Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: 0CtvGGvANAJF1PSYLfa2Ymv1jNw8llPLPNgdbxqDIgs=
Subject key identifier: 2B:06:03:90:3A:F6:8A:28:A5:DA:8C:86:DB:E0:6F:F7:7A:16:E9:DC
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019FA9E2E57B3389A3EFC0D6D3A951D99781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0DC0
Signing time: Tue 28 Jul 2026 18:00:47 +0000
Manifest this update: Tue 28 Jul 2026 18:00:47 +0000
Manifest next update: Wed 29 Jul 2026 18:00:47 +0000
Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=)
2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: Zy4z47fESe80MYYifgQmJtWDvNnVNiImQJz3Xfe52CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:e5:7b:33:89:a3:ef:c0:d6:d3:a9:51:d9:97:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Jul 28 18:00:47 2026 GMT
Not After : Jul 29 18:00:47 2026 GMT
Subject: CN=2b0603903af68a28a5da8c86dbe06ff77a16e9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:95:0a:88:73:c8:6d:54:64:15:17:ab:2b:
0c:97:d2:e4:fa:15:ee:76:25:d8:76:92:45:26:94:
8f:6f:b4:51:92:54:45:6d:20:e8:57:ca:b8:33:1a:
5a:fd:2a:92:5e:20:4b:f5:50:d3:98:44:65:65:40:
be:93:b4:8d:d2:57:4e:a2:f7:f8:73:5e:92:ef:d3:
43:8a:ff:10:fa:d5:7c:dc:b2:26:9b:cc:aa:b2:8e:
a6:9f:5a:90:05:07:28:36:17:ca:5e:ea:85:a0:0f:
d0:2e:62:54:3f:d9:90:eb:ab:26:93:e2:9f:dc:06:
18:c0:44:15:ae:bd:8e:fc:0e:d0:de:62:b2:4f:28:
94:4f:79:21:48:3a:ac:52:ef:ea:ed:eb:92:04:5a:
f3:b6:cf:e0:c9:02:c6:cf:bc:45:0c:d3:64:41:7c:
12:bd:01:16:e5:9c:d7:97:5a:34:39:db:0d:0c:93:
e7:9f:ef:28:99:6e:ef:d7:cf:d1:34:22:83:72:0c:
e0:37:53:53:8d:94:51:88:4d:cf:5a:11:d4:43:fe:
9c:ad:7d:5e:b5:76:d4:4d:5d:b2:eb:80:ce:0a:14:
ce:65:6b:3d:1b:de:f6:23:8c:c5:8f:9e:83:85:5e:
f9:fd:c9:69:81:45:5f:58:b3:ae:78:89:8a:4a:60:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:06:03:90:3A:F6:8A:28:A5:DA:8C:86:DB:E0:6F:F7:7A:16:E9:DC
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:20:49:b1:c0:e7:33:b1:4f:f7:c5:2c:3c:bb:c8:e7:78:32:
13:55:4e:3a:55:60:14:3a:bc:20:3f:f8:83:fd:45:4a:c3:3f:
b0:eb:fe:35:fb:8f:d2:5a:6a:08:a0:19:2c:26:ab:8f:af:e3:
be:d6:2c:07:0d:15:fc:3e:a8:6f:43:49:1e:27:07:49:5e:4c:
b6:e0:35:3c:04:f8:48:de:92:76:49:d8:6e:90:26:83:0f:fb:
d9:90:32:0b:79:9d:b1:79:3d:25:74:ef:ed:ff:53:64:20:26:
2c:e1:65:98:1a:37:6f:51:4d:54:1b:2f:30:e6:ca:f2:3e:b0:
ef:b4:dd:c7:c7:a2:6a:86:4a:bf:5f:4e:48:36:6e:01:6a:6f:
a7:73:6b:27:c8:e1:a8:bb:4c:a6:be:33:6f:0f:93:8d:7d:f3:
a1:ef:7d:2d:29:0c:dc:72:c8:42:48:55:11:75:7f:fc:70:7b:
4d:ef:7d:82:60:36:52:b6:c2:93:51:50:6d:f9:20:97:42:f6:
89:22:0b:6b:1f:57:43:db:ff:27:fc:12:e8:44:61:51:af:9b:
1c:58:71:00:b1:42:d8:23:45:66:5d:21:fc:4d:0d:0b:9f:fc:
1c:23:64:d2:4c:d2:ac:36:01:ea:54:c2:0e:60:d4:1a:fd:fb:
41:48:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:27 2026 by rpki-client