Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: 6MtIPIyAbxo0JqwJCfKzu6Qd9T02gZH6c6wQ9mtPbDY=
Subject key identifier: D6:47:EC:CC:03:02:F5:EE:0F:66:FD:AA:A4:F2:E3:05:BA:75:9E:10
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019F916C8124141423466942DD4A6549542E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 042C
Signing time: Fri 24 Jul 2026 00:00:34 +0000
Manifest this update: Fri 24 Jul 2026 00:00:34 +0000
Manifest next update: Sat 25 Jul 2026 00:00:34 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: fSUA0E8Ba3ActJUL8c3T2zPuCZZwWq1QkoH6R/i6htw=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:81:24:14:14:23:46:69:42:dd:4a:65:49:54:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Jul 24 00:00:34 2026 GMT
Not After : Jul 25 00:00:34 2026 GMT
Subject: CN=d647eccc0302f5ee0f66fdaaa4f2e305ba759e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:11:55:ce:a5:07:19:e8:dd:88:0c:b2:84:
59:cf:72:6f:e9:3f:34:ec:1a:09:70:8d:37:af:02:
20:27:ea:fa:65:9a:f0:30:a7:bd:61:a7:93:b4:8a:
a1:fe:ba:39:84:bd:dc:25:66:24:a9:55:c4:c5:83:
0f:25:58:eb:af:6f:b5:f8:fa:7b:5b:c9:49:6a:6c:
aa:f2:af:3a:05:58:64:37:70:71:6d:1b:15:cc:76:
e7:34:43:74:b1:49:0f:eb:4d:b3:2a:5f:59:26:c6:
7c:9e:f6:4c:29:04:49:31:3f:86:b9:54:51:3a:ed:
8e:c5:f5:8d:ae:06:db:99:b8:66:47:f8:03:a4:3b:
4e:ca:0e:f7:dd:ba:f8:5e:28:94:b9:8a:59:85:c5:
93:c0:a8:17:95:02:3c:45:0d:e5:67:9f:1d:8f:cc:
0f:88:5c:5e:ae:5e:70:12:28:44:ef:32:18:de:89:
9f:dd:87:e0:47:e6:82:da:b5:24:40:9d:d8:6b:7c:
26:d4:4b:3c:91:b2:73:7c:06:85:bf:12:a3:52:fa:
d0:98:63:e9:2b:d6:26:49:74:77:a5:4f:3a:56:73:
a9:a4:d9:be:4c:91:26:3a:68:47:e1:e8:ed:56:ea:
cb:f7:03:33:d0:8a:3a:51:65:6d:a3:22:b6:54:36:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:47:EC:CC:03:02:F5:EE:0F:66:FD:AA:A4:F2:E3:05:BA:75:9E:10
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:bd:bc:54:53:fe:a4:ad:e0:79:ce:fb:fb:5d:b7:5d:97:ef:
b1:55:a2:0f:33:4c:bb:e1:7d:d6:3d:9d:29:27:6d:eb:65:ab:
e6:f5:c2:23:bc:93:3e:ac:4f:7b:30:9f:8e:6b:18:d9:4b:bb:
5f:da:01:ce:e1:5c:34:2f:1a:b9:f9:f5:be:02:f2:5c:aa:43:
b2:85:c4:da:be:93:73:90:b8:3b:45:4a:7b:7e:e1:72:59:c3:
3c:f5:f0:71:c8:66:86:b5:5a:40:a4:4b:72:34:37:10:e8:18:
41:5b:4d:81:43:3e:1d:cb:a1:2a:7a:60:b5:d3:78:e5:22:91:
65:5c:d6:e0:db:63:40:01:be:6b:d3:fa:fe:44:39:0e:29:53:
99:b3:ed:8f:9c:da:49:f8:b2:6f:19:f2:eb:e5:53:6d:9e:57:
90:7b:ea:c1:4d:09:ae:d5:79:6f:20:fa:07:c0:7f:f4:e0:a7:
6b:0e:10:28:59:ed:1d:30:a7:1e:52:49:81:73:a6:fb:4c:62:
b7:43:d3:f5:00:13:1e:f7:6a:30:c5:d2:ea:c4:33:76:f7:66:
aa:c6:2c:bd:b3:f0:6a:41:b3:48:8d:f2:15:30:81:90:4a:25:
62:77:85:f6:b5:c2:72:9a:46:60:7a:0a:32:75:45:73:cd:58:
45:d7:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:46 2026 by rpki-client