Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: FEyegWPLJaCfIT5xHrTWZsMTnjOwKbjQfuGDuU4OA7c=
Subject key identifier: 47:42:AD:BD:F4:5C:F2:C8:45:6F:5A:41:14:23:60:14:AC:90:CB:B7
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 01A0C821E31B5354A3CD7D02AB805FC90F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 090A
Signing time: Tue 22 Sep 2026 08:00:59 +0000
Manifest this update: Tue 22 Sep 2026 08:00:59 +0000
Manifest next update: Wed 23 Sep 2026 08:00:59 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: /ccFdVLth+10zp+eTWHGTbsvOBR2yc9FXpdedVZ3xHw=)
2: nN-ju_64Z90TCxYhBDeQTLTn6vo.roa (hash: 8L8/L9YEesxygj4vPAkV5W3fYmJFnHglj85qEirp6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:e3:1b:53:54:a3:cd:7d:02:ab:80:5f:c9:0f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: Sep 22 08:00:59 2026 GMT
Not After : Sep 23 08:00:59 2026 GMT
Subject: CN=4742adbdf45cf2c8456f5a4114236014ac90cbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:c1:8d:2f:90:57:cd:62:b3:a4:7d:24:48:
87:86:69:90:24:f3:fb:44:a5:89:38:ad:7d:29:b5:
b0:0b:33:21:0e:09:dd:d7:5e:1f:53:fc:b1:94:2a:
c2:c4:06:ca:fe:97:06:33:1c:9f:b2:25:e8:4e:a5:
f0:81:f7:6e:34:dc:16:41:0f:56:c7:ac:ef:29:f3:
27:27:96:85:24:c9:d3:a6:23:10:0d:af:ee:93:3c:
15:a3:f1:7f:0f:bf:bb:80:32:46:b0:64:ef:e4:3f:
fb:fb:40:90:82:a0:71:4b:65:31:38:c9:90:d5:3f:
dc:ad:e7:67:c4:53:d2:48:a0:17:64:15:f2:75:78:
ee:14:34:bd:17:cf:37:09:32:71:17:62:c7:6c:2f:
43:3d:f6:76:04:c7:99:06:38:eb:a3:65:ba:c9:d8:
fa:78:d7:5a:c1:70:69:01:7a:fe:a2:68:0d:b4:50:
71:3a:81:98:c7:47:fa:eb:be:56:5d:ee:4a:4b:5e:
c1:aa:29:05:0d:41:62:8a:0f:49:5f:ff:22:1f:29:
c9:61:5e:26:b2:6f:96:e6:76:c2:67:f8:cf:a1:06:
02:da:57:ec:2f:1f:f0:99:c9:8d:f3:b6:16:61:a9:
71:38:ed:3e:ce:61:32:aa:80:17:cd:69:93:fb:e1:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:42:AD:BD:F4:5C:F2:C8:45:6F:5A:41:14:23:60:14:AC:90:CB:B7
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3b:e0:b9:d5:24:9c:2d:53:27:97:b2:79:c2:9c:87:8b:1e:
b7:71:04:3f:ae:36:9f:fc:bf:36:05:ee:59:47:73:84:16:55:
ae:5d:8d:b8:b7:01:5e:7a:97:7a:c9:61:34:7c:d7:9e:1a:60:
35:a1:53:73:83:8f:61:77:c3:d5:35:b3:20:54:e6:61:66:20:
55:0c:bd:16:ca:ce:ed:c4:3a:c9:db:a5:ca:50:59:42:f5:ec:
31:88:4e:32:7a:94:62:da:2f:38:9f:8c:e1:4c:a6:30:73:28:
64:ec:7e:42:1b:47:29:87:85:e5:1d:c1:c5:a9:aa:87:ff:f7:
08:a9:32:6a:71:7e:ec:15:f0:46:78:f6:f9:17:03:e0:83:5a:
1e:aa:75:43:eb:93:2f:72:e5:a5:69:73:87:03:4c:6c:3b:bd:
9c:c1:27:74:73:9b:cf:d6:3f:30:49:98:dc:71:70:81:29:67:
5f:75:cb:bb:b7:46:05:02:e8:b3:93:e3:cb:65:51:37:64:ad:
2c:54:46:32:69:6d:08:f2:40:bb:b6:7d:0f:33:72:69:1b:84:
24:c0:10:a3:9e:1d:82:90:32:86:2f:84:92:7f:c6:e4:80:6e:
f8:5a:d0:4a:2d:5c:f1:f0:55:dc:2a:9d:3e:c7:5c:95:02:63:
7c:11:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:34:57 2026 by rpki-client