Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: ILvwdysvBN+SabizkNyT6UuWwW20fYXyUdyEeuCOvw8=
Subject key identifier: 7A:54:55:D6:D2:5A:1F:90:A9:34:15:EC:42:98:15:70:5B:C4:C5:74
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 019D25832EEFB3090E58B6823E306536CDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 15:00:47 +0000
Manifest this update: Wed 25 Mar 2026 15:00:47 +0000
Manifest next update: Thu 26 Mar 2026 15:00:47 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: LPBcDK0DNKyQVh4eOWDdnAEMWGOCCm3csUXZgPXixIM=)
2: rdPF1oSF697o-6J7h737TTdZ1tI.roa (hash: sMXUA/wK5htTFnsVDTj5g0Rhpnmfg7FybwvswSl03mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:2e:ef:b3:09:0e:58:b6:82:3e:30:65:36:cd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Mar 25 15:00:47 2026 GMT
Not After : Mar 26 15:00:47 2026 GMT
Subject: CN=7a5455d6d25a1f90a93415ec429815705bc4c574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:1e:43:fa:30:df:48:91:31:ce:b5:38:c4:
22:e9:14:59:f3:3a:63:1a:78:24:18:3b:e8:5f:54:
1b:b2:a6:e1:90:e5:cf:eb:c9:02:5a:02:c5:3a:7e:
5c:77:82:0c:52:3c:a3:93:2e:2b:fd:c0:ed:1e:fd:
1c:9d:71:7f:63:a4:6c:dd:c3:c7:f8:38:e7:f1:62:
94:64:7f:17:bb:9d:03:db:3d:78:05:a0:8b:7d:ed:
e3:71:de:a2:73:05:b0:23:c1:f2:4b:d8:05:8a:3a:
e8:e4:26:01:20:ff:64:6e:51:d3:03:18:56:fa:cd:
01:a1:eb:1a:77:99:62:eb:56:ef:a6:e6:38:3d:0d:
32:57:55:a9:e5:06:ae:e4:28:15:f7:79:5a:b9:f1:
d8:fd:44:49:e1:87:84:3a:57:4c:53:59:7d:17:e8:
ee:64:ab:d6:80:04:df:28:ed:7b:08:a9:03:47:df:
e8:23:cf:41:01:45:64:ed:56:8f:74:32:df:da:96:
d3:bd:01:76:2e:4d:1b:0e:c9:43:45:23:9f:f7:a6:
f6:8e:93:f3:f4:70:82:2c:d7:6c:16:aa:b1:57:07:
ed:55:f0:44:f4:2c:cc:1b:79:07:ec:22:9d:87:13:
97:b8:75:b2:25:07:79:19:f2:93:ee:7d:fe:0f:fd:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:54:55:D6:D2:5A:1F:90:A9:34:15:EC:42:98:15:70:5B:C4:C5:74
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:d7:e2:ad:bd:ae:9e:9c:1b:8a:eb:d5:9f:a1:62:71:ca:
58:d2:e1:00:13:14:e0:31:a3:e2:1a:a3:40:98:5c:b5:15:04:
5f:37:df:90:7d:7e:d3:52:b8:4b:06:ab:07:27:c0:c6:5b:32:
a6:97:25:5e:27:78:04:1e:36:29:5e:45:98:41:ef:51:84:6d:
e7:9e:48:b8:6a:55:7c:c1:f8:0b:01:92:8f:06:20:b8:32:bb:
f5:68:db:02:59:77:38:82:00:0a:33:b8:e7:66:ac:52:18:1a:
40:84:69:f0:04:eb:0d:65:c5:57:5f:26:4a:c5:b5:5d:a2:89:
d0:b9:e7:b5:82:18:7a:98:b4:5d:5e:7c:40:af:fb:bf:de:cd:
09:bc:38:f7:10:e8:73:15:2d:59:20:d7:fc:d5:01:bd:c5:ee:
9a:42:33:90:27:78:1e:cf:5c:8b:40:ec:d2:5c:12:a0:b6:39:
8a:7b:8d:c3:6c:bc:94:dd:df:53:ea:7e:50:05:ca:e8:1e:a7:
76:1f:1d:91:b8:3b:8f:5c:64:b8:b0:b5:9e:8f:7d:e1:cc:07:
23:bc:f7:52:0e:c9:b7:4f:94:97:08:c6:5b:21:16:72:39:d5:
7f:3d:9d:84:c6:c2:15:01:2f:89:30:ad:a8:72:e9:1f:d3:8f:
1d:f8:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:33 2026 by rpki-client