Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: 3zrMR2Lf56rvrC9+zuK13HlyjXennDL87CIdWKDQbew=
Subject key identifier: 2A:75:70:B8:38:3C:EC:3A:68:FC:85:1B:5A:88:34:48:26:77:F6:A9
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 019CAAFD437C134080E529698575A3596E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 055D
Signing time: Sun 01 Mar 2026 20:00:50 +0000
Manifest this update: Sun 01 Mar 2026 20:00:50 +0000
Manifest next update: Mon 02 Mar 2026 20:00:50 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: 3Vzvga2JR9kH5Vhjc59gMSr4CSGUqG6MCxvD5iWETLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:43:7c:13:40:80:e5:29:69:85:75:a3:59:6e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: Mar 1 20:00:50 2026 GMT
Not After : Mar 2 20:00:50 2026 GMT
Subject: CN=2a7570b8383cec3a68fc851b5a8834482677f6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:10:e8:77:a0:52:11:c0:48:6a:fe:12:dc:
e5:ff:16:55:79:01:e7:4e:18:c7:10:15:44:81:e0:
e9:e7:bb:cf:e8:62:0b:f8:a2:ea:5f:97:44:3a:84:
db:07:77:d1:b2:47:70:39:d9:20:49:7a:64:4a:f1:
dc:56:eb:d5:c2:49:0f:a1:0e:ba:d3:b0:c7:4b:49:
c9:39:6c:3c:1c:e9:25:b4:8f:75:4b:39:19:bc:e1:
4c:a7:cb:1e:12:16:48:66:83:5e:0c:3f:1e:79:55:
a8:78:54:77:d7:42:fe:73:19:4a:51:23:40:f1:71:
0c:1c:26:f3:8a:bb:1e:58:0b:74:f0:ce:43:61:1e:
d2:b7:2c:d9:ae:f8:43:46:34:19:6b:85:9e:6a:e3:
ec:30:2f:48:b7:04:8d:ca:d5:3e:c5:18:b7:86:92:
b8:b5:e5:00:6e:af:d8:24:5b:98:46:48:7c:49:4f:
41:ea:c1:4f:d1:9e:e7:f7:73:82:6b:4c:7c:a9:77:
15:2f:4f:99:e1:ed:b3:aa:83:08:9e:96:c1:d5:84:
19:8a:88:47:67:b7:77:71:af:99:4d:53:02:39:c5:
c7:ad:ef:fb:72:06:cc:86:9a:de:5d:16:c9:49:1a:
2d:2c:ad:bc:3a:fa:dc:e0:66:c9:ce:ca:0d:f5:ef:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:70:B8:38:3C:EC:3A:68:FC:85:1B:5A:88:34:48:26:77:F6:A9
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:43:96:ae:a7:a9:5c:53:5d:7f:9d:49:fd:e1:b9:fc:88:45:
03:99:3e:77:d6:7d:6a:dd:e2:86:48:41:6a:c5:8b:8f:0e:88:
20:d9:b2:eb:c1:f0:ca:bd:af:87:f2:7d:90:16:08:47:6f:d4:
43:50:1d:ea:34:16:86:e6:3c:6a:f1:d5:58:a5:24:7b:15:f6:
d1:29:6c:d9:7c:23:7f:f5:10:bf:6d:e3:53:a5:95:11:e8:53:
60:ec:f2:43:13:1f:80:7e:d0:59:36:ef:eb:1e:66:30:81:eb:
e8:b1:c8:0f:26:30:69:35:f6:76:da:85:4c:04:ac:01:c6:28:
1e:f4:68:44:10:74:97:00:b4:88:03:1a:62:70:18:5a:4a:db:
19:9c:6c:84:b2:88:12:ff:d0:c5:39:ea:68:68:a8:94:a5:5f:
18:54:52:32:c7:f4:3a:e7:e3:b9:5a:1d:1b:45:5d:33:8f:1e:
7c:5c:f9:e4:17:dc:29:51:67:e5:e2:8b:2b:84:e0:51:50:b2:
5f:83:60:58:06:49:55:15:0a:8d:08:09:e2:dc:3f:23:92:a2:
80:3e:cd:f6:c3:70:3b:01:82:7e:8b:ef:32:2f:4f:3a:2b:21:
17:4f:c7:e0:b3:dc:4f:34:b7:c8:86:5f:ea:a2:7c:52:8c:14:
24:cc:6c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:39 2026 by rpki-client