Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: swfzY+R4Mfvd3BtScr6rcqCNWFcHYkGmdnYotNnZ8oI=
Subject key identifier: 73:77:35:16:9B:84:3C:95:4E:11:D7:D3:F9:A5:1B:29:36:7F:76:BD
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 019F9391C0ECD2AB3BB128AC38D816767A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 1523
Signing time: Fri 24 Jul 2026 10:00:30 +0000
Manifest this update: Fri 24 Jul 2026 10:00:30 +0000
Manifest next update: Sat 25 Jul 2026 10:00:30 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: V5K0604+3WVIeD51AQWIsiSbAyfkI1oGgSutRI9n+0o=)
2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:c0:ec:d2:ab:3b:b1:28:ac:38:d8:16:76:7a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Jul 24 10:00:30 2026 GMT
Not After : Jul 25 10:00:30 2026 GMT
Subject: CN=737735169b843c954e11d7d3f9a51b29367f76bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:3d:4b:e4:e7:97:95:46:2c:6b:ee:7b:51:
d3:e2:a3:4c:b3:85:17:fd:2c:46:a9:c8:47:23:7a:
6c:3a:6d:bd:b2:37:44:f0:5f:2a:eb:2b:99:3b:51:
c7:74:23:f2:ec:fa:18:5a:c3:4a:76:3e:8b:29:7f:
9e:9a:99:b8:0d:3a:ed:cc:f2:10:4c:f3:4d:e1:a9:
1c:4d:21:8c:b0:61:e8:78:d1:3c:4b:8d:69:9a:fc:
4e:11:b5:a2:4b:e6:28:53:c9:11:c9:ee:49:27:87:
11:dc:a4:17:06:77:04:8d:24:1e:bb:68:ec:45:17:
2e:17:64:a2:85:d5:d0:9a:83:a9:0e:12:e2:3c:b5:
3b:04:10:8b:22:54:d6:82:56:c1:d0:5f:23:a1:0f:
c5:f0:c1:42:19:fd:37:df:d2:86:d7:41:ff:68:1e:
ee:f4:93:42:3d:87:a2:81:35:a6:06:7b:0a:88:c8:
0a:ae:e5:9e:e3:6a:a5:94:1b:33:62:ae:b6:be:96:
e0:83:5c:f7:8c:b4:a8:9a:f7:6b:a3:a4:bf:ef:57:
e4:93:d4:01:be:72:73:aa:9e:0b:63:43:5f:7d:0a:
03:68:f8:9a:12:11:17:3b:78:6a:9d:cf:ac:f2:1b:
9f:7d:1f:78:c0:87:2d:ef:fb:25:1c:ea:e3:65:b6:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:35:16:9B:84:3C:95:4E:11:D7:D3:F9:A5:1B:29:36:7F:76:BD
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a3:7b:7e:0a:ad:c0:6f:36:82:3d:95:16:03:07:61:80:14:
8f:e4:f0:bb:89:36:cb:22:7f:25:60:3b:06:7a:a6:c0:5f:3e:
3e:3d:c2:bf:ea:cf:0e:b2:a8:31:98:dd:5f:4d:fc:80:86:74:
bf:13:c3:30:b1:f1:5b:ce:e8:fd:d0:a7:99:54:a1:78:33:37:
f0:3f:a9:ee:0b:95:59:ae:9b:7a:1c:d5:5b:bb:e5:10:14:58:
47:1a:61:bf:5d:91:5e:9e:e0:9e:80:54:90:bb:9b:22:7f:ee:
7f:23:d4:b8:a6:f1:29:d8:53:b4:82:bd:36:cd:f8:76:71:03:
36:15:50:32:07:da:5e:76:75:f1:41:54:5c:e6:9a:f2:84:3e:
f7:81:a9:a9:ad:43:a8:e3:c0:32:06:54:97:d9:ba:ee:8e:a9:
69:f6:9c:da:1d:b3:7f:fa:1f:4a:2d:c4:b2:ab:30:94:c9:85:
39:f3:0e:92:af:32:d6:1f:b4:71:58:01:a1:13:a4:17:52:bc:
d0:7d:7c:ff:6a:f4:94:79:2b:6d:b4:79:12:0d:97:43:58:7f:
de:93:f4:32:0d:d2:e0:c8:28:60:15:fa:4b:c4:75:a7:09:1d:
53:8e:60:25:74:5a:b1:a1:9d:29:0f:c8:83:7d:2f:9a:18:77:
6a:81:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:54:17 2026 by rpki-client