Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: Y9Bw518t1SkRz56kSBtVePjDOtW79KXVE+WajP0VyvM=
Subject key identifier: B4:1B:58:26:8C:11:05:F3:59:19:E8:67:B1:39:FA:B3:7C:48:C6:1B
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019DA454004309BD1A9755AAD6CA5F4291E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0CB4
Signing time: Sun 19 Apr 2026 06:01:01 +0000
Manifest this update: Sun 19 Apr 2026 06:01:01 +0000
Manifest next update: Mon 20 Apr 2026 06:01:01 +0000
Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=)
2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: 8NjYKMvUzGG9nqyvlz6wmS1ShSsTdGEBKSeRpjJpfQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:00:43:09:bd:1a:97:55:aa:d6:ca:5f:42:91:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Apr 19 06:01:01 2026 GMT
Not After : Apr 20 06:01:01 2026 GMT
Subject: CN=b41b58268c1105f35919e867b139fab37c48c61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:de:fe:be:07:91:dc:b2:2c:e6:d8:4c:3b:
0a:91:1f:40:f7:e2:b5:78:9c:62:57:73:f4:0b:3d:
16:da:c3:31:16:5e:13:e1:ed:0e:16:71:a4:7c:36:
96:77:3b:9d:56:d0:37:24:40:4f:bc:96:26:d5:62:
7a:ea:8c:a6:1b:67:57:9a:6e:db:52:1d:94:66:ea:
59:c1:0c:22:b3:e7:65:29:b5:2d:43:d5:cd:57:1b:
fb:0f:d4:08:5b:b9:57:98:f2:cd:51:86:e0:0b:aa:
50:2f:ba:80:3d:17:4f:30:c5:7d:83:e3:33:c2:84:
55:87:2c:57:a7:d9:dd:6c:14:ec:29:13:79:42:66:
5f:7c:21:a1:b2:cb:d2:8d:57:71:2d:2f:7f:0b:89:
4e:7b:6c:f3:6b:ae:26:f1:17:a6:2d:b2:32:30:28:
a4:92:71:3b:8b:a8:cc:79:6f:90:49:7c:a9:24:9c:
39:81:13:81:d4:db:8f:b9:dd:7b:c4:be:75:00:fe:
11:cd:d1:92:85:71:ef:d5:03:16:37:1f:c7:c2:9e:
7f:80:8d:b7:04:6b:21:f2:6a:af:6a:34:09:af:a6:
cf:62:61:39:3a:49:2e:86:44:0f:12:73:88:6a:02:
52:fb:e5:49:a1:7d:7d:28:70:42:03:61:d0:af:57:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:58:26:8C:11:05:F3:59:19:E8:67:B1:39:FA:B3:7C:48:C6:1B
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0c:9a:f1:7b:39:28:dd:26:ed:47:37:48:d1:61:e5:f8:a7:
e4:6a:48:09:b0:cb:57:56:a8:76:02:d9:d3:5e:d0:ec:16:03:
6a:fe:88:12:39:bd:ad:f4:b4:0c:a4:64:c2:a6:11:94:d4:6d:
35:ce:ce:f9:20:8f:f2:d7:e7:07:53:ee:aa:d8:3a:fc:80:03:
d8:13:11:cb:ed:7c:16:87:c1:f3:1e:19:2f:f8:07:e8:f6:d9:
bd:9a:a5:e5:67:e5:72:4a:c3:6e:0a:15:53:d7:24:2f:23:81:
35:e9:61:67:81:52:fb:46:ab:22:c8:2d:49:05:94:68:af:c7:
13:8e:ed:96:b9:e3:7a:e4:aa:53:2e:41:67:50:16:b8:2c:60:
9d:48:7c:0b:35:6e:5d:17:09:5e:fe:28:fc:1d:d4:68:4c:ec:
fb:f9:d6:06:f7:d0:6d:e9:82:85:9b:13:74:4f:62:ee:72:2c:
86:2b:fc:14:a7:eb:65:86:8a:a3:e4:27:65:31:bb:88:72:bb:
b4:8e:c0:df:62:87:a5:b4:c9:d1:62:8a:77:c5:12:63:3c:54:
a5:2e:bb:61:16:dc:e3:42:9e:b2:e8:80:ba:e3:85:c5:5f:83:
6b:d9:7c:1a:86:71:61:80:7c:cd:5e:f1:b0:c9:69:b3:ad:13:
3d:4b:3f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:40 2026 by rpki-client