Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
File: bzHGTD5afeEED0Daj-3EfDj-Wfo.mft (raw, json)
Hash identifier: pdrqBqzUDmkGuCwfgWC6Cggaf5H+SMNWTn3LhprYDwY=
Subject key identifier: 9E:14:F2:54:64:F7:D9:66:E9:3C:84:88:8F:1C:2A:B2:24:4D:07:F8
Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
Certificate issuer: /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Certificate serial: 019D9961DC52DAB63A13A2D4604996FE3146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
Manifest number: 116E
Signing time: Fri 17 Apr 2026 03:00:20 +0000
Manifest this update: Fri 17 Apr 2026 03:00:20 +0000
Manifest next update: Sat 18 Apr 2026 03:00:20 +0000
Files and hashes: 1: bzHGTD5afeEED0Daj-3EfDj-Wfo.crl (hash: Ax3Rmey57DJis/nyYINwvEjQRbp0stxrS2JWifUAtec=)
2: mis20mCNr7-z3Juye3bJqllLhII.roa (hash: jr44OSFfE8hxxzeZqyHwzACU4GFNkuxHslOFaTPqZNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:dc:52:da:b6:3a:13:a2:d4:60:49:96:fe:31:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Validity
Not Before: Apr 17 03:00:20 2026 GMT
Not After : Apr 18 03:00:20 2026 GMT
Subject: CN=9e14f25464f7d966e93c84888f1c2ab2244d07f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:48:a9:1d:8a:74:e2:3b:c8:95:65:8c:93:
ad:a5:ef:20:88:2b:22:55:24:0b:e0:33:f5:fa:7f:
0d:d8:a8:4a:68:2a:29:61:f2:54:3b:c2:4d:fd:71:
ab:f4:bb:2e:2a:71:61:00:2d:1c:38:a9:a7:69:4c:
8c:ea:b3:97:0e:e3:a0:47:e3:8f:d5:73:05:c5:17:
34:f8:f6:56:97:45:47:a6:45:e7:b2:48:39:89:8b:
00:3a:8b:fc:c6:b0:51:e6:88:0a:c5:5c:18:e3:c8:
67:12:d8:d2:d2:1e:cf:d0:93:16:d6:f8:68:f6:45:
fc:52:dc:3a:4d:62:71:80:0f:c3:0b:56:1b:5d:85:
23:54:34:97:52:0b:fb:0b:fc:5e:40:fe:6d:24:00:
9a:5c:3c:54:15:a5:07:08:c3:8f:7c:2d:cb:ba:1b:
57:52:5a:b1:cc:c4:10:46:1d:e4:aa:07:0d:f2:57:
64:f2:f5:14:cc:8e:f3:7b:38:f2:f9:f2:17:30:7f:
19:34:0c:1c:ca:78:96:97:b5:67:06:ef:bb:55:a3:
82:82:93:40:19:53:da:a8:ed:a3:93:a9:7f:97:10:
d6:57:cf:95:39:85:96:b8:91:dc:63:68:61:cf:93:
75:15:0a:8e:36:fa:0f:e4:fb:a3:4c:a3:eb:8d:9a:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:14:F2:54:64:F7:D9:66:E9:3C:84:88:8F:1C:2A:B2:24:4D:07:F8
X509v3 Authority Key Identifier:
keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ca:9b:cb:cd:1a:87:7e:92:75:68:15:9b:a4:65:b0:9d:28:
3b:38:65:05:a1:10:cc:46:f0:cc:06:06:6a:30:1f:6b:35:d5:
b3:88:92:d6:20:c7:31:22:c8:0e:89:e5:54:9a:a6:d6:74:45:
72:a5:62:98:7c:4d:f1:68:8f:d8:ef:6e:4c:5b:91:67:44:cb:
f9:28:f1:a1:65:03:23:38:b6:fb:b3:06:ff:a4:92:c0:44:52:
89:a5:50:1b:e5:ec:0b:b4:b8:9c:9f:9d:41:40:15:31:f3:5e:
c6:c1:b6:fa:50:62:2f:5f:6b:42:05:e2:38:d8:f0:b1:18:a4:
3e:c6:8a:e3:d6:eb:28:c4:7d:c4:1e:85:46:36:32:fc:8e:b7:
2e:cb:98:cd:90:34:4a:94:43:93:78:96:43:f5:f3:38:6b:d9:
7c:53:18:70:b2:21:6d:0e:99:21:99:dd:7f:cc:9d:c3:54:75:
7b:11:11:6a:a0:b6:9d:75:9f:a1:cd:d5:5d:b0:2f:a7:8a:02:
b3:a9:7e:6a:86:b3:e7:98:ac:30:fc:f1:fb:8d:4e:a0:63:6f:
f3:cf:d6:e0:24:54:29:54:b3:0c:9f:71:b1:af:a5:a2:f4:44:
7a:b0:9f:ab:2d:93:ad:eb:0b:a0:73:b0:f3:10:f1:d1:d5:18:
fd:23:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:06 2026 by rpki-client