apr 18 12:00:47 2026 GMT
Subject: CN=8ad7d28468f879f12eb9af4c0c3b0d61dbe5f45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:f3:d8:9f:8a:ff:87:52:15:fb:37:26:f6:
dc:82:07:42:46:50:48:32:dc:25:30:ef:3f:53:41:
16:59:d5:00:b0:47:94:78:76:a0:b8:39:d9:d3:c2:
78:8e:55:e4:29:0e:53:a5:83:29:12:f4:c1:e0:0f:
b5:27:15:c1:75:26:56:d6:8e:ad:bc:ea:2a:bd:64:
5c:de:eb:7b:d2:53:76:ca:09:18:e3:90:f6:43:e4:
01:55:b2:52:59:91:b3:d6:44:af:2d:39:15:2d:97:
a5:32:bb:e1:5a:b5:50:fd:44:63:a9:bb:c6:9d:72:
26:4a:f1:54:02:c8:93:89:3b:3c:73:76:4a:a4:98:
52:5d:c6:47:29:47:e2:58:7c:19:bc:52:54:50:a2:
76:66:be:38:9b:c2:94:0e:87:ae:cc:17:f2:a6:bc:
25:d9:55:f3:92:24:c7:76:b7:0f:12:99:de:71:c7:
0f:98:23:00:ab:d9:14:eb:7d:52:0f:a4:81:df:5c:
cf:40:17:8e:d0:52:3c:51:ee:8a:4a:0c:c7:50:b4:
76:56:76:98:67:8b:d4:65:e5:f6:13:d6:c8:6b:57:
d1:54:53:74:36:85:d7:ee:87:33:9a:d2:be:32:77:
f8:d5:95:30:0a:82:2a:a6:15:27:4c:86:a4:d4:5d:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D7:D2:84:68:F8:79:F1:2E:B9:AF:4C:0C:3B:0D:61:DB:E5:F4:5E
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:49:d7:63:cf:f5:3e:21:6b:92:4a:a9:ad:8e:b4:35:a0:9d:
e0:50:cc:27:a3:0f:01:5f:65:f5:8a:eb:95:41:61:b7:90:06:
87:55:dd:ab:8f:a7:08:62:47:84:b9:73:61:52:e8:eb:d7:55:
34:1b:f6:ef:60:02:a1:07:b6:a0:7f:2d:bd:a9:7c:bc:aa:a7:
09:e8:b7:38:54:f2:14:67:a4:93:e5:83:b0:87:67:80:13:38:
43:ae:a2:35:1a:09:c8:69:0b:14:72:7a:0a:1c:13:ec:c6:ad:
06:c8:bd:c4:7b:f8:a5:be:06:5b:65:4c:88:8d:ab:ad:7a:ff:
02:54:1a:a7:be:22:ea:c5:00:2b:ea:21:2c:d5:ed:e7:20:77:
08:35:78:8a:41:02:dc:f8:d7:0d:b9:23:b4:2d:28:6e:d0:4b:
5c:74:5e:dd:70:c7:25:34:b7:2a:52:aa:b1:9a:03:cc:08:a4:
c7:0e:53:fe:d6:df:d2:a7:6d:c1:fa:ed:4e:1f:8f:a9:6a:7a:
ad:ca:f8:b8:af:86:a4:eb:c5:fd:4b:28:4e:66:9b:5d:ed:75:
21:9f:8f:5e:91:f6:71:93:ec:aa:47:a6:51:c7:28:66:39:3f:
4d:e9:ab:2a:f8:d7:ae:f6:79:64:a9:7a:ff:ec:5c:9e:46:ee:
e2:52:0c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:39 2026 by rpki-client