Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: f7IKuN0EKzqFC5VYbBVNVrt17s/IAKcNeTKDzN2o3tk=
Subject key identifier: 6B:DA:F1:14:38:7D:9B:35:7B:B8:9F:11:CF:FC:EC:F0:F9:9B:B1:1B
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 019FAD1AF556F7233364B81E8ADA3D7BF4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 09:00:52 +0000
Manifest this update: Wed 29 Jul 2026 09:00:52 +0000
Manifest next update: Thu 30 Jul 2026 09:00:52 +0000
Files and hashes: 1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: Hkzvo23rfnfeBPFqA17GWKtto/dt2m1d3zJrD26QKxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:f5:56:f7:23:33:64:b8:1e:8a:da:3d:7b:f4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Jul 29 09:00:52 2026 GMT
Not After : Jul 30 09:00:52 2026 GMT
Subject: CN=6bdaf114387d9b357bb89f11cffcecf0f99bb11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:ed:72:14:6a:fc:64:cd:00:a5:2a:4f:5e:
ed:5c:eb:87:da:20:f5:69:19:6a:24:90:95:73:2f:
67:58:0d:15:1d:69:2b:ad:b7:76:89:13:80:01:74:
e3:f7:36:0d:ba:10:a0:95:0a:80:1b:35:91:16:70:
f2:93:2e:bc:b6:bc:a3:2c:39:24:ca:07:67:c1:89:
a2:12:db:74:53:59:6e:01:cf:87:66:06:80:10:06:
5d:7f:7d:33:7c:1f:d1:fc:7d:82:16:62:4d:7c:12:
e4:81:28:9b:75:b6:de:bf:59:83:55:1a:88:7a:01:
7b:99:e4:30:4f:59:bc:16:4c:18:f7:d2:97:0b:7e:
6c:45:6b:76:49:4d:55:44:8e:d3:9a:ca:c3:a6:09:
21:ed:70:e7:2d:28:6e:97:9a:d2:2f:0b:f6:7a:46:
9f:f3:66:1a:f2:6d:cf:79:58:0f:e8:ee:70:b7:02:
3e:c6:a2:8c:6d:96:bb:c4:f8:77:e8:3e:36:95:9b:
fd:bd:ba:25:59:c8:9c:b2:5a:4e:f5:79:31:50:eb:
12:6d:ce:2b:be:1f:20:b3:b5:37:52:d0:1e:81:60:
be:92:6a:67:96:eb:bc:c7:87:df:f9:48:e7:c5:87:
44:97:68:65:60:7a:65:d9:34:4e:72:73:56:7a:d0:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DA:F1:14:38:7D:9B:35:7B:B8:9F:11:CF:FC:EC:F0:F9:9B:B1:1B
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:75:4d:0c:d6:65:12:12:b5:b7:f6:75:8c:bb:22:00:08:20:
38:2c:b5:b9:73:d2:d0:46:50:22:4a:8d:f2:15:f2:9e:6e:d9:
30:7b:94:47:db:c9:3c:89:66:c8:3f:af:f0:16:f4:e1:f6:17:
36:e2:34:39:90:97:7d:f4:50:a8:85:94:db:e5:1e:5e:29:b7:
11:43:fd:cb:1a:ab:20:fe:10:12:2c:7d:82:57:cf:00:e7:19:
62:40:70:48:66:6c:80:8a:77:4f:74:21:9a:76:fa:51:b6:14:
0f:c8:79:9c:9f:fc:77:63:38:81:fc:8f:fb:ba:71:55:03:48:
ec:c4:c4:cc:8b:40:ac:5c:96:a8:2c:e4:3a:89:f1:fd:4c:07:
ad:1b:24:59:b0:2f:aa:9f:d1:b0:3b:43:39:10:e9:bc:97:f0:
99:44:59:e3:c4:7c:9d:b8:29:6b:6a:6e:c9:73:ec:d1:c5:85:
74:93:f5:d3:88:6d:60:7f:89:b7:42:3a:f4:2e:23:31:6a:24:
b7:a5:b7:ba:f6:1a:6d:77:bf:0f:84:44:56:cc:b1:84:7d:55:
82:d0:9a:ad:15:1d:6a:3d:33:0e:a4:b6:c1:e8:3f:23:cd:2c:
23:7b:de:de:a7:86:9f:7c:6a:45:ce:3a:b0:7b:82:fa:40:27:
df:e5:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:17:26 2026 by rpki-client