Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: OqIdxgd65Y0H6+9bUbYxe83YpyNH41dVaWaz/URGyxk=
Subject key identifier: 23:5B:97:BF:54:AC:AA:5E:7E:11:CA:DE:31:D0:3E:CA:E2:3D:C9:66
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 019FA861E4837D5B69D740C21DE3E4608678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 07D1
Signing time: Tue 28 Jul 2026 11:00:15 +0000
Manifest this update: Tue 28 Jul 2026 11:00:15 +0000
Manifest next update: Wed 29 Jul 2026 11:00:15 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: jhmXORQusnYzUTzoHQNxrZ7G0Lz0VyTTdD3WQinFRRk=)
2: WrCSnmO3TptCu12D-7QukIGoskU.roa (hash: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:61:e4:83:7d:5b:69:d7:40:c2:1d:e3:e4:60:86:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Jul 28 11:00:15 2026 GMT
Not After : Jul 29 11:00:15 2026 GMT
Subject: CN=235b97bf54acaa5e7e11cade31d03ecae23dc966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:82:7c:50:a7:94:1e:92:7d:50:fe:b1:98:3c:
ce:70:8b:6a:6f:c5:76:bf:79:17:24:76:68:a0:b3:
a7:5f:c8:fd:6c:f9:a2:5e:66:63:6e:e6:f4:ae:c6:
b9:66:8f:89:1a:e7:f1:f4:03:0d:57:5b:e4:9f:d1:
a6:31:56:da:1f:4b:8c:c3:1c:3a:0b:74:bd:05:c3:
4e:ec:7b:ca:7e:57:c2:eb:eb:95:f9:3d:e5:4e:e3:
f8:20:35:0a:21:5c:d9:bf:b6:fe:87:f4:09:6c:01:
9a:30:ab:99:93:78:a2:0f:f7:d2:a0:33:39:f8:79:
dd:c3:eb:68:4b:ee:e7:c0:9b:b3:96:f6:a6:9d:e4:
2b:91:7a:7f:89:d8:2e:29:85:97:63:d8:65:92:84:
5a:af:7d:39:3c:c4:a2:fd:f7:dd:87:ce:19:93:59:
97:26:17:fe:7a:c2:95:5e:3f:5b:77:84:6a:12:a1:
05:d5:9a:57:ab:21:a0:c5:80:02:a4:3e:11:c4:58:
c3:a5:61:d0:fc:8d:43:0b:d5:a1:44:3b:9b:90:d8:
ca:dc:80:15:6c:1a:b4:3d:77:71:c8:33:1f:d6:7f:
86:c1:c4:4b:a5:82:5d:c1:a1:77:d7:52:0a:c4:bc:
6a:e3:fd:e4:f8:45:56:fa:4e:86:cf:6c:68:90:33:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5B:97:BF:54:AC:AA:5E:7E:11:CA:DE:31:D0:3E:CA:E2:3D:C9:66
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4d:2e:c4:57:ad:df:e4:a5:2b:6d:8b:ca:d2:18:11:98:f6:
f6:09:cc:e4:70:21:bd:02:49:65:ec:06:23:3d:9a:70:6c:ac:
29:34:23:31:13:76:f4:8a:f8:b9:fc:0c:29:7b:f4:a3:28:81:
e5:36:6a:50:20:77:29:e6:9e:60:53:a2:ed:91:0f:a3:2f:9f:
3b:ad:f9:d4:f2:7b:3c:2a:b7:54:72:2d:09:5a:2d:30:ce:fe:
b5:10:fe:9e:cf:09:7e:1d:ee:26:3c:bc:e6:79:17:d9:52:c1:
2e:a3:c5:d4:c1:77:24:93:38:a3:4a:55:d4:9a:61:f5:0f:cb:
7c:94:31:ce:eb:14:2c:6a:4b:f5:31:58:86:f8:9a:92:c0:14:
10:bd:78:53:6a:16:95:d9:73:6d:ad:f9:37:7c:fa:27:a0:8a:
29:17:f3:34:e7:d8:b9:a1:90:b0:04:14:12:c9:e6:3b:95:78:
db:dc:60:3c:84:a0:db:08:e8:d7:e0:5b:ef:9c:95:26:a1:d4:
50:f1:19:96:fb:5b:dd:a8:07:cb:f2:ec:16:e8:39:86:06:d2:
17:05:63:e8:2d:6a:c8:97:e2:a9:2d:71:68:0a:d6:b7:11:c1:
15:5b:5d:0e:d4:b3:29:35:43:9d:b5:4b:5e:f8:79:aa:d8:dd:
45:b3:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:18:09 2026 by rpki-client