Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: zfufoKjAHnv4O5L2YfpT2ZGdBMshzXbHmHB4dLoBFoc=
Subject key identifier: 15:72:90:09:26:54:DA:AF:A0:74:B9:98:0A:06:10:93:36:A2:3E:D2
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 01A0D493DC5C67DE20F6FC9217723EE5DCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 18:00:54 +0000
Manifest this update: Thu 24 Sep 2026 18:00:54 +0000
Manifest next update: Fri 25 Sep 2026 18:00:54 +0000
Files and hashes: 1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: BVcuWyEUsIvy4roiyatqL8RNZgmnjlCuiPKCXtvyW00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:dc:5c:67:de:20:f6:fc:92:17:72:3e:e5:dc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Sep 24 18:00:54 2026 GMT
Not After : Sep 25 18:00:54 2026 GMT
Subject: CN=157290092654daafa074b9980a06109336a23ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:67:e4:ea:f8:52:fd:38:6c:c0:95:2a:03:
ce:e1:1e:1d:7b:a9:3c:be:4c:50:9f:8f:42:b8:f9:
dc:09:78:60:2e:53:b8:7a:1d:c5:18:bb:fb:cb:16:
ce:a1:f5:f8:d1:c5:88:24:a9:e5:d3:77:f2:e7:02:
cd:e2:3e:20:80:7d:d4:39:69:90:d2:85:42:f3:a2:
37:64:15:20:e7:3e:c5:a4:c5:c8:08:78:9e:15:83:
d1:89:d4:60:59:82:22:7b:8a:50:ea:47:3f:8f:1e:
0e:5c:eb:10:5a:fd:fb:0e:4d:d0:b0:a3:f4:45:5e:
9e:2f:cc:de:b8:e3:8a:d4:de:58:d8:76:ac:92:64:
22:16:26:7c:b8:0a:70:33:ea:43:aa:6d:8a:e5:f1:
7a:cf:52:f2:a6:68:5f:30:0b:0a:97:5a:0e:23:02:
bc:65:a7:e1:e8:c8:a2:35:6b:c4:a0:fa:17:04:3f:
be:cb:51:c9:ee:4b:3c:66:91:a1:c9:09:f1:15:02:
f9:46:19:d8:96:84:c2:1e:fc:50:99:9d:04:e7:27:
4b:91:1b:a2:8a:fb:76:ac:8e:6e:9e:63:9a:fe:a0:
e5:04:9f:d3:4f:08:29:20:10:41:6c:74:26:8d:58:
4d:93:af:16:ba:91:63:4d:66:aa:70:8e:98:d4:0b:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:72:90:09:26:54:DA:AF:A0:74:B9:98:0A:06:10:93:36:A2:3E:D2
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a4:5b:0b:11:97:e8:3d:1c:19:a5:cb:64:51:1b:9d:28:d0:
75:39:20:7f:46:b6:59:c8:08:6b:69:a9:67:c1:77:2c:4c:e6:
30:ee:99:b5:ec:33:9d:8b:72:58:7e:f0:25:87:64:27:b0:af:
6c:54:d8:80:09:b8:95:75:75:70:75:07:42:56:a3:18:e9:5e:
28:9b:ff:93:67:00:05:9e:e9:8f:21:ce:e6:42:f4:6c:82:6e:
35:42:95:2f:d9:5f:99:50:35:7c:a2:3e:60:30:f0:ed:ff:a9:
46:62:b6:71:d7:1d:1f:0a:a3:c8:88:30:00:ef:09:fb:82:89:
8f:3f:23:3b:85:b1:76:43:9b:5b:b5:db:aa:11:a7:3d:08:13:
42:45:88:e9:0b:5c:2d:9c:34:cd:ac:a2:78:98:40:fd:ab:3c:
e1:41:76:0e:5b:18:05:ca:da:74:0a:f8:7b:4b:80:67:f7:65:
bc:e7:50:95:9a:3b:76:52:16:d2:b0:77:3b:05:7f:dc:61:51:
6f:f5:25:14:3d:ed:77:73:60:6f:e5:91:17:ae:d2:b0:a5:62:
83:fc:af:0c:80:5b:58:b5:45:15:17:0c:f1:f3:ca:89:55:92:
9b:e5:34:1a:33:94:da:19:be:2f:ed:b1:39:fd:b5:b3:f9:8c:
cd:9f:72:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUk9xcZ94g9vySF3I+5dzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzNhZmQ0MWVhMDEyZmIyODAzYzcyNzQ1MjNjOGVjM2Yy
NjEzMTEwHhcNMjYwOTI0MTgwMDU0WhcNMjYwOTI1MTgwMDU0WjAzMTEwLwYDVQQD
EygxNTcyOTAwOTI2NTRkYWFmYTA3NGI5OTgwYTA2MTA5MzM2YTIzZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkdn5Or4Uv04bMCVKgPO4R4de6k8
vkxQn49CuPncCXhgLlO4eh3FGLv7yxbOofX40cWIJKnl03fy5wLN4j4ggH3UOWmQ
0oVC86I3ZBUg5z7FpMXICHieFYPRidRgWYIie4pQ6kc/jx4OXOsQWv37Dk3QsKP0
RV6eL8zeuOOK1N5Y2HaskmQiFiZ8uApwM+pDqm2K5fF6z1LypmhfMAsKl1oOIwK8
Zafh6MiiNWvEoPoXBD++y1HJ7ks8ZpGhyQnxFQL5RhnYloTCHvxQmZ0E5ydLkRui
ivt2rI5unmOa/qDlBJ/TTwgpIBBBbHQmjVhNk68WupFjTWaqcI6Y1AvzFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVykAkmVNqvoHS5mAoGEJM2oj7SMB8GA1UdIwQY
MBaAFG8zr9QeoBL7KAPHJ0UjyOw/JhMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTIt
YjM1ODA5OTRhM2IxLzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTItYjM1ODA5OTRhM2Ix
LzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6RbCxGX
6D0cGaXLZFEbnSjQdTkgf0a2WcgIa2mpZ8F3LEzmMO6ZtewznYtyWH7wJYdkJ7Cv
bFTYgAm4lXV1cHUHQlajGOleKJv/k2cABZ7pjyHO5kL0bIJuNUKVL9lfmVA1fKI+
YDDw7f+pRmK2cdcdHwqjyIgwAO8J+4KJjz8jO4WxdkObW7XbqhGnPQgTQkWI6Qtc
LZw0zayieJhA/as84UF2DlsYBcradAr4e0uAZ/dlvOdQlZo7dlIW0rB3OwV/3GFR
b/UlFD3td3Ngb+WRF67SsKVig/yvDIBbWLVFFRcM8fPKiVWSm+U0GjOU2hm+L+2x
Of21s/mMzZ9yDw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:11:37 2026 by rpki-client