Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: 4ztgmkdLPmyHHg6ZxFPK19DH6H5wFmCjyWFz/QrEJes=
Subject key identifier: 97:4A:F3:83:82:97:D5:CE:E9:89:72:53:73:FB:84:2F:64:D6:9B:56
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 01A1C51EA087D12E3F697F292663F2A62AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 098D
Signing time: Tue 10 Nov 2026 11:01:21 +0000
Manifest this update: Tue 10 Nov 2026 11:01:21 +0000
Manifest next update: Wed 11 Nov 2026 11:01:21 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: KQ7bqUBbQXCAB0JG0TDDUB/rojXAvDMuSn3l0uzHsT8=)
2: nN-ju_64Z90TCxYhBDeQTLTn6vo.roa (hash: 8L8/L9YEesxygj4vPAkV5W3fYmJFnHglj85qEirp6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:1e:a0:87:d1:2e:3f:69:7f:29:26:63:f2:a6:2a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: Nov 10 11:01:21 2026 GMT
Not After : Nov 11 11:01:21 2026 GMT
Subject: CN=974af3838297d5cee989725373fb842f64d69b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:06:7f:0d:50:b2:bf:31:ef:fc:0d:73:0d:
18:4f:7b:fc:f6:5d:a0:bc:a2:f9:9e:25:42:c0:25:
97:43:45:b8:e5:4d:fa:dc:7c:f4:ae:2e:6d:fd:38:
ca:3d:bf:20:cf:09:be:79:a2:a0:81:93:86:8c:c0:
82:a4:5d:2e:e4:fa:ed:6c:b0:32:b1:26:f1:41:5f:
08:d8:9b:f3:4a:0a:39:20:fb:6f:d8:bf:aa:1c:2d:
f2:f2:d0:10:46:f4:e1:d7:cc:0b:97:06:61:d6:3f:
f7:2d:d6:11:64:a2:d9:84:39:4f:f1:c9:d7:f8:d0:
ab:a7:aa:3f:c8:bc:5d:b1:22:c2:2f:fd:0e:71:3d:
e5:4d:52:57:4b:8b:9c:90:f4:8d:60:09:15:65:90:
0e:d3:39:18:62:47:e5:3c:af:cf:53:68:bf:de:d9:
75:36:21:46:83:da:33:e2:bb:db:bf:bd:a3:50:44:
82:64:b1:a8:2d:22:0e:1e:f0:d2:ec:5c:59:dd:c9:
30:bd:32:2a:8f:ed:49:e6:d6:b3:f5:b4:76:cc:f1:
8b:90:a1:16:f9:7c:ef:9a:ef:c1:ba:d5:5c:b1:2b:
e0:d7:5d:47:94:8a:c3:76:22:7d:a5:fb:a8:58:b9:
b6:3e:9d:cc:97:87:1c:90:ff:09:50:96:3b:c2:bc:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:F3:83:82:97:D5:CE:E9:89:72:53:73:FB:84:2F:64:D6:9B:56
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d8:7b:89:86:b5:ea:52:06:96:aa:a1:82:f9:4c:63:97:96:
50:ca:4a:a4:8a:48:8a:c6:2d:12:30:ed:d3:93:0d:0a:85:b2:
37:0f:5f:9e:91:64:ff:c1:a3:a4:d2:c8:8d:ed:30:0c:3e:9f:
85:ed:8b:e8:13:73:07:bd:f5:2b:51:47:4d:e4:ce:89:33:a2:
f5:c7:9b:d5:40:df:63:3c:fb:83:00:df:85:de:d8:c4:c9:a7:
bd:5e:78:47:ed:44:c4:61:63:b3:c9:73:16:0e:f9:1b:fd:59:
3a:e8:e0:f4:d0:c3:80:eb:b4:92:fe:5e:44:bf:9c:91:00:83:
36:f9:3a:00:45:82:91:4e:9c:35:6b:0c:98:41:23:bb:21:9a:
38:1f:bf:fb:eb:c7:6d:4b:72:a7:63:43:1e:14:77:2b:8f:69:
d4:9f:36:bf:da:a1:74:ab:34:04:e6:b5:0c:46:0d:ef:1c:f9:
a9:85:71:d7:4f:35:fa:8c:0e:eb:bc:6a:35:4d:1c:5b:c2:ea:
54:ef:5c:79:bd:97:55:c9:d2:e6:e3:9b:a3:94:9c:46:23:eb:
dd:87:44:dd:6a:22:a8:d2:c1:8b:10:6b:12:3b:fa:d1:ab:42:
7a:09:c5:8b:5e:b3:18:51:65:39:6c:84:f4:67:ec:1b:60:1e:
d4:d3:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:07:11 2026 by rpki-client