Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: LlNfFN+++P+ufg6aqhiWcumpXa8S0kRHdBHYdmZF7gw=
Subject key identifier: CD:14:34:F6:1F:8E:29:AA:41:F1:74:76:88:A2:D6:93:1F:0D:60:C5
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 01A0D804D279E350DA12F4BA7BE8C32CA6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1A82
Signing time: Fri 25 Sep 2026 10:03:09 +0000
Manifest this update: Fri 25 Sep 2026 10:03:09 +0000
Manifest next update: Sat 26 Sep 2026 10:03:09 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: WPzltRxOWhOOsOvCoaJBqv7ZY5t+xtRB+2D/jyqvbHA=)
2: _l4YjibNL4tMMVqIwdmfRf9vXqI.roa (hash: P9JOmxd5QUs3HnQ33b/0KwXQ8MA8bLPVK9YMxcnjWHU=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:d2:79:e3:50:da:12:f4:ba:7b:e8:c3:2c:a6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Sep 25 10:03:09 2026 GMT
Not After : Sep 26 10:03:09 2026 GMT
Subject: CN=cd1434f61f8e29aa41f1747688a2d6931f0d60c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:08:ef:b0:d3:62:fb:99:c4:09:20:97:e0:63:
5e:23:cc:7e:52:4b:18:0c:b2:bc:b1:33:c6:aa:02:
09:1e:d1:69:0a:c8:c9:5c:29:d7:39:6f:47:f7:4f:
20:9c:64:a8:fb:53:9c:76:1b:35:28:64:34:70:56:
27:af:f2:25:3d:db:3e:53:97:5e:42:dd:c3:da:9a:
3a:8d:5a:c0:21:61:13:5a:16:d7:60:89:aa:0c:c1:
ef:2a:6f:26:82:69:e6:96:2a:1a:26:17:ba:18:be:
9e:9d:8a:27:4f:10:96:95:c1:60:52:68:f5:bb:e9:
1a:d2:e5:14:16:06:62:8c:d2:c2:3c:9d:7d:a6:3b:
89:5d:2a:c0:66:27:77:2c:ec:b5:31:7c:a2:e7:01:
0e:36:db:e2:54:7d:32:9c:89:08:a5:75:61:6d:b2:
4f:a0:31:5a:ab:d1:73:a4:68:0f:2b:43:0e:f3:75:
1e:f6:61:a4:c5:29:d6:21:76:96:ef:7c:8b:01:4d:
fa:36:25:f6:42:39:53:16:3c:ad:80:82:9f:7b:d4:
15:45:36:eb:bf:67:cf:ab:a0:09:ac:8f:d2:bd:1c:
a8:de:52:71:f8:1e:62:fd:3e:e1:6b:3e:68:93:06:
ff:57:1c:e1:03:ec:ac:ec:e0:3e:d6:89:1f:02:f8:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:14:34:F6:1F:8E:29:AA:41:F1:74:76:88:A2:D6:93:1F:0D:60:C5
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:31:36:47:34:c8:97:ab:64:23:a1:f9:ed:15:05:ed:6f:75:
9e:ce:c1:69:05:fd:a2:eb:36:bf:1b:05:26:55:e7:a4:4b:1c:
9e:15:4e:62:8b:8e:58:47:85:de:e3:76:29:b5:c1:73:a4:6a:
ee:90:ad:1f:bd:a3:bd:1d:a4:16:d4:53:02:c2:3c:1e:e7:df:
2c:b5:a3:be:99:11:20:fc:b2:63:2b:81:19:6e:6a:88:45:be:
59:cb:cd:21:6b:6c:86:f7:0e:9c:35:c6:10:68:3b:f3:c9:79:
47:f3:f4:5d:8a:17:ca:43:83:6f:4c:19:80:dd:c0:83:06:f3:
89:a5:ac:4f:39:36:61:9e:1b:7a:35:c6:b6:92:57:74:9e:02:
6d:d5:bf:77:bf:0d:24:4a:79:43:55:60:29:7b:d2:6e:4b:3b:
22:f5:bf:80:a8:4f:de:5f:aa:b6:9e:93:4c:c6:75:40:df:f6:
fc:76:45:d7:aa:10:f6:3a:a8:49:9f:fa:4d:a1:04:40:62:34:
fe:1c:41:85:f3:11:30:ce:3d:5c:37:c8:bc:41:21:07:38:81:
a0:73:7e:ed:02:4a:c5:f6:c1:3e:e9:26:6e:ad:84:d7:36:62:
9e:64:e2:b3:20:e9:d5:bd:b8:dc:62:67:95:80:37:40:f1:c9:
db:a9:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:07:21 2026 by rpki-client