Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: bN8M81WhIxT1PrSd6sRCVa0AGJbqIdlykX9iXUlfw9A=
Subject key identifier: 35:E9:D9:0A:9A:02:93:83:8F:F8:4C:B5:AB:0F:0C:1A:55:B5:5E:0C
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019E1EA3A6C3D0BEFC267E02AD6C3229BB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 036C
Signing time: Wed 13 May 2026 00:01:41 +0000
Manifest this update: Wed 13 May 2026 00:01:41 +0000
Manifest next update: Thu 14 May 2026 00:01:41 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: 2jMRDpxWBiUYGl/pe4cHVDvSjU/aVxHTTLz31jFG4os=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:a6:c3:d0:be:fc:26:7e:02:ad:6c:32:29:bb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: May 13 00:01:41 2026 GMT
Not After : May 14 00:01:41 2026 GMT
Subject: CN=35e9d90a9a0293838ff84cb5ab0f0c1a55b55e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:d1:ce:30:f6:2e:4f:e4:0c:d4:cb:cc:be:
95:ed:cb:98:f4:44:a9:2c:b3:a6:ec:4c:5a:26:b1:
a5:6c:5c:a6:8e:4b:f4:15:e6:84:bb:45:75:97:72:
4b:b9:5e:aa:35:4b:ba:ee:7e:6c:62:12:4a:99:47:
f1:b4:10:2a:9d:f1:1a:68:41:4d:ab:a2:be:38:ed:
fe:51:27:c2:8e:70:c3:af:af:29:fe:76:d6:9c:d3:
2f:a6:c8:74:48:95:c2:c2:f9:cd:75:6f:e7:43:4b:
52:b4:fa:68:0a:7d:94:ff:ad:5d:63:67:3f:be:31:
d4:f7:4a:7b:31:01:f4:3f:56:bd:d5:d5:40:26:14:
e0:86:4f:26:23:94:3c:d9:e1:23:03:0f:c0:f2:02:
e9:39:ab:55:cf:ed:7d:14:7f:0b:68:e9:60:5f:99:
21:6c:5a:45:4f:73:6e:8b:62:50:af:56:10:59:05:
e8:3d:06:ac:88:7a:f2:62:bc:2c:ec:e4:87:d0:4b:
a9:fe:60:27:47:19:10:98:93:42:9e:16:1a:f1:79:
e0:89:df:ee:09:02:f5:0d:da:ce:34:46:ca:0b:43:
79:88:f4:6b:04:68:31:72:67:33:01:8c:a9:03:34:
f0:43:1c:57:60:a6:a1:e7:37:d1:13:25:b1:e4:06:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:D9:0A:9A:02:93:83:8F:F8:4C:B5:AB:0F:0C:1A:55:B5:5E:0C
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:55:12:39:ae:6f:48:51:3b:dd:a4:db:bd:ed:23:45:49:32:
ed:d4:a3:91:fb:9a:1e:e1:ea:34:cf:f4:36:87:45:40:a5:62:
97:b6:40:85:2a:c8:9e:6c:bb:da:41:06:e9:ec:d4:e7:df:38:
af:9c:e0:72:e0:9b:32:b1:90:f8:5b:72:a7:5a:40:fc:d7:f9:
3d:fa:ec:e9:c7:ad:93:d2:4b:73:2b:86:b7:e9:75:a8:30:99:
95:cb:f7:f0:a4:71:85:5a:6c:f2:63:2b:85:cd:6a:dd:25:8a:
e0:90:22:dc:f8:0e:fa:9b:78:37:57:d3:39:01:d2:e0:5a:13:
57:02:49:ba:e1:2f:c7:5c:4a:46:18:2b:07:aa:1e:16:66:69:
9d:13:2c:50:1a:ed:cd:8f:f4:d6:70:d0:1e:28:06:cd:2c:37:
89:ab:63:d1:25:3f:0d:98:3a:9b:9c:11:0a:2a:52:5c:7c:de:
b2:d7:26:9d:14:15:61:32:c6:7c:d8:6f:a9:76:c8:d6:bd:14:
9f:97:b9:3b:f1:6e:95:a4:d5:09:b6:f7:bf:5e:3f:66:89:b1:
e0:67:f6:25:bf:cf:ea:b2:fa:eb:d5:17:08:ba:51:6c:44:47:
ed:38:9c:06:9f:d0:e8:8d:73:92:a8:15:3b:f3:b4:a3:91:64:
6e:a8:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:38 2026 by rpki-client