Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: 5ymPJgQeG/cXZ48PYw5BwrjTlbXPiu2FoommYtiWomM=
Subject key identifier: C7:B2:44:0F:F0:E1:84:70:E2:22:5C:94:5C:D9:11:91:54:72:8E:2D
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 019D9A74A4B9D9D6606473DE0D38679784B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 18D3
Signing time: Fri 17 Apr 2026 08:00:28 +0000
Manifest this update: Fri 17 Apr 2026 08:00:28 +0000
Manifest next update: Sat 18 Apr 2026 08:00:28 +0000
Files and hashes: 1: 3rkjwwginUfLartcn5VoY9PgC_E.roa (hash: Nn/SgK0GWp70Grm4pzV4xOWCunqMV5me8PRwpUORXuM=)
2: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: whArdAaP/RgWsOgUlmoGjSOnhsZpNeZfrng0cJoZyGg=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a4:b9:d9:d6:60:64:73:de:0d:38:67:97:84:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Apr 17 08:00:28 2026 GMT
Not After : Apr 18 08:00:28 2026 GMT
Subject: CN=c7b2440ff0e18470e2225c945cd9119154728e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:48:ed:06:5b:a8:ae:ea:0f:e7:d4:5c:8f:
5f:56:af:66:52:ac:60:90:ef:c2:09:50:93:a8:44:
67:b2:90:a3:b8:5d:c2:65:d9:e5:c7:cb:f6:94:bc:
04:f5:fa:7c:fa:5a:4b:fa:83:0e:50:fa:29:9f:a1:
2a:fa:86:23:59:ca:3e:f8:bc:0b:79:46:24:b4:8a:
5e:ac:f2:eb:69:ed:11:ce:f3:56:a6:5c:dc:2b:7a:
b2:8c:09:b3:39:2c:9b:a3:e6:70:d2:92:bd:c8:81:
84:47:58:15:9e:ce:38:5a:e0:86:dc:59:43:90:17:
97:b6:78:07:73:da:88:b5:9e:a9:41:ab:d8:79:64:
3a:64:74:1c:01:ba:6f:e2:d4:20:84:43:d9:6f:e7:
7f:d8:c3:b0:b4:07:b0:32:fd:08:00:b1:cf:fb:ff:
d5:a8:05:17:9b:1a:d9:82:77:77:7c:90:e7:a5:d0:
4d:89:81:ee:20:ea:c3:42:8a:ea:fa:79:a0:5c:24:
8f:6d:09:4e:cf:a9:16:ba:4f:d9:af:38:98:ef:b8:
99:4b:93:6e:a4:2f:95:a7:29:a8:b7:8d:ea:86:1a:
e9:f0:c3:68:41:d9:43:22:4c:53:c5:60:8e:52:4b:
1c:93:a3:45:f4:85:ec:15:ab:2e:45:2f:85:9a:bb:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B2:44:0F:F0:E1:84:70:E2:22:5C:94:5C:D9:11:91:54:72:8E:2D
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a3:da:f5:5c:a7:09:2a:5b:d0:23:cf:3f:06:76:9f:9a:42:
15:4e:3f:5e:1d:85:02:95:92:4c:16:93:a3:fc:c0:c2:35:da:
6d:57:fb:4b:7b:39:49:53:62:69:0d:8e:93:22:6f:59:0f:ee:
a3:25:34:40:ee:91:bd:4a:dc:c7:98:a6:0c:bd:d6:fd:c5:66:
a9:06:3d:40:84:97:17:49:2b:20:bf:60:48:78:16:9e:24:b8:
e8:04:4e:3b:ea:31:4b:10:34:d2:e9:86:91:c6:e4:68:c3:15:
d4:b8:e0:db:2a:b8:87:80:d7:d7:5f:98:96:57:e4:53:eb:ab:
77:9e:dc:20:76:e5:40:79:80:d6:68:1b:75:f6:87:cf:89:74:
4f:bc:a6:44:20:b8:22:1d:b2:95:ad:99:dd:37:5c:2b:d0:58:
93:d1:77:68:f4:6b:f4:6c:6d:97:0f:4f:46:dc:fe:3a:41:5a:
2a:46:dc:d6:d1:10:ef:28:71:af:98:e3:15:29:84:83:45:16:
e2:79:0e:77:de:ec:cd:0e:a8:7d:ae:a7:af:e7:09:14:06:a2:
fb:25:df:93:99:b1:d0:9f:5a:7f:ff:c4:f9:62:4d:d9:4d:49:
d4:07:57:b9:2f:0f:07:ae:10:60:8c:92:b2:3b:09:72:73:2f:
d3:b4:2c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:44 2026 by rpki-client