Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: e/qjE1tq/3sdXAMeVRkTW9GmecXlN7ldPkDBstBit5w=
Subject key identifier: 28:AB:20:B0:83:81:CF:7B:B1:2C:5C:DD:36:D5:2E:CA:03:3D:4E:4A
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019D2960E48CBBC35869748DD8FBEEF8C890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 02ED
Signing time: Thu 26 Mar 2026 09:01:48 +0000
Manifest this update: Thu 26 Mar 2026 09:01:48 +0000
Manifest next update: Fri 27 Mar 2026 09:01:48 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: GijcNR6P8+7HeqYqTx695U8Oo4FybWO41aFr241pEXQ=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:e4:8c:bb:c3:58:69:74:8d:d8:fb:ee:f8:c8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Mar 26 09:01:48 2026 GMT
Not After : Mar 27 09:01:48 2026 GMT
Subject: CN=28ab20b08381cf7bb12c5cdd36d52eca033d4e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:00:a5:5f:d3:90:38:a4:46:ac:10:c1:77:
bd:e0:68:72:a1:9f:58:f0:3c:d5:17:f3:b4:a0:3c:
dc:d5:d3:31:33:60:4e:e9:b5:b2:92:e8:eb:a8:36:
46:e3:66:85:53:3a:59:a6:b1:3d:96:eb:c8:a1:39:
2d:a2:b1:37:aa:5b:02:74:d7:69:b3:95:3f:ea:a6:
4a:90:6e:32:e7:ca:69:f2:09:93:53:52:f0:f1:b3:
d8:32:0b:99:b4:b9:8b:47:41:b3:8e:30:eb:aa:7d:
dc:48:42:61:f0:5b:4e:c4:aa:a0:1e:3b:d8:57:87:
39:6b:6a:63:7b:bd:8a:33:d3:87:e1:a2:d7:b4:f5:
b9:89:89:9e:ee:cc:6f:72:ee:65:7e:8a:57:52:11:
9b:fb:80:fb:14:8c:8d:e7:0d:44:95:04:3f:aa:fe:
dd:fa:14:25:42:fa:19:33:c4:56:ad:93:df:fb:cb:
94:53:38:74:ee:19:28:03:ee:02:3e:58:d2:8a:c6:
e6:84:ee:db:a7:a8:cb:82:1f:26:12:69:08:a3:36:
49:32:83:46:8e:69:ac:87:47:89:c6:0e:57:dc:8c:
d2:ad:98:fc:e2:84:1c:ae:d0:47:da:5a:ba:16:6b:
e8:73:d4:4d:28:ae:98:af:94:e4:df:dd:49:cf:35:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:20:B0:83:81:CF:7B:B1:2C:5C:DD:36:D5:2E:CA:03:3D:4E:4A
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:c5:f1:af:d0:7f:2c:cf:42:58:6f:3d:17:2a:76:a6:59:2d:
52:2c:b7:c4:16:c8:62:13:cd:92:7d:42:61:37:b2:a3:02:66:
f2:db:8d:1d:c1:21:df:fd:4c:d7:b1:e1:bb:ac:45:a0:c9:48:
83:14:d4:94:18:03:5b:1c:11:8c:ac:b0:9c:30:00:bf:62:85:
a1:cd:44:44:50:11:27:46:dc:90:1d:bd:cb:02:5d:b4:f7:c1:
1b:f3:80:b7:9d:35:b9:fa:d9:00:1e:87:01:1d:05:1f:2f:70:
52:7b:e0:67:e3:4b:45:ad:71:af:6d:f2:d9:5c:6b:13:d6:c0:
8f:b8:a1:58:f6:44:18:c1:47:9e:a8:5f:51:77:38:16:8d:3a:
40:e8:05:b6:cb:8d:18:1a:52:c7:30:71:ba:e8:9b:b7:c3:9a:
e7:7e:db:2b:b5:d1:4b:d3:08:b7:73:fe:4b:3b:a6:e1:50:28:
59:e9:33:c7:84:b5:26:ab:30:20:ca:be:98:ce:3d:66:f2:25:
d1:2b:ba:af:dc:31:7c:a4:17:a4:05:4c:99:8f:8e:48:a6:40:
1b:0f:d8:b7:5f:8b:9d:1a:1f:0f:66:fa:da:87:c5:68:ea:dc:
72:53:1d:1c:a7:41:70:72:ca:ee:49:59:e4:18:d5:40:b9:e1:
75:16:ac:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:00 2026 by rpki-client