Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier: 3nAA2VIOX2DLALli+8olIZpd5Kwg00H9MsOfUXKSUNc=
Subject key identifier: C8:D9:B1:A3:28:2F:31:01:4E:69:4A:EA:7A:42:FC:30:6A:01:13:FB
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial: 019DA4F962222540F0F89A2F3701B94481C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number: 0196
Signing time: Sun 19 Apr 2026 09:01:40 +0000
Manifest this update: Sun 19 Apr 2026 09:01:40 +0000
Manifest next update: Mon 20 Apr 2026 09:01:40 +0000
Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: OcSfXFyj0kS2acVaF9WcJzl6WOwP6DW/tCol4SNIHmc=)
2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:62:22:25:40:f0:f8:9a:2f:37:01:b9:44:81:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Validity
Not Before: Apr 19 09:01:40 2026 GMT
Not After : Apr 20 09:01:40 2026 GMT
Subject: CN=c8d9b1a3282f31014e694aea7a42fc306a0113fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:ac:ed:20:d4:6f:03:a9:63:0d:77:53:8e:
74:2b:90:66:de:5c:d3:72:e3:60:aa:a5:35:51:82:
fe:22:2d:e5:d5:20:23:22:46:47:95:9d:da:3d:bf:
96:c4:c6:3e:13:3f:5d:55:e0:b1:14:40:28:e0:f3:
75:34:1d:dc:2a:f9:77:7c:df:fa:97:8c:4e:e1:5e:
5e:a9:bc:26:84:ef:6a:43:b6:3a:53:f9:83:63:a2:
10:8c:5f:e1:c3:57:cf:5d:f5:07:ed:88:17:ce:34:
2c:fc:97:04:4e:55:db:e8:1b:37:41:78:46:1f:b8:
a5:2e:16:9e:22:6b:fd:f2:49:c4:27:01:26:92:1a:
f0:e7:87:01:b4:3f:d5:31:55:1f:06:3c:92:ea:e1:
84:0f:17:1e:07:93:87:50:73:d6:79:47:72:88:0b:
aa:06:6e:cc:df:41:dc:bb:fb:24:8a:0a:47:0d:74:
08:64:1e:cc:64:40:4c:28:1d:e3:16:d9:6f:1a:59:
a3:4e:98:60:ea:8b:d8:d0:b0:27:e3:6e:63:85:99:
80:b5:05:a9:6b:10:75:56:72:c7:3c:ab:74:43:6a:
61:5d:dc:20:a3:84:45:e4:06:2b:06:38:5a:9b:15:
3b:8c:f9:08:71:df:41:3e:93:53:7d:ca:e6:65:a6:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D9:B1:A3:28:2F:31:01:4E:69:4A:EA:7A:42:FC:30:6A:01:13:FB
X509v3 Authority Key Identifier:
keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a7:86:ea:19:a6:ae:a1:91:9e:6a:62:69:51:a4:12:ac:51:
e7:d3:96:65:57:3b:68:fa:c2:f4:e9:57:20:17:23:ac:c3:02:
27:68:4a:25:95:0b:ae:76:42:57:b0:84:3b:10:06:0f:ec:87:
14:c5:a5:1f:f3:ec:23:03:50:00:33:39:88:2e:3a:fc:c0:b8:
5c:87:3e:b4:29:aa:f9:22:e0:49:17:1c:4d:0e:89:4a:00:d3:
c4:a8:96:2a:fa:4a:66:14:e9:da:33:d3:e9:63:46:80:dd:4f:
1f:da:6e:cb:0e:54:bf:b3:60:d0:29:05:27:75:47:e0:18:1c:
f6:6f:b5:de:79:28:b4:3b:64:dc:4c:4d:26:bf:ed:74:95:01:
bb:76:7b:5d:bd:97:1e:e2:cd:4b:a5:7a:13:ca:f7:f6:06:21:
d5:8b:c0:09:b7:c0:b3:5b:7e:34:ab:33:d0:8b:1c:7c:cc:32:
1b:4d:dc:6b:14:1d:07:15:ad:77:38:18:ee:70:c9:d7:58:21:
e9:98:73:53:87:25:ad:da:79:df:e5:b9:76:f5:28:22:db:f3:
1c:70:7e:9b:a2:c1:6d:65:85:06:f3:7f:f7:a1:b2:f1:56:f4:
6b:15:fd:77:c3:85:8e:43:dc:31:4a:c3:9a:ab:2e:c2:51:ff:
96:dd:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:09:09 2026 by rpki-client