Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier: jG1Y5+j6swEk2kEQRMj1d1BUCiJdoMlOphDCFIX17q4=
Subject key identifier: C7:3C:77:09:64:3F:13:07:0F:7A:F7:FE:B5:61:94:3E:0B:A1:25:02
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial: 019EC0DB1A3E3487711E2A6B291E3A990504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number: 0229
Signing time: Sat 13 Jun 2026 12:00:45 +0000
Manifest this update: Sat 13 Jun 2026 12:00:45 +0000
Manifest next update: Sun 14 Jun 2026 12:00:45 +0000
Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: uJ3LPouPpgs6fkMYVNad7d3PO1tZioJBJivLNBuTA1Y=)
2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:1a:3e:34:87:71:1e:2a:6b:29:1e:3a:99:05:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Validity
Not Before: Jun 13 12:00:45 2026 GMT
Not After : Jun 14 12:00:45 2026 GMT
Subject: CN=c73c7709643f13070f7af7feb561943e0ba12502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:0e:b3:d1:ef:9d:75:8d:85:f2:2a:88:68:
73:cf:a7:ff:82:3d:ca:19:ba:73:68:94:fb:ee:c9:
42:0c:3e:26:6f:3f:e5:85:92:0d:f1:f9:f1:f2:ea:
82:76:a4:fd:74:69:28:ca:59:2c:57:ad:83:4e:da:
12:0d:c8:2d:ac:4e:fe:f6:f4:3b:bb:58:e4:21:9a:
17:c4:23:00:78:83:f8:34:7a:26:61:4c:ef:06:7a:
4f:e5:65:ac:dc:a7:6d:05:88:6c:eb:cc:74:0e:74:
c9:8b:ad:4a:80:ff:99:ba:17:b9:e3:b1:3a:10:b0:
11:37:b0:17:e3:79:2a:44:c7:53:2c:e8:3a:db:26:
1b:c8:78:48:56:20:97:95:74:f4:8d:c4:57:ba:89:
58:c0:79:65:1c:e4:32:fe:3d:b0:40:23:1d:7e:77:
a4:91:b2:1a:27:b3:49:b5:08:d0:c5:3a:81:4c:57:
ba:b9:99:cb:0a:20:b5:f1:92:13:cd:a9:b7:b4:65:
f7:61:a6:dc:ba:a1:da:e8:ee:96:cd:af:8d:41:10:
c3:68:2d:e1:5d:fa:e7:2b:31:10:c6:a2:b1:28:b0:
20:d5:86:76:76:d3:c7:47:25:de:0f:57:01:80:39:
98:8f:01:05:f5:09:9c:9f:ad:0d:73:32:64:ce:bf:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3C:77:09:64:3F:13:07:0F:7A:F7:FE:B5:61:94:3E:0B:A1:25:02
X509v3 Authority Key Identifier:
keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:24:53:56:44:84:c3:af:0e:93:6b:4c:70:36:d5:eb:f3:b7:
10:4a:78:ad:7e:0b:68:6b:fa:04:5f:eb:35:75:14:9b:60:55:
f3:0e:6a:7e:e7:cd:e0:c5:ce:b3:a7:5d:4c:47:92:5f:99:8f:
c1:4e:db:27:ae:e3:b8:94:73:ab:37:79:14:fe:17:50:59:12:
57:58:42:18:ea:e3:5b:9d:97:f8:df:9e:5a:27:cd:77:56:5c:
4a:7f:05:19:ae:33:3e:77:7c:18:a6:07:62:03:ed:f3:8f:4f:
ab:f0:d3:96:08:10:b9:1f:15:7a:60:83:5d:3b:be:11:04:46:
86:63:4d:4f:93:9b:ac:2a:04:b7:b5:1a:90:03:67:ca:db:56:
8a:65:94:6a:65:7d:29:43:80:a5:ec:41:cf:32:ec:29:67:c1:
ce:48:f8:d9:fe:c3:6e:bf:aa:bc:31:a1:9e:dd:6f:54:45:29:
cb:8d:d0:54:27:0d:89:8b:e1:05:3b:58:3d:4c:82:e1:18:11:
97:8a:08:7b:96:19:de:1e:69:31:a9:a1:2b:19:21:8d:e3:82:
7a:40:f2:7b:3a:6e:88:67:c7:ec:1b:46:4c:c7:d9:25:04:4b:
e5:a6:53:05:c9:32:2b:40:a7:77:42:9c:97:d9:54:52:e8:26:
ef:fa:81:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2xo+NIdxHiprKR46mQUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzJlZTVmMDE4OWVmOWI2NzE0MThlZDMzNmVjYjE3Mjhm
OTkyMGEwHhcNMjYwNjEzMTIwMDQ1WhcNMjYwNjE0MTIwMDQ1WjAzMTEwLwYDVQQD
EyhjNzNjNzcwOTY0M2YxMzA3MGY3YWY3ZmViNTYxOTQzZTBiYTEyNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpUOs9HvnXWNhfIqiGhzz6f/gj3K
GbpzaJT77slCDD4mbz/lhZIN8fnx8uqCdqT9dGkoylksV62DTtoSDcgtrE7+9vQ7
u1jkIZoXxCMAeIP4NHomYUzvBnpP5WWs3KdtBYhs68x0DnTJi61KgP+Zuhe547E6
ELARN7AX43kqRMdTLOg62yYbyHhIViCXlXT0jcRXuolYwHllHOQy/j2wQCMdfnek
kbIaJ7NJtQjQxTqBTFe6uZnLCiC18ZITzam3tGX3YabcuqHa6O6Wza+NQRDDaC3h
XfrnKzEQxqKxKLAg1YZ2dtPHRyXeD1cBgDmYjwEF9Qmcn60NczJkzr+eKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMc8dwlkPxMHD3r3/rVhlD4LoSUCMB8GA1UdIwQY
MBaAFG8y7l8Bie+bZxQY7TNuyxco+ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2Yt
OGU3NjEzODA0YzgwLzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2YtOGU3NjEzODA0Yzgw
LzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByRTVkSE
w68Ok2tMcDbV6/O3EEp4rX4LaGv6BF/rNXUUm2BV8w5qfufN4MXOs6ddTEeSX5mP
wU7bJ67juJRzqzd5FP4XUFkSV1hCGOrjW52X+N+eWifNd1ZcSn8FGa4zPnd8GKYH
YgPt849Pq/DTlggQuR8VemCDXTu+EQRGhmNNT5ObrCoEt7UakANnyttWimWUamV9
KUOApexBzzLsKWfBzkj42f7Dbr+qvDGhnt1vVEUpy43QVCcNiYvhBTtYPUyC4RgR
l4oIe5YZ3h5pMamhKxkhjeOCekDyezpuiGfH7BtGTMfZJQRL5aZTBckyK0Cnd0Kc
l9lUUugm7/qBOA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:09 2026 by rpki-client