Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier: 2/EDrs06mtiEZRAOOVAyu8ePk5Qq2wGSkgNb+6gQzDs=
Subject key identifier: 50:FE:D4:90:24:82:CF:F2:CC:0C:A2:3C:91:02:66:D7:29:5E:38:06
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial: 01A0C28DA81995E0487DA3C1C57407A05D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number: 0333
Signing time: Mon 21 Sep 2026 06:00:58 +0000
Manifest this update: Mon 21 Sep 2026 06:00:58 +0000
Manifest next update: Tue 22 Sep 2026 06:00:58 +0000
Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: mepNC/CP4v5jDwNpYvY6DwiRWb+QZV2ySNwvHKcQVWA=)
2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:a8:19:95:e0:48:7d:a3:c1:c5:74:07:a0:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Validity
Not Before: Sep 21 06:00:58 2026 GMT
Not After : Sep 22 06:00:58 2026 GMT
Subject: CN=50fed4902482cff2cc0ca23c910266d7295e3806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:ab:95:05:c7:9a:b0:05:b5:4a:66:3f:35:
9f:02:a6:fe:39:93:45:3f:8f:e4:be:ec:5c:d3:c8:
ea:dc:26:fb:93:2c:27:0b:ef:2e:b9:fa:95:4d:49:
b7:a1:be:43:67:e2:d3:cc:73:eb:59:51:0d:d0:af:
99:60:27:fe:e8:2f:41:99:c5:60:cf:d2:89:ea:37:
e2:da:4e:f7:41:40:79:6a:bf:49:72:d4:9f:9e:a7:
a4:5d:2e:13:da:d4:ff:f2:44:15:4d:25:d4:22:b6:
5a:61:2c:8f:84:bd:0a:84:1c:8f:b4:b3:ea:89:18:
cd:3a:8b:81:58:a0:56:f5:bf:61:07:01:53:cf:58:
4d:6b:12:43:f1:95:6a:a0:3c:e3:02:74:37:44:2d:
04:d2:c2:bd:47:71:69:09:e7:a3:f5:21:5c:7b:d5:
6c:ad:54:d5:cc:33:6c:7a:a4:20:00:24:47:9e:a7:
9d:a9:55:df:8f:a3:27:54:e6:37:04:22:d6:b1:e3:
12:20:dc:84:2c:96:78:c7:03:4c:be:94:ff:3b:dc:
56:a5:c8:d6:00:ad:b2:08:3e:5c:30:9f:0c:19:18:
c1:b4:0b:6c:d6:5a:fa:52:e4:bd:64:8c:16:ff:c3:
99:4f:6b:81:c4:c4:c2:fc:f9:01:6d:9f:97:f3:86:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FE:D4:90:24:82:CF:F2:CC:0C:A2:3C:91:02:66:D7:29:5E:38:06
X509v3 Authority Key Identifier:
keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:60:6f:72:e2:56:15:c5:3c:1c:11:17:7f:a0:2e:58:7e:21:
d7:88:fb:1f:04:5e:bf:37:c6:a7:35:c0:f3:94:b2:87:f3:3a:
53:a5:08:1d:48:09:17:fb:ca:d6:43:8d:12:82:14:83:d7:ab:
c2:4a:a1:e9:c9:27:a0:7d:0b:f9:16:45:84:36:a5:19:d9:0f:
69:42:44:f7:f1:6a:76:bf:2d:31:bc:4f:cf:7f:fe:24:91:ad:
bc:43:fe:c5:75:ec:e5:5f:48:51:9c:5d:78:80:c4:f7:38:15:
08:52:5a:49:02:f8:c9:f7:36:6c:c3:a1:8e:eb:90:2a:f4:98:
dd:05:5a:b7:c3:76:55:da:50:ba:9a:87:49:a5:37:bb:36:ea:
a6:6e:c7:83:b7:9d:b4:38:1d:a4:10:10:a8:6b:71:ec:8d:a2:
00:b3:62:c1:e0:1c:c8:70:9e:4b:66:82:eb:c2:00:f7:7e:b7:
16:03:3b:3e:f2:e2:26:f2:3a:22:1a:36:38:33:b9:9b:7c:f7:
56:60:71:ec:9d:ea:40:e6:61:16:9b:ab:a7:4d:5f:f4:3d:ce:
15:b3:81:5e:ea:9e:a3:8d:2c:38:5c:a2:ef:ee:fa:dd:c6:17:
c1:5d:eb:5a:1a:20:ec:b5:6b:b6:c8:f2:91:9d:29:fb:46:cb:
df:e7:24:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:36:35 2026 by rpki-client