Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
File: BkizODOZAP9_O1myRtJNJofGNnw.mft (raw, json)
Hash identifier: DXx7x5CR4Dh1vcbYLVK8Kcosqp1FQAcGzZ6zhKoWCXU=
Subject key identifier: 6E:9A:8D:9F:20:AE:80:2D:E2:35:BC:DE:3E:25:8F:B5:ED:72:3B:95
Authority key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
Certificate issuer: /CN=0648b338339900ff7f3b59b246d24d2687c6367c
Certificate serial: 01A12C2028ABB2C649652ADFBABDFD97C46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
Manifest number: 061A
Signing time: Sun 11 Oct 2026 18:01:07 +0000
Manifest this update: Sun 11 Oct 2026 18:01:07 +0000
Manifest next update: Mon 12 Oct 2026 18:01:07 +0000
Files and hashes: 1: BkizODOZAP9_O1myRtJNJofGNnw.crl (hash: W5qS+UmiwKkiJgluvt4ermnR71frIFas7QZw4l8H0Ig=)
2: cfmhFWxRmQMPqxzLZOdLCKBVtII.roa (hash: hnNzoR6kq2MH8dzC1wQ5EZyQAUNnpRqddoSLhzjNpPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:28:ab:b2:c6:49:65:2a:df:ba:bd:fd:97:c4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648b338339900ff7f3b59b246d24d2687c6367c
Validity
Not Before: Oct 11 18:01:07 2026 GMT
Not After : Oct 12 18:01:07 2026 GMT
Subject: CN=6e9a8d9f20ae802de235bcde3e258fb5ed723b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:ea:77:81:4b:be:be:9c:ba:02:0e:20:fe:
3f:78:ad:b5:88:d4:ee:64:e0:ce:aa:f5:b8:19:e1:
44:b2:b4:6a:5d:f9:ae:fb:d1:d9:19:8e:a1:a7:bb:
5f:17:f6:8a:c4:95:29:7a:55:b2:0f:d7:e7:9d:26:
2e:81:2d:2f:92:92:26:98:4a:e4:8e:02:ca:a0:4f:
74:5e:76:93:b9:a6:29:df:da:c0:69:58:82:ef:6f:
02:3a:f4:37:ac:21:ee:d2:16:26:ed:df:c0:eb:47:
42:49:ef:e5:dd:f0:6b:4e:21:09:f2:d7:85:28:09:
01:f1:ca:49:b5:b4:fe:59:3c:3f:92:77:09:bb:5b:
30:84:8a:75:61:0c:c1:9c:d4:68:f3:f5:a8:b9:b4:
24:01:1c:a8:42:23:d6:95:53:0a:24:6e:8d:9b:cd:
3b:11:13:65:92:e4:fd:ec:60:bf:0b:d3:ef:7e:b1:
b3:d8:f4:54:cb:64:f9:9a:df:a5:44:65:36:cb:70:
a1:2b:8d:9d:76:65:f1:19:13:88:bf:c6:3b:08:f3:
9b:a8:82:03:ba:ed:c3:8a:1d:f6:70:e8:08:a8:75:
15:8f:c2:78:a8:7c:50:8e:e9:65:1d:fb:9b:8c:61:
4b:f0:ef:f9:45:e6:3f:a3:73:4e:ea:9c:12:2a:e3:
15:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9A:8D:9F:20:AE:80:2D:E2:35:BC:DE:3E:25:8F:B5:ED:72:3B:95
X509v3 Authority Key Identifier:
keyid:06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:79:5a:e7:f7:9b:23:28:1a:47:dd:c6:d3:d4:12:d1:4c:9d:
05:1c:3c:6e:fa:44:a6:31:3b:6f:47:c1:ba:80:47:33:80:c3:
f5:bf:74:3e:2d:fc:4e:84:21:00:2b:75:81:88:12:68:0c:8f:
1c:9f:2b:d7:72:b8:2c:66:66:99:be:79:70:2c:77:fb:56:cf:
4f:c2:87:19:79:db:44:82:70:bd:60:bd:56:1a:48:c0:3c:33:
fd:5f:73:44:cb:ca:81:ba:e9:75:43:e4:14:92:40:c9:e4:cf:
f5:30:db:81:b1:e5:5f:93:bc:09:41:a3:ad:a6:de:fb:4a:e1:
e7:86:a7:39:c4:24:8a:ec:db:7e:04:2c:9a:18:ce:a6:c1:62:
17:e0:19:5b:81:06:c5:91:ea:09:d9:e3:6e:40:ea:bf:fc:ec:
f8:6e:45:82:e1:96:69:59:03:03:cd:30:1b:5b:e4:83:78:e0:
c4:85:39:eb:dc:9c:ea:e0:c6:49:cb:e3:a5:70:d1:af:8a:c3:
bd:6a:46:1a:55:eb:84:57:11:b7:ca:6b:cb:5a:40:03:ca:d7:
97:79:73:e4:50:c9:4f:61:f3:f3:fc:3e:4c:26:b5:ad:3e:8b:
7d:3a:dc:ef:2b:2f:c5:f8:fe:f2:1f:fb:59:6f:ca:84:ca:da:
8f:39:0b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:35:10 2026 by rpki-client