Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: 25MfNZy/zQ9W88iM+BuambcVWfflUhMXQiEolPM4O8E=
Subject key identifier: 39:04:69:6E:5A:F6:1E:CE:B5:5B:D4:31:08:F2:79:58:DD:23:76:6D
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 01A0CA10242AEC4EB7E646A72FF4977636C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 0867
Signing time: Tue 22 Sep 2026 17:00:50 +0000
Manifest this update: Tue 22 Sep 2026 17:00:50 +0000
Manifest next update: Wed 23 Sep 2026 17:00:50 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: Ihwd9NRru8Kb1B3u/zUHk8eGGIZz7SFEzupvRzPhK58=)
2: WrCSnmO3TptCu12D-7QukIGoskU.roa (hash: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:24:2a:ec:4e:b7:e6:46:a7:2f:f4:97:76:36:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Sep 22 17:00:50 2026 GMT
Not After : Sep 23 17:00:50 2026 GMT
Subject: CN=3904696e5af61eceb55bd43108f27958dd23766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:75:eb:91:22:2d:75:03:8d:2e:fa:05:ac:
62:8e:fc:8f:94:f3:f8:e8:dd:29:e2:c0:9d:f8:1d:
54:2a:dc:6b:aa:9b:53:d5:fc:21:f2:e1:5f:36:a0:
7c:fc:7d:47:d0:90:1a:5a:e3:7c:d6:52:a9:78:a7:
75:d0:ad:ad:a5:90:90:e0:a8:20:5d:25:a5:f1:34:
52:a5:be:ae:ea:26:d0:15:bb:a0:db:d8:05:22:b6:
53:fa:5e:4c:dc:e1:8d:cc:05:b7:aa:d0:ff:03:65:
d2:97:ac:7a:07:54:5d:b8:72:d7:80:df:ac:c2:83:
61:8b:58:67:73:89:81:c9:cf:1c:9d:7c:c9:69:b2:
67:12:23:29:1e:4a:cf:f3:fe:d1:52:cf:c2:22:1f:
2e:f6:8f:b1:44:39:c5:e2:16:43:ab:15:82:ad:df:
42:a9:9a:3d:64:19:7d:b0:f5:ea:cd:dd:28:11:6a:
32:dd:0c:ce:1f:42:56:d0:43:dd:7c:90:5d:87:44:
32:9e:bb:88:da:c2:db:65:43:92:4e:65:ba:00:14:
49:0e:ff:1f:12:20:2c:7d:1d:19:9e:31:58:3e:b0:
c3:4c:47:21:17:5c:e9:0f:46:41:07:49:7d:b6:45:
e0:5b:be:59:12:be:da:57:3e:6b:ea:b3:82:04:1a:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:04:69:6E:5A:F6:1E:CE:B5:5B:D4:31:08:F2:79:58:DD:23:76:6D
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b2:ec:df:a0:3d:2c:a3:e7:06:9d:59:90:9f:6e:bb:48:47:
51:94:fc:59:dd:8c:ed:24:9b:61:83:4b:e0:6a:64:4c:33:56:
82:04:f9:af:51:b0:7b:bc:5c:ac:0b:8a:2c:e3:01:b1:9c:8b:
38:95:68:2c:84:73:f7:60:ef:b8:70:de:27:fb:8e:d2:45:4a:
b9:cf:64:78:ab:2a:2a:c0:ac:a8:18:e4:67:e3:b4:37:6b:64:
51:0c:2b:d7:95:74:1a:c3:9a:b5:be:d3:77:f1:51:d0:2f:fa:
9b:fe:99:d8:ed:ee:e0:c5:bd:3b:aa:16:94:a5:ff:41:bf:ad:
ef:42:5e:1b:5d:8f:e1:4e:46:e9:9c:31:25:c4:2f:14:e6:b5:
7f:94:ec:fe:d2:1a:64:b2:a9:f8:e0:79:58:b1:93:56:3c:c3:
7d:14:4f:d0:c4:3d:ee:ef:df:f0:70:5d:2c:ac:1c:ec:c3:52:
39:c3:c6:ad:12:f5:17:11:40:e3:4c:75:c1:d4:b0:e5:a2:db:
46:d8:d5:80:0b:fa:77:56:25:e1:80:39:9d:2a:81:16:c5:d4:
57:8c:2c:8f:d7:d8:fa:76:67:b3:86:e1:61:30:cd:7c:ff:2b:
d1:d8:eb:bf:83:6e:6a:97:1f:3b:fa:d6:a8:ec:47:40:b5:47:
47:96:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:43:40 2026 by rpki-client