Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: +2jz/aVMgJJeR/kD7auuFzUWUaCUkwbkJnxbWuTS60M=
Subject key identifier: 89:5E:00:08:C0:42:9F:89:19:FE:56:7B:78:0E:FC:11:CE:E5:23:67
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 019FAB63D4129F98A3D42F1D6CDC4298A5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 01:01:13 +0000
Manifest this update: Wed 29 Jul 2026 01:01:13 +0000
Manifest next update: Thu 30 Jul 2026 01:01:13 +0000
Files and hashes: 1: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: arPbT1IAi0NxIVXTYbr0xf3BO8Nsuzn65kP495diWNw=)
2: rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa (hash: 7Y/pwxfKMpnXy8fpQNc1oxHBEDERRxAILiQLxs4GnLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:d4:12:9f:98:a3:d4:2f:1d:6c:dc:42:98:a5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Jul 29 01:01:13 2026 GMT
Not After : Jul 30 01:01:13 2026 GMT
Subject: CN=895e0008c0429f8919fe567b780efc11cee52367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:a3:9f:44:54:d8:7b:86:5a:44:63:39:a0:
96:28:56:88:e2:50:c5:8f:d2:39:b0:9d:9a:e6:fa:
93:00:05:1d:52:a5:df:1d:69:1c:b1:56:0a:27:00:
21:12:aa:f2:d7:e6:3d:eb:4a:89:36:8d:3f:dd:b0:
7d:fc:3a:66:73:e5:4c:3d:17:ec:04:44:39:6d:16:
83:f6:a1:55:cb:e9:0e:58:50:31:09:61:9d:89:fe:
d4:20:72:ae:5e:cd:40:e4:53:8e:0e:fa:84:b2:86:
2e:e4:36:b6:87:aa:6c:6d:57:35:5f:e6:48:cf:cf:
98:bb:3d:9a:40:e9:eb:85:2e:e2:da:ac:d6:f8:99:
cf:0d:42:a1:49:2b:23:bf:f7:85:f0:00:f7:f6:db:
8d:51:a8:3a:4b:e3:00:62:28:4e:a6:c0:88:fd:d6:
c7:8a:0f:79:8c:53:ba:9f:ab:f4:8c:7a:1f:f3:f9:
50:3f:1d:79:ce:8d:27:e0:65:03:45:c2:68:c5:78:
ea:09:26:b6:22:e1:fe:4a:32:44:4e:f1:6b:a6:03:
63:c0:49:81:8f:f0:54:70:1b:6b:9b:42:e1:08:84:
d6:60:f4:99:d3:5f:58:1f:f1:8b:b4:60:58:f9:9c:
e4:95:6c:7d:a5:ae:98:07:9b:1b:50:45:ca:c1:cd:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5E:00:08:C0:42:9F:89:19:FE:56:7B:78:0E:FC:11:CE:E5:23:67
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a6:a9:44:3d:ad:03:de:8f:da:b6:14:c8:88:46:76:c7:97:
32:70:58:ea:cf:57:d0:63:4b:25:e9:75:cd:20:d0:ad:2a:6c:
4f:34:01:d1:d0:26:4a:2c:7e:a1:8f:4b:42:57:fd:dd:2d:84:
0a:4d:c8:7f:56:a6:53:3b:a6:12:26:08:b2:7b:d6:26:18:55:
50:99:fd:75:38:aa:2c:9b:c7:b8:21:6e:45:da:5c:4d:35:07:
88:73:18:87:9a:8a:16:ce:15:60:8b:7f:4a:23:e9:38:cc:64:
81:c3:76:68:bd:50:80:ab:17:0b:16:59:8a:35:f2:f9:4f:63:
0f:e0:97:70:43:ee:42:e3:11:ac:e2:ec:da:4b:3d:b2:92:c5:
4d:43:93:a8:e1:9e:52:35:3a:ae:4c:84:31:83:81:43:bc:69:
bd:90:0f:72:01:54:80:49:3c:9b:26:9e:d2:ae:be:fa:a0:cc:
9d:ec:37:4d:71:27:dc:55:0e:7f:c1:9b:8e:e7:55:97:36:5c:
24:0f:1c:51:f4:a3:b7:d7:f7:c1:41:b6:a2:46:23:10:91:aa:
71:70:ef:65:35:37:5d:de:32:fe:42:e6:26:52:74:3a:fd:7a:
47:e2:1b:53:c6:1b:fb:27:a9:c7:4d:01:60:55:ac:9d:63:ba:
d0:1c:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:13:22 2026 by rpki-client