Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
File: BkizODOZAP9_O1myRtJNJofGNnw.mft (raw, json)
Hash identifier: sSzVbLmYoCdOBKiJEvu5oxcqe7G6mftA6eCdXcpCank=
Subject key identifier: 34:68:DB:EE:F1:50:2A:5A:DF:3D:01:E3:0A:28:DD:19:31:20:8D:B2
Authority key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
Certificate issuer: /CN=0648b338339900ff7f3b59b246d24d2687c6367c
Certificate serial: 019DA453F82410908D72EFC4BC996A0BDA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
Manifest number: 0446
Signing time: Sun 19 Apr 2026 06:00:59 +0000
Manifest this update: Sun 19 Apr 2026 06:00:59 +0000
Manifest next update: Mon 20 Apr 2026 06:00:59 +0000
Files and hashes: 1: BkizODOZAP9_O1myRtJNJofGNnw.crl (hash: /PAcda763UwErwBJqDZ58UO0yIyT/mz9mTqLAyIkTB4=)
2: cfmhFWxRmQMPqxzLZOdLCKBVtII.roa (hash: hnNzoR6kq2MH8dzC1wQ5EZyQAUNnpRqddoSLhzjNpPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:f8:24:10:90:8d:72:ef:c4:bc:99:6a:0b:da:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648b338339900ff7f3b59b246d24d2687c6367c
Validity
Not Before: Apr 19 06:00:59 2026 GMT
Not After : Apr 20 06:00:59 2026 GMT
Subject: CN=3468dbeef1502a5adf3d01e30a28dd1931208db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:f5:24:ea:0a:56:d3:f6:a2:89:b7:b8:d3:
7c:22:14:ed:e2:d8:65:1f:a3:be:9d:1b:fe:81:8b:
99:bd:bd:df:34:e7:e8:04:10:0e:da:86:ea:8c:b3:
dc:d5:ae:a9:48:c6:9f:23:5d:35:88:ea:89:82:e1:
8c:b0:52:4f:03:e7:e9:db:d8:fb:13:b9:d6:bf:7d:
e5:5c:21:4c:0e:cc:d6:af:34:5a:ad:c2:e2:4b:12:
cb:43:9e:54:69:ba:9b:08:fb:23:37:48:f4:a9:19:
0a:f6:29:9b:27:d9:ba:c7:9b:1a:91:d2:6f:f4:78:
d2:88:5b:7f:bf:97:c1:f3:89:c2:fa:a7:2d:7f:39:
28:17:ec:24:81:13:b9:7a:e8:e7:9f:a4:e8:6a:0b:
07:45:be:af:3a:bb:3a:49:f5:0d:12:8f:6d:54:02:
c0:4f:9d:5f:e8:8c:c8:6c:36:24:8e:84:55:1f:44:
58:20:42:b9:e5:be:e6:dd:4e:84:77:21:57:6d:68:
71:b1:9c:0f:4a:1d:a8:37:f3:72:5e:b4:49:93:c6:
1e:80:3e:64:68:4a:7a:15:5e:0d:da:05:fb:d5:27:
aa:73:6a:e4:71:23:01:f4:da:ee:09:3c:46:01:f0:
66:ff:a5:19:32:e1:2e:71:ba:a6:fc:4b:e9:43:85:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:68:DB:EE:F1:50:2A:5A:DF:3D:01:E3:0A:28:DD:19:31:20:8D:B2
X509v3 Authority Key Identifier:
keyid:06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:21:d7:14:c8:d0:b3:b6:a8:d3:88:6f:52:0c:92:f0:23:ed:
44:0e:dd:5a:6e:60:7e:12:59:87:de:a7:53:87:37:36:de:ee:
33:e3:f3:5d:a7:eb:82:30:09:1c:7e:61:f6:18:08:c4:a4:1c:
9b:02:d1:5f:26:39:42:ea:5e:99:23:8b:f6:98:2c:a2:46:a6:
b9:86:eb:e8:76:87:cf:ec:98:b1:6e:07:97:8c:34:40:6f:a6:
1b:dc:a4:35:2d:70:98:95:e5:94:12:11:98:37:7f:15:4f:d9:
78:fc:bd:80:d8:04:ff:70:fd:67:25:18:45:1e:e6:36:a5:dc:
92:9b:fc:4a:fe:75:d0:e7:e6:a8:6e:e3:17:0b:0a:e8:fe:39:
43:97:51:02:bd:4d:ac:3f:63:e6:55:65:7b:71:a9:0c:cc:22:
3a:11:be:a7:0a:28:ab:bf:56:6d:ed:0c:8d:16:f9:34:32:7b:
fd:fa:5d:6b:09:a2:f1:47:30:ed:c9:5b:4c:60:5d:b8:25:1a:
b4:40:91:62:d6:d3:36:97:2a:46:f9:30:33:e6:a5:db:ef:05:
64:5f:f6:67:c1:99:92:7b:39:20:04:25:5c:53:d3:9e:70:ef:
3f:f5:3d:2c:d5:01:3f:a2:b3:59:68:19:2c:d6:01:13:ab:68:
18:ac:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:36 2026 by rpki-client