Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier: 6Tvi9jh9VAwx12JSf8XmK306sNtT1fJ+5M1iLfwZqrE=
Subject key identifier: 08:67:78:92:3E:24:53:52:48:FE:A3:2E:17:67:21:44:30:1D:11:45
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial: 019FAA884F3431C5D604C0D9BD2C523503CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number: 02A2
Signing time: Tue 28 Jul 2026 21:01:27 +0000
Manifest this update: Tue 28 Jul 2026 21:01:27 +0000
Manifest next update: Wed 29 Jul 2026 21:01:27 +0000
Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: OTkfJmuQ/2lTLxnVev+8vwwrEcQtAjO7JlQbA9fSGQg=)
2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:4f:34:31:c5:d6:04:c0:d9:bd:2c:52:35:03:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Validity
Not Before: Jul 28 21:01:27 2026 GMT
Not After : Jul 29 21:01:27 2026 GMT
Subject: CN=086778923e24535248fea32e17672144301d1145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:a9:ba:17:5d:f8:93:2c:e3:a5:8a:35:a6:
35:90:31:e7:41:4c:cf:29:25:21:2b:4e:69:80:7c:
4b:14:1b:9b:5e:71:41:4f:9f:5d:88:83:b7:6d:d9:
9a:fa:e4:c9:64:91:e7:97:40:7f:18:e9:f1:25:5d:
c3:32:fc:11:43:0e:19:42:4b:65:8a:e6:a7:23:57:
03:b4:88:6a:3d:f6:20:fa:4a:76:1b:34:8a:65:b7:
ab:c4:4c:b7:78:3c:13:62:d8:29:f8:38:60:48:91:
85:e6:00:9c:21:92:6b:02:08:13:3f:49:ed:a5:be:
87:97:61:81:f5:ab:25:1b:69:3a:bb:56:06:91:e6:
cb:16:c7:d2:eb:4f:48:44:fe:19:70:97:62:6b:27:
a5:91:cf:e2:12:0d:d3:99:5d:ea:5e:51:f2:d0:da:
59:67:60:cf:18:13:34:50:7f:0a:bf:db:8a:74:51:
a1:35:1d:36:56:5c:b5:35:db:79:68:d9:bd:5e:fb:
56:a2:02:3b:dd:67:47:8f:c8:bf:65:13:69:b2:28:
33:0b:c3:dd:a8:6b:12:c8:c2:76:cc:ed:4c:c4:61:
6d:36:57:03:93:40:db:79:70:a6:79:80:de:f1:8a:
62:e2:86:26:14:7a:5d:0a:90:83:4a:a2:c7:93:f7:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:67:78:92:3E:24:53:52:48:FE:A3:2E:17:67:21:44:30:1D:11:45
X509v3 Authority Key Identifier:
keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c4:a1:3c:45:cb:b4:a9:7a:00:c3:d2:57:55:5d:4b:e6:4f:
9f:0f:2d:db:9d:56:08:8f:2b:3c:39:d0:64:a5:95:c0:d8:8d:
d9:01:5a:3e:4c:68:ed:cd:2d:5c:d5:c5:51:03:89:37:41:e9:
bd:7b:02:34:dd:8e:d8:39:f6:78:0c:1e:bb:2f:f4:57:31:16:
32:84:91:ae:08:2a:c3:27:76:00:96:e4:19:6b:54:84:66:0b:
4c:ea:f4:92:0b:90:63:5e:e2:74:51:a2:3a:e1:f4:ff:fd:fc:
cd:e9:0c:78:a2:30:9d:40:ae:4a:61:04:79:5a:df:82:93:31:
5d:f0:5a:5f:0d:fb:6a:cd:6b:92:4e:b0:c8:04:f5:9a:d5:83:
23:df:27:d0:1e:bb:fc:dc:73:ca:ee:ba:03:98:d7:8b:57:9d:
7a:4e:d7:f8:b1:e3:e9:73:20:52:6b:01:60:19:90:c8:41:3f:
d7:35:72:db:1c:68:cf:8d:dc:82:44:87:8f:51:cb:59:2f:a4:
df:88:ac:04:17:01:0a:be:a4:c6:fa:52:52:9f:e4:8c:a0:95:
9b:a8:f2:c6:34:d0:c3:4e:f1:c0:c5:8b:10:44:a7:a5:7f:a9:
cf:19:8d:2e:b4:48:c6:9b:02:ab:85:5e:9c:63:a3:9c:cc:df:
21:be:7d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:42 2026 by rpki-client