Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: tZLp7gzWAWv/FL9XafgEzZgiFouRfJMwJAu0GArSv9k=
Subject key identifier: 9A:94:55:A0:4D:A4:40:47:8B:82:02:51:47:B4:C4:69:69:4A:3B:C3
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019CAB346716D41E9B233047446BD99092FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0C33
Signing time: Sun 01 Mar 2026 21:01:03 +0000
Manifest this update: Sun 01 Mar 2026 21:01:03 +0000
Manifest next update: Mon 02 Mar 2026 21:01:03 +0000
Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=)
2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: Gq4T4RlPOySMJpZv/HBY/A1hQMwPwm0UpzxPDdVYA+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:67:16:d4:1e:9b:23:30:47:44:6b:d9:90:92:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Mar 1 21:01:03 2026 GMT
Not After : Mar 2 21:01:03 2026 GMT
Subject: CN=9a9455a04da440478b82025147b4c469694a3bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:3f:7e:c8:88:92:62:fb:24:53:a0:e4:aa:
43:66:2d:34:9b:c7:02:f4:70:44:70:35:9d:61:b8:
f8:f0:c6:4c:ae:61:52:07:17:2f:30:3c:d0:81:1b:
4c:29:f3:0f:f1:42:23:23:2c:6c:89:80:18:70:be:
31:de:74:5b:8b:4f:6f:1f:01:3c:54:76:e0:50:b0:
38:52:15:3b:49:cd:e1:9b:8e:24:8f:3c:0e:6a:49:
f7:55:22:b2:15:ac:6e:21:9e:1e:42:52:97:60:41:
58:7f:6d:a2:bd:92:41:67:8e:88:2b:97:97:94:3a:
14:98:ea:9f:c5:01:17:17:79:8c:fe:f5:54:8f:6c:
92:0b:e9:a1:6f:42:1a:79:d5:75:a6:82:93:4f:0d:
a2:f8:97:2b:91:fb:a0:10:e0:e3:ed:1d:43:fc:be:
75:3c:d1:9c:90:f9:ce:79:ef:f1:69:c0:bd:33:62:
8d:4f:9e:60:7b:d8:0d:62:c3:37:23:c2:15:75:d0:
d7:ad:35:db:2b:ac:02:e2:32:35:4d:f5:6e:30:7a:
27:1c:99:49:a7:7d:9f:b1:92:ef:7f:75:0b:b4:e6:
52:f4:27:66:73:13:0b:c6:c8:5f:ce:68:62:bc:16:
c1:1c:2c:58:e4:18:0d:54:a3:63:96:63:09:49:8d:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:55:A0:4D:A4:40:47:8B:82:02:51:47:B4:C4:69:69:4A:3B:C3
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:94:85:d6:24:b6:e2:96:56:e8:cb:d9:fb:f8:cb:98:bb:94:
db:43:e2:7a:8a:33:9e:35:d2:9a:92:2d:90:b3:8a:e1:1f:c9:
67:36:9b:6b:59:96:29:f2:ed:92:86:de:ce:5f:19:4b:a7:fa:
4d:69:b6:79:cc:ad:81:ce:20:36:a6:19:f7:fe:66:2f:e0:23:
7c:e8:3e:79:99:db:53:7d:ea:71:e4:28:0b:e4:88:1c:1a:27:
9e:22:0c:3f:51:4d:80:c4:6d:87:1d:82:d3:97:49:fd:d0:16:
8c:e0:1f:d9:fa:25:26:89:31:10:53:fa:f0:d6:c8:45:1e:74:
a4:0c:00:98:0e:2f:f5:35:d0:9b:32:f1:5b:39:81:2b:ba:aa:
51:79:32:ff:f3:36:14:f1:35:b1:05:31:72:0d:42:be:6e:0d:
48:89:7d:52:fd:3d:9d:f3:cc:66:84:fc:bf:d4:47:81:f3:bd:
1b:44:dc:85:f6:24:a4:73:59:aa:bc:87:9f:ca:38:23:e2:ed:
0c:f2:7c:6a:e0:3d:36:c2:ad:53:41:39:cf:97:5b:ea:30:e5:
6a:0b:51:0b:f0:62:6b:cf:55:75:73:54:89:b7:8e:8d:bc:0d:
c9:8f:c2:28:b5:95:7e:a8:d0:b5:53:52:a2:a8:cc:6c:8b:8b:
c5:4c:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:28 2026 by rpki-client