Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: LVvQmA8A70rtrRCqnklRAmzJCBUEOgyDxo2/+FM+PCc=
Subject key identifier: DD:04:62:72:40:5F:F1:D7:89:39:0A:98:A0:DE:53:34:B8:23:7C:D5
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 019D98185E1462F7F27EDB8458614E25D688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:00:26 +0000
Manifest this update: Thu 16 Apr 2026 21:00:26 +0000
Manifest next update: Fri 17 Apr 2026 21:00:26 +0000
Files and hashes: 1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: FeBKzR6C+kbHM/MRZ6yRQvCKG4zqbmzPIF5pbXdV8xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:5e:14:62:f7:f2:7e:db:84:58:61:4e:25:d6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Apr 16 21:00:26 2026 GMT
Not After : Apr 17 21:00:26 2026 GMT
Subject: CN=dd046272405ff1d789390a98a0de5334b8237cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:fa:df:2a:da:ae:79:2f:59:3c:0a:b9:23:
9f:b5:96:cc:cd:6f:f2:ce:30:a4:7b:80:6e:8f:c8:
84:2f:dd:b7:1f:85:69:60:a9:a8:81:09:2c:20:e8:
c1:1f:0f:1c:3a:12:89:a8:7a:ce:91:18:fb:d5:b2:
41:a6:db:bd:4f:07:15:31:cf:19:13:26:ad:ce:cc:
25:56:4b:be:03:83:57:af:79:f2:4f:85:3e:c7:05:
37:cc:2a:86:d6:68:1d:84:f8:18:72:77:4f:eb:cb:
e4:8c:43:3c:ad:9c:ba:d5:8c:2b:8f:00:6b:9f:1d:
34:a1:f5:3d:13:9d:91:ae:aa:0d:1c:ea:ca:18:fa:
7c:e5:77:cd:c3:c4:d6:7a:90:6f:93:3c:84:5b:1c:
a5:19:d0:be:2d:3b:d4:0a:c9:11:f4:47:87:06:e4:
fd:db:84:fa:ed:64:9f:be:e4:e1:19:99:ea:b3:e5:
00:10:3a:28:17:1c:f0:64:53:84:7d:10:ef:80:ac:
d8:6d:ff:4e:40:ad:a6:e3:cc:1d:f0:ca:75:6f:35:
fd:00:8e:ac:d2:17:32:c4:da:b5:f3:b9:50:7f:11:
f6:c0:d7:b4:7e:33:97:61:04:93:b5:dc:45:82:b8:
12:c3:09:79:36:6d:0e:7c:f7:d6:14:3e:1e:ed:ff:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:62:72:40:5F:F1:D7:89:39:0A:98:A0:DE:53:34:B8:23:7C:D5
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6a:c4:7c:15:68:f3:e4:70:52:eb:fc:c9:d5:6d:19:88:18:
99:b5:a7:52:00:44:4e:72:cc:a8:91:f6:87:78:c3:a0:32:8b:
b9:38:00:12:ed:e9:b1:13:12:26:f3:1d:95:a2:3f:24:d4:5a:
f0:92:1f:37:e8:84:21:f3:a4:35:2c:41:0a:f8:e2:df:72:dd:
a5:f3:7d:4d:d6:bc:0e:e5:08:0b:8f:91:49:3f:72:73:6d:ac:
d8:8b:7b:74:5a:4c:f0:d9:fa:e2:a0:44:5d:33:9f:ca:d9:95:
25:63:5b:86:0c:d7:b3:d8:86:aa:5f:44:ca:4a:81:27:b6:7e:
60:e1:e0:9e:7b:80:59:83:8a:da:fc:f8:a6:67:61:86:21:d7:
8f:de:40:a8:9a:de:2e:d4:ee:02:ee:fa:fe:9a:67:c5:3b:28:
f6:bb:03:eb:e7:e8:54:0c:fc:70:19:d0:38:64:be:3c:af:03:
d2:88:f4:38:6c:6f:36:5f:6c:7f:46:89:1b:bf:4f:6d:89:00:
2b:2b:66:4e:9e:2f:71:f4:ae:f8:ff:31:2f:f7:19:44:1e:b7:
de:fd:e3:83:b4:ae:b8:63:c6:e0:a4:49:5c:e9:c7:0e:4e:eb:
40:f3:a8:d0:6e:f7:db:6e:0d:b2:ec:84:e5:26:66:9c:4a:7d:
56:57:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:10 2026 by rpki-client