Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: rJLteU74XVJTfAtEbWdE2S1sEdWBYE/qdoxRum4qOlU=
Subject key identifier: CD:6E:B2:DA:00:AB:39:1E:64:60:E7:DD:7E:CB:07:45:44:A8:63:0A
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 019CAA8F9D1861EBAA21EE918929BD27EDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: 4h8w5d0gfkiF9touYjrvH4CHstenavXFpYdv3jfTXBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9d:18:61:eb:aa:21:ee:91:89:29:bd:27:ed:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=cd6eb2da00ab391e6460e7dd7ecb074544a8630a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:62:d9:1e:b0:04:4f:d6:08:ed:e8:23:f4:
74:d5:c2:c0:96:4a:89:ed:d1:1e:1c:f1:cf:20:0a:
f0:f6:e3:32:b8:de:b0:a8:28:09:43:87:47:7a:c3:
ce:95:c9:08:e8:49:e3:49:76:59:a2:ee:c8:97:40:
dc:6d:16:21:3b:b6:2b:04:f9:d1:72:89:0d:19:39:
09:f0:a4:c8:eb:da:3d:99:6e:de:74:9b:3d:b0:03:
8d:f1:a1:ab:ca:f4:11:13:f1:8f:c8:f9:9a:13:cc:
c8:c1:aa:c6:16:dc:9c:c8:ae:aa:cb:db:47:3e:04:
49:8e:a2:ea:85:ad:5b:45:fc:19:a2:39:9f:3e:45:
14:df:cc:e6:83:f9:39:6f:74:81:b6:0e:c1:46:93:
ab:4c:cc:cb:df:e2:32:4f:4c:ce:8a:b6:33:d5:bb:
9a:d0:0b:ea:8e:08:9a:9b:26:b7:f2:60:6e:be:40:
0a:e2:84:e7:b6:00:f4:04:40:56:9a:64:ae:83:d3:
7e:8f:8f:83:d2:b2:84:85:07:04:fc:39:81:09:01:
82:21:f1:d3:83:a4:23:ad:1d:cc:05:5a:12:cb:4a:
4c:8b:ac:fa:81:38:72:18:16:8b:4c:b9:98:4b:99:
9a:d7:ee:b6:96:3f:97:63:9d:03:84:36:71:3b:fb:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:B2:DA:00:AB:39:1E:64:60:E7:DD:7E:CB:07:45:44:A8:63:0A
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:3a:f3:ad:52:e7:56:fa:68:39:a7:d0:b3:6c:5f:eb:fb:af:
4e:14:d9:4b:28:f1:17:dd:56:20:1a:86:1f:bd:ca:ba:89:8e:
ea:3a:af:cf:4d:53:3e:0b:83:ea:61:a5:34:08:06:b5:7d:67:
b3:8f:ca:6d:14:d9:ee:fd:e0:34:eb:29:4e:2f:52:e3:c7:f2:
dd:56:cf:35:4e:fc:73:d0:5d:7a:53:56:0b:2c:07:94:c1:ff:
ca:c4:f8:2d:e2:c0:95:fd:f4:56:bb:2c:f5:ee:6e:d8:6d:4c:
b2:53:6f:89:b4:8c:1e:f3:14:9a:3d:f3:23:c6:15:87:37:b4:
cc:82:4d:b1:22:ac:5f:1f:d5:66:87:ad:3d:ac:ac:20:24:ee:
4c:ec:d7:9b:51:04:a3:8c:74:b3:20:b4:62:a9:32:09:a5:f3:
f4:d0:cc:13:b8:e9:c0:e2:8f:3f:f8:64:11:c6:b2:8d:4e:13:
67:70:a2:bc:8c:e5:a9:d6:3a:dc:c7:d1:65:1d:67:52:0b:5c:
e8:5d:68:19:d8:89:e5:dd:c0:d3:60:3e:85:1a:06:9b:21:27:
fe:08:18:90:b1:61:a6:62:51:52:22:03:72:f5:97:74:98:d4:
76:b9:5e:6c:84:73:a5:a9:f0:93:c2:ad:cf:51:6a:9c:25:1d:
1e:7c:bf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:27 2026 by rpki-client