Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
File: BkizODOZAP9_O1myRtJNJofGNnw.mft (raw, json)
Hash identifier: YMyrJLyB1vMXZn0wG2D1SjlwuMLDnqB5WiMMhRV9Zco=
Subject key identifier: E3:C9:0D:85:37:DA:C4:2B:8D:05:B4:56:14:63:0E:65:45:28:35:6B
Authority key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
Certificate issuer: /CN=0648b338339900ff7f3b59b246d24d2687c6367c
Certificate serial: 019CAD223877566966C71C17595D17D9F70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
Manifest number: 03C6
Signing time: Mon 02 Mar 2026 06:00:26 +0000
Manifest this update: Mon 02 Mar 2026 06:00:26 +0000
Manifest next update: Tue 03 Mar 2026 06:00:26 +0000
Files and hashes: 1: BkizODOZAP9_O1myRtJNJofGNnw.crl (hash: X3FBhIAcnuOgWzs6ysviEnP4RbhC+S/OG+XAa1IlhF4=)
2: cfmhFWxRmQMPqxzLZOdLCKBVtII.roa (hash: hnNzoR6kq2MH8dzC1wQ5EZyQAUNnpRqddoSLhzjNpPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:38:77:56:69:66:c7:1c:17:59:5d:17:d9:f7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648b338339900ff7f3b59b246d24d2687c6367c
Validity
Not Before: Mar 2 06:00:26 2026 GMT
Not After : Mar 3 06:00:26 2026 GMT
Subject: CN=e3c90d8537dac42b8d05b45614630e654528356b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:a7:44:ba:00:27:64:a7:3b:d4:c7:4b:ef:
97:10:50:0e:97:31:8c:31:47:53:cb:c5:79:5b:fb:
a8:e2:f1:4a:f9:d7:33:68:6e:1d:c3:20:16:4d:8f:
0c:eb:de:0c:f1:5e:ef:bf:2a:9c:c1:f7:b8:e3:d4:
c0:e1:6b:ac:4a:11:a3:15:c3:ce:04:75:53:44:61:
79:e0:f4:af:b0:20:b5:b2:aa:ab:d6:a9:74:d9:5f:
e6:04:cb:65:99:6d:df:cd:8b:77:77:0c:31:d6:ce:
c8:5e:e4:41:59:28:fe:ba:55:af:dc:5d:63:70:36:
0a:68:51:d7:7f:c5:07:b2:88:00:3b:2f:3d:bf:df:
99:17:84:81:0e:64:29:fb:2f:06:95:c6:de:cb:6c:
37:69:45:d1:e4:15:d9:20:98:65:ab:b5:6b:74:b6:
b5:f7:02:e4:ba:56:1f:12:0e:48:a3:d7:10:19:11:
a1:e7:6a:b1:f9:24:0e:09:0b:1d:b1:18:d5:4b:bf:
a3:c5:33:72:d6:79:20:d5:53:1b:cf:b1:ec:59:8e:
ea:a5:d1:d6:70:53:59:29:e9:d7:50:d5:68:d1:c6:
60:e8:7c:e3:c7:18:23:d5:74:23:06:ab:21:fa:e3:
4f:5b:fa:52:bd:27:8e:08:ef:7f:4d:d8:46:0c:44:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:0D:85:37:DA:C4:2B:8D:05:B4:56:14:63:0E:65:45:28:35:6B
X509v3 Authority Key Identifier:
keyid:06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:70:0d:1d:4a:ed:f5:d6:08:7e:3b:03:b8:ce:9e:92:e6:4d:
50:c1:be:b7:82:8f:54:18:1f:56:5a:43:91:b3:32:0c:f0:c1:
c0:1b:92:4c:51:fa:13:ff:85:1a:19:14:de:27:bb:2f:c2:34:
15:26:1e:b9:e0:3d:99:fd:e1:52:a6:a5:df:d2:9a:d6:36:c5:
cc:4c:38:68:8b:82:b2:5a:1c:20:d1:21:2f:68:3c:0a:50:49:
c9:7b:b8:1a:e2:04:11:72:9c:64:c7:54:d5:c2:24:10:0f:54:
15:54:40:0d:56:de:77:45:f5:ba:31:e0:af:18:5b:c7:a9:ad:
5a:64:9c:96:50:11:c4:ab:46:97:c4:32:15:75:94:2d:95:69:
85:f4:59:ac:02:39:dc:61:2b:7e:f2:86:20:e0:69:03:81:a3:
bc:a2:7f:ac:1a:a1:c6:2a:00:c5:88:84:cc:74:e9:3b:a8:d4:
0f:10:2c:e3:c9:3e:ea:3e:f0:1e:6d:7e:3d:c1:21:a2:38:45:
e5:0c:c3:5f:86:fe:cd:cd:5f:92:71:6d:68:13:9d:20:64:a8:
01:11:76:2d:94:1a:c7:d5:e9:6b:33:85:fe:56:8b:2a:7c:82:
20:0b:67:a7:14:5e:eb:e7:f3:1a:3e:71:a6:29:57:4e:96:bc:
ea:88:17:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:52 2026 by rpki-client