Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: GOnv8XZ2YATZpbDm+2f9G9h4bP+LDE0eN7rqWIsaVO0=
Subject key identifier: 4B:AD:D2:A8:5E:2A:4A:35:A4:D5:27:C7:2B:F3:97:84:97:A7:BA:28
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 01A0DEE0B43B9D39C3EEFD141273C1D5F383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 04D9
Signing time: Sat 26 Sep 2026 18:01:03 +0000
Manifest this update: Sat 26 Sep 2026 18:01:03 +0000
Manifest next update: Sun 27 Sep 2026 18:01:03 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: yggENV9mz1HmVjHy4k5Xiia+rKwcqGYqRsGO95ym/vI=)
2: XKwbgCRt39xf-ucRzd4m1YlT77U.roa (hash: Gig9/Xc/hBqodZHjGszTaZgsvQyq9DUaulQG1yPjjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e0:b4:3b:9d:39:c3:ee:fd:14:12:73:c1:d5:f3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Sep 26 18:01:03 2026 GMT
Not After : Sep 27 18:01:03 2026 GMT
Subject: CN=4badd2a85e2a4a35a4d527c72bf3978497a7ba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:10:9b:72:7c:d5:48:ab:de:38:b6:0a:73:
c4:e6:17:5e:3c:78:ab:d9:56:8b:81:df:f2:58:41:
86:ac:a3:e2:7d:1c:78:d3:90:61:ff:b5:fb:0f:5e:
2d:0e:1e:7a:72:16:07:58:0f:de:52:64:fd:8a:52:
f9:67:95:88:67:f6:d1:16:47:24:a1:e3:cc:b9:7d:
e1:a5:fa:b9:ff:41:27:7f:be:80:61:0d:36:c5:ad:
4f:2f:6d:e3:31:44:28:60:60:f8:59:b1:3b:8b:be:
34:6c:c5:70:24:b6:b2:db:de:4f:5b:6f:96:95:35:
ce:ab:bc:dc:91:43:42:42:e8:18:f1:ee:76:69:17:
02:5d:78:de:9d:e6:dc:e1:27:88:4e:6b:04:cc:23:
db:28:81:27:ac:8d:8c:e9:88:02:46:5a:b4:f4:b3:
a2:28:ac:26:64:c7:6d:3a:70:79:4d:15:04:98:20:
11:67:85:22:4f:8e:1f:08:51:85:ad:8f:62:51:43:
4e:e2:c6:7e:b7:d8:90:f9:bf:ff:0b:66:2b:42:62:
5e:d7:aa:1d:40:89:2e:42:fd:6d:6c:66:a5:61:d9:
58:b6:cf:99:49:84:ca:29:85:6a:dc:89:32:73:d3:
52:c5:31:3d:db:68:1b:38:a3:14:29:4c:55:f8:dc:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:D2:A8:5E:2A:4A:35:A4:D5:27:C7:2B:F3:97:84:97:A7:BA:28
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ce:61:89:6e:8c:f2:11:e4:60:a0:0d:09:16:f7:02:d8:12:
f6:ae:7d:40:95:67:b5:0a:5a:e3:8d:1b:a8:de:6b:17:c5:bf:
9f:93:01:8d:04:4f:51:ba:8a:33:1a:3e:fc:a6:96:8b:31:09:
c3:0e:e9:d3:e0:7c:8d:ae:6e:56:e6:16:5c:72:94:6d:ea:d0:
64:68:42:b2:87:91:c2:f0:d5:c4:82:93:99:b4:57:8a:f4:eb:
77:ee:8f:49:bc:1b:c0:bf:2f:d0:74:12:52:82:27:61:91:d5:
a2:9e:7b:48:e8:70:33:a0:df:a2:fb:3a:59:f9:93:e6:e1:ad:
b6:6e:da:2a:cd:c9:c7:ea:6e:3d:5d:53:7a:0f:31:01:6b:e8:
72:47:6f:94:a6:c5:f7:a1:97:28:aa:ec:23:0c:a6:57:19:3f:
08:01:c7:b8:9d:51:8b:58:0a:fd:f5:03:13:03:26:78:83:98:
75:48:75:ee:62:74:78:d1:d4:40:b2:35:20:79:70:4e:ed:e4:
6f:be:02:45:66:df:aa:d0:a6:04:74:f7:57:cc:01:ac:1d:e2:
d8:a1:77:99:4b:cd:75:f0:5f:8d:7c:76:f6:6f:17:e9:e1:6f:
a1:d8:4e:fd:aa:26:ef:a9:a4:e4:68:d2:1e:2d:94:09:6f:e7:
e5:36:1b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:35:17 2026 by rpki-client