Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: vN5OoEyUcvkdjKk2DGQEi0+vcEe/gLj/gXV8c5yGnlo=
Subject key identifier: 87:63:A8:47:42:27:55:AC:B6:9B:9A:CA:42:BA:68:E3:8A:3A:11:68
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 019CAB347125F80DDEE21595A22D7F799768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1857
Signing time: Sun 01 Mar 2026 21:01:06 +0000
Manifest this update: Sun 01 Mar 2026 21:01:06 +0000
Manifest next update: Mon 02 Mar 2026 21:01:06 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: BXH3+51z5NjsEONLyQGKn8UP5/rpEp04DzekgHlCtec=)
2: PWYIIVzGxcrUmuYP_HiFUaq9umQ.roa (hash: P2ZkiiKRktbcpR8VoucO1Vi8r25iD3YokcBeWOA8VNg=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:71:25:f8:0d:de:e2:15:95:a2:2d:7f:79:97:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Mar 1 21:01:06 2026 GMT
Not After : Mar 2 21:01:06 2026 GMT
Subject: CN=8763a847422755acb69b9aca42ba68e38a3a1168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:83:bd:d5:a2:2a:13:f6:7c:a4:51:75:01:
1e:b9:bd:fe:54:d5:8d:7e:3c:93:6f:81:3f:3f:04:
66:37:cb:92:25:6d:b9:cb:37:ab:84:56:72:04:5c:
7c:ea:25:c4:82:3f:ee:3f:54:b9:24:4e:46:3d:a4:
c2:64:14:05:53:0e:a8:41:37:35:d2:e0:f7:5a:b5:
19:cd:2d:af:36:13:b4:4e:48:f9:de:5a:da:41:40:
87:22:d1:81:b7:0b:e3:28:c2:8b:13:e9:96:94:3c:
0b:69:23:60:15:14:73:0e:64:b2:10:76:1c:fc:b1:
af:91:f0:20:fd:fd:c7:c7:4a:b5:28:30:24:d0:ea:
0e:21:f9:83:7c:aa:08:70:f5:a9:f5:62:ee:87:a7:
89:f5:16:43:93:68:74:8b:ec:8a:79:44:a3:06:72:
12:af:3f:f1:cd:96:86:78:8f:37:17:1e:2c:9a:25:
4a:08:62:03:5d:04:c1:12:88:db:71:53:81:97:fb:
34:f5:81:d4:b8:c9:7e:07:4e:57:e9:8e:11:8b:af:
b3:35:38:98:e3:6b:8b:f4:f0:20:7f:25:81:d3:fc:
39:bf:be:92:23:ca:13:ce:88:d5:f8:e8:3c:20:d5:
fa:7a:8d:36:de:a2:3d:37:68:c7:5a:16:e4:64:44:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:63:A8:47:42:27:55:AC:B6:9B:9A:CA:42:BA:68:E3:8A:3A:11:68
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ec:2b:58:ae:5c:aa:3a:61:15:70:a1:23:c8:be:ed:90:1f:
d4:5b:05:64:8c:50:70:c8:50:0e:89:31:fb:97:20:86:75:66:
7f:fe:c1:9d:b2:01:36:e8:69:32:02:71:2e:9f:ff:c1:76:d1:
67:b4:86:7b:7f:c5:dc:5f:7c:14:59:e1:8a:e3:7d:1f:bc:b4:
34:80:5e:e2:91:b2:e3:d1:fb:f3:8d:53:6a:90:56:18:0d:18:
1d:f9:93:40:f9:91:c0:1b:2b:ec:04:76:91:b1:5e:11:3e:a0:
aa:d4:8b:08:d5:4e:20:bc:4b:07:fb:be:78:6d:7b:81:57:be:
46:16:24:4b:9d:33:44:33:cf:34:83:c8:ab:6f:c4:8b:58:71:
77:90:1c:d4:a9:97:07:67:df:d3:1d:2c:4b:85:19:01:4d:8b:
d4:2b:e8:43:a3:bc:99:bf:23:6e:2c:83:49:98:bf:72:05:4d:
a6:42:64:6e:aa:fe:34:6b:79:1f:4a:e5:2f:18:17:3a:20:13:
af:42:5d:32:4a:79:28:a1:39:ea:8b:94:8c:2d:88:99:01:7e:
ad:5a:47:52:4b:7d:00:ea:06:f3:fe:d5:ad:f4:eb:e8:04:0f:
46:17:99:55:1d:1b:86:d6:0a:0c:5d:16:5c:37:e3:ba:01:1c:
6a:93:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:28 2026 by rpki-client