Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: cIZq3m0bJore3UsLmWXf3bmKu2pCzZ2HhRrHMKufCJ0=
Subject key identifier: DF:79:33:00:03:07:CD:EE:C2:51:8E:4C:16:51:E2:18:CF:83:86:D2
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 019CABA1E0E9C34F95F82677822BF54A7C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 06E9
Signing time: Sun 01 Mar 2026 23:00:38 +0000
Manifest this update: Sun 01 Mar 2026 23:00:38 +0000
Manifest next update: Mon 02 Mar 2026 23:00:38 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: OEC1/0LjQd5jWvZpYOXw9F6sVaI2ejt0ArGU+K3Hro8=)
2: nN-ju_64Z90TCxYhBDeQTLTn6vo.roa (hash: 8L8/L9YEesxygj4vPAkV5W3fYmJFnHglj85qEirp6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e0:e9:c3:4f:95:f8:26:77:82:2b:f5:4a:7c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: Mar 1 23:00:38 2026 GMT
Not After : Mar 2 23:00:38 2026 GMT
Subject: CN=df7933000307cdeec2518e4c1651e218cf8386d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:fa:97:46:3e:33:64:cc:31:65:56:4f:63:
87:ee:a6:19:d5:ea:66:8c:a5:96:69:16:f3:8a:5c:
af:ad:c6:9e:d3:28:b4:c4:8f:bc:b0:8d:e5:cd:7b:
b9:0d:e1:91:74:97:2f:ef:b6:36:0b:ff:8d:e1:1d:
76:76:b8:bd:67:cf:ae:44:ed:1d:fb:c5:61:bc:85:
b2:f8:00:97:be:46:fc:71:6a:1f:38:f9:de:07:a0:
23:ee:94:87:0e:5f:08:35:4b:ad:42:57:09:12:89:
5a:d3:0c:dd:f2:ef:b1:02:49:1a:fd:bf:4e:ab:73:
2b:8b:aa:71:e6:46:3b:f5:9f:e8:c2:5f:f7:77:aa:
46:e7:d1:cd:ec:4e:31:f3:98:cb:d8:f9:22:4c:3e:
20:26:4e:5f:f6:d6:86:c6:cd:59:47:69:bc:a0:68:
ea:de:28:71:25:b8:f7:ad:50:71:0b:4c:d2:a0:9d:
e9:05:91:ca:df:51:ad:04:50:a0:87:80:bf:57:b0:
48:6b:e1:b6:91:cb:dc:72:92:00:86:3d:b2:56:27:
55:2b:e6:4c:9d:97:15:f4:02:a7:df:1c:e3:1d:04:
c2:78:a4:f5:fe:5e:d5:b3:a8:17:c9:d0:36:10:73:
1d:8d:0b:3a:81:a2:39:8a:ac:33:64:02:e8:3a:aa:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:79:33:00:03:07:CD:EE:C2:51:8E:4C:16:51:E2:18:CF:83:86:D2
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:32:cd:f9:3a:1f:a1:af:ef:7c:60:ec:c9:dc:5a:1e:79:
6a:e0:0a:9b:cb:ef:7c:00:20:16:c4:3a:fd:18:af:15:f0:6c:
69:d4:7f:10:b4:e7:b4:93:60:76:88:58:c2:b1:75:4f:f7:92:
07:6b:b4:51:f0:89:6b:fe:95:fd:29:42:60:8d:87:a6:40:b6:
ee:d2:bf:49:71:15:2b:a5:2d:0e:f1:b9:20:ec:7a:81:59:95:
38:bf:b2:8f:c5:9b:5a:a6:83:d7:e4:16:58:d0:eb:40:6d:20:
ce:ac:18:f3:93:00:d8:d6:36:52:1c:ea:d7:b4:12:17:77:09:
e5:18:f5:b2:9b:47:96:26:11:8b:1f:7f:49:64:c8:1b:20:ac:
56:d7:6e:c4:cb:00:6e:70:7a:52:b9:22:75:66:7f:50:c8:20:
10:8c:82:64:be:1c:b6:eb:95:c2:3e:74:76:1a:12:cb:1d:c5:
1d:c4:bf:b5:28:63:ce:54:be:de:60:c9:7a:f0:e2:17:60:82:
50:01:9d:df:8f:e9:3a:01:5d:5a:ef:a8:87:d7:de:de:5d:42:
4d:13:f3:ef:50:29:14:8c:ff:65:f6:d5:83:36:e0:45:85:8c:
3e:8e:21:2f:b7:13:a4:55:db:44:04:07:bb:e3:db:c9:cf:4b:
d5:c7:13:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:21:50 2026 by rpki-client