Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: f/g69x/lpStvMskItckXqcAOi9gXLUtZv7XtORD7DU0=
Subject key identifier: E1:B0:32:01:40:C6:39:6D:0A:61:80:24:BA:DE:87:32:DE:F9:EE:16
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 019DA2D34776C59DD1D82D316EBC821D2381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 0769
Signing time: Sat 18 Apr 2026 23:00:48 +0000
Manifest this update: Sat 18 Apr 2026 23:00:48 +0000
Manifest next update: Sun 19 Apr 2026 23:00:48 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: EaSCEiYUHe7Af3Zxxj2gnXo07dy2o3KqQZ4nP3eLRLE=)
2: nN-ju_64Z90TCxYhBDeQTLTn6vo.roa (hash: 8L8/L9YEesxygj4vPAkV5W3fYmJFnHglj85qEirp6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:47:76:c5:9d:d1:d8:2d:31:6e:bc:82:1d:23:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: Apr 18 23:00:48 2026 GMT
Not After : Apr 19 23:00:48 2026 GMT
Subject: CN=e1b0320140c6396d0a618024bade8732def9ee16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:2d:ff:02:b8:b9:49:f3:05:16:2c:78:ec:
dd:22:5c:e3:67:63:e2:5a:49:32:51:03:5f:fb:3a:
76:1d:d0:91:f7:04:4e:47:ab:8b:aa:9d:a6:4f:8d:
71:c4:bf:5e:52:f0:71:15:6d:66:fe:d9:a4:62:5c:
bf:1c:f9:8a:f7:71:cc:05:a6:da:62:3b:f6:d1:05:
40:b7:d4:1d:92:ad:b7:6e:ab:a0:dc:dc:78:fc:27:
75:8e:f8:c7:81:85:e2:47:fd:99:a0:c6:33:b1:8a:
ab:ab:3f:1a:20:31:37:9d:29:04:a6:fd:1e:f1:22:
f9:1d:95:9e:be:91:f9:6c:60:b0:d1:9a:71:72:a5:
52:04:f4:8e:4d:8f:d7:c7:eb:3c:19:4d:10:ea:21:
65:40:5f:b1:13:e3:18:d4:22:a0:0e:f4:64:d1:8a:
2b:8b:7d:6a:fc:db:20:0b:13:54:27:04:47:ba:34:
6e:8f:86:55:47:45:b7:b7:38:17:80:f3:72:7b:38:
92:9d:61:8e:74:b5:27:8f:c7:90:9c:5a:a9:78:f0:
3e:00:0c:81:ec:a2:b2:e0:2b:4a:17:96:42:ac:d4:
3e:df:c1:08:d9:ea:1f:b5:a8:6c:ae:07:77:db:80:
a9:9e:1e:03:da:b9:43:dc:b6:79:17:bd:b0:ab:aa:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B0:32:01:40:C6:39:6D:0A:61:80:24:BA:DE:87:32:DE:F9:EE:16
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:1e:fd:49:b4:38:ce:67:8f:f5:06:11:b8:77:a8:c9:7f:71:
3b:00:40:2d:b2:1a:89:66:52:b4:4c:42:37:21:5c:dc:3a:d8:
be:18:7b:de:21:a9:1c:34:8e:dd:2d:30:0d:4d:25:1a:0e:7d:
57:8f:8e:43:fb:b5:81:44:92:ee:28:3b:9c:b3:14:78:09:b9:
59:b7:d9:8a:18:2f:1f:d9:57:3b:0c:50:2f:b1:07:a8:4d:e5:
2c:fe:48:36:a4:1a:59:80:7d:ec:b7:b2:e7:bc:f3:0b:73:4c:
e3:37:2b:0e:74:ed:d9:97:af:4b:58:3e:8d:f0:97:3d:0b:63:
41:b8:ed:9d:95:7b:d8:81:30:b8:84:da:7a:db:65:00:83:f2:
b8:6b:4f:e2:b0:f1:cc:d7:14:bc:7d:eb:33:8c:c0:89:c2:47:
ce:93:49:bb:28:54:7d:67:71:9a:ad:05:b7:55:05:9f:cf:4a:
07:50:be:fe:1f:f1:20:2c:b1:77:1d:9f:89:1f:cd:c9:0d:97:
f8:59:15:a8:ba:e0:a4:01:53:c6:90:83:d0:07:02:e9:4b:77:
a7:7a:e2:a4:09:77:f4:d1:e6:38:54:05:3f:ed:6f:2c:37:48:
c9:da:ab:3b:7b:53:1d:f2:4e:05:06:24:d9:3b:e1:79:b2:5a:
f9:84:37:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:35 2026 by rpki-client