Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier: arKVoZT9Bxpv/1gRkLC7f20Ru2ELT6dBQcwPXS6yAIA=
Subject key identifier: D1:38:4B:9D:7E:CB:FA:8F:D0:01:0B:6A:DA:8A:2D:BF:E9:F0:B8:22
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial: 019CABD9D6C94F8E952017FAC364C1C34D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number: 0115
Signing time: Mon 02 Mar 2026 00:01:46 +0000
Manifest this update: Mon 02 Mar 2026 00:01:46 +0000
Manifest next update: Tue 03 Mar 2026 00:01:46 +0000
Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: crS8n3dZDkHeOhDVDHE4QOPfoVUTOIVz5l0LVbfigqo=)
2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d6:c9:4f:8e:95:20:17:fa:c3:64:c1:c3:4d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Validity
Not Before: Mar 2 00:01:46 2026 GMT
Not After : Mar 3 00:01:46 2026 GMT
Subject: CN=d1384b9d7ecbfa8fd0010b6ada8a2dbfe9f0b822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:a9:10:79:ca:ab:90:ce:df:1f:a3:81:51:
c5:f9:94:26:51:56:8b:3a:3b:62:51:9d:79:22:38:
36:88:40:e2:e6:6e:5a:8e:38:fd:64:82:43:d0:31:
d1:fb:08:1f:03:c2:83:f9:62:c4:4b:35:a3:57:58:
7f:53:58:56:4c:16:37:73:a5:ce:2f:cd:8b:0e:94:
4f:03:28:1b:c5:db:bd:9d:8b:ed:8b:bf:f6:e5:65:
1c:2e:49:8a:87:d6:4c:c0:b1:00:25:69:73:f3:bf:
dc:45:ec:4e:77:52:b7:a3:e7:b3:83:99:bd:e7:54:
a3:a6:e3:19:a7:f2:4d:3a:ee:51:ff:a7:83:95:48:
32:51:37:7b:99:fa:4b:a5:f3:87:a2:ed:16:7f:4a:
a9:8a:6f:3c:8f:35:5d:28:3b:73:d8:d1:90:43:84:
f5:cb:bd:ce:bd:e4:31:61:33:fa:26:22:12:3b:26:
08:2c:51:a9:74:66:ab:d3:82:1f:f2:53:d4:54:7a:
ab:1b:c2:39:db:2e:ec:19:1a:63:34:2a:af:58:09:
50:dd:91:e2:0a:bc:e8:14:4a:8a:9e:01:53:29:a4:
24:ab:c5:f4:b7:f9:26:d5:11:c5:5f:be:71:41:b6:
e2:95:8d:f5:ea:06:6b:51:69:d8:90:bb:c9:fb:5a:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:38:4B:9D:7E:CB:FA:8F:D0:01:0B:6A:DA:8A:2D:BF:E9:F0:B8:22
X509v3 Authority Key Identifier:
keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:50:29:58:19:9b:fc:7a:c8:9c:60:06:bd:a7:eb:8e:ab:0b:
e6:17:dc:91:9b:31:fd:12:99:52:7c:b6:e1:f9:2a:49:d9:b0:
5b:1f:78:c9:da:1b:87:c9:83:1a:24:ea:a6:01:74:4c:f3:43:
df:cc:b5:9c:29:2a:3f:be:de:8b:8a:d3:b2:42:a8:e4:90:3b:
bf:ad:53:63:f7:f8:88:a2:b6:ef:98:3c:ec:d0:a8:1e:7c:c6:
8f:55:b0:10:93:23:33:93:bc:d5:11:74:c8:fb:15:be:43:5b:
22:62:43:fe:a2:4b:d4:af:e0:30:e3:95:d4:43:08:04:ee:92:
ba:0f:7c:65:96:89:09:37:11:09:b7:e4:79:c4:b0:15:d1:f9:
65:a2:06:0e:f5:06:60:3f:57:23:14:43:28:60:f7:2a:3f:b7:
44:8e:de:e6:cb:8e:94:ad:66:58:22:9d:87:11:49:0c:08:89:
a5:83:a6:b9:fc:58:18:16:74:fa:3a:aa:9d:3c:7a:80:40:67:
9f:22:11:54:cf:ec:81:a9:7d:15:34:f6:9f:33:36:08:ad:62:
03:ec:79:6c:15:31:36:02:b7:8d:0b:d1:91:22:12:4b:0a:fd:
ac:ee:3b:07:8b:f6:a5:f9:3f:7f:15:85:ee:bc:20:75:24:72:
29:cf:16:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:03 2026 by rpki-client