Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: /rg+NAkm3Xf+AgpdVvnJwSA9/2/cD11Pc6l+rz14AcI=
Subject key identifier: 1E:C2:F1:4A:15:E6:3F:1F:E8:C3:08:11:6B:06:13:0B:AD:CE:39:52
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 019F9090F37480DC34EF171C710151988B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 19D7
Signing time: Thu 23 Jul 2026 20:00:46 +0000
Manifest this update: Thu 23 Jul 2026 20:00:46 +0000
Manifest next update: Fri 24 Jul 2026 20:00:46 +0000
Files and hashes: 1: 3rkjwwginUfLartcn5VoY9PgC_E.roa (hash: Nn/SgK0GWp70Grm4pzV4xOWCunqMV5me8PRwpUORXuM=)
2: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: k9/G8ItdJnCsST9XP09n0VzubS9i0wx/Xjn+TqunfKM=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:f3:74:80:dc:34:ef:17:1c:71:01:51:98:8b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Jul 23 20:00:46 2026 GMT
Not After : Jul 24 20:00:46 2026 GMT
Subject: CN=1ec2f14a15e63f1fe8c308116b06130badce3952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:db:4d:db:48:3b:7b:3d:07:c7:5e:7a:2d:
86:36:94:98:36:da:f9:03:e5:c2:d1:c5:30:ba:98:
f2:7d:44:68:f7:31:b2:41:5d:75:40:43:2c:ec:6c:
b2:63:d6:52:a9:eb:57:34:10:65:9f:e6:4b:54:ea:
f5:c4:50:4a:78:5c:e7:e7:ce:e2:54:cb:82:fb:4a:
55:ff:3c:ce:c2:02:68:48:21:1b:07:47:51:71:cd:
3b:63:62:b2:97:52:1e:8c:a4:6d:f3:0b:2b:80:04:
01:30:7f:59:5a:52:ee:b4:c7:7e:94:0a:cd:f4:c7:
f5:71:3c:83:4c:09:f5:fd:3c:d0:5e:18:88:b4:01:
58:a1:ec:88:e9:44:55:b5:c3:7c:ab:ee:be:20:f7:
ed:18:7c:28:31:72:44:1d:50:d0:aa:40:ea:40:6c:
87:b3:14:f1:bf:1d:2e:3b:00:0a:e2:5b:06:49:8d:
90:31:48:32:e6:96:d9:da:a0:c1:ec:ac:fa:67:54:
f0:ac:67:ab:84:7d:2c:96:9e:aa:f9:e7:12:f7:14:
c1:e4:6c:0f:8a:a5:77:ba:a8:da:76:27:58:a4:33:
c0:b3:c3:08:60:27:0f:43:a7:b9:97:8d:1c:59:e4:
6a:a5:3a:cf:2b:4d:81:a1:fc:13:52:0e:e7:85:b3:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C2:F1:4A:15:E6:3F:1F:E8:C3:08:11:6B:06:13:0B:AD:CE:39:52
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:74:ab:ac:71:c4:30:93:74:c5:f8:10:10:0d:85:42:22:57:
e6:d3:f5:b8:04:e1:62:6b:b7:cd:a9:d8:5f:bc:c6:c0:30:73:
10:bc:83:17:0d:c9:b5:e5:90:c2:47:97:59:7a:d6:92:26:58:
86:54:4c:2a:2a:4b:8e:44:50:6f:8a:56:82:a9:97:7d:6c:a8:
2c:55:1a:d5:7e:0d:39:17:88:2e:d6:5b:1c:57:99:4e:af:7a:
83:4f:63:5a:b4:cb:ba:95:42:d2:47:1e:bc:da:7d:57:0c:bc:
ad:6a:33:31:ae:7e:99:45:2e:4e:6f:da:26:88:a0:6d:9e:3f:
62:88:18:73:a1:26:1d:3c:4b:c1:b6:15:19:39:0c:1d:fa:a1:
29:92:94:38:46:07:75:78:2c:ff:ee:f3:1f:a8:4c:e4:10:8d:
5f:bb:32:2d:70:4d:47:dc:e5:72:0a:bb:b8:40:f9:01:7f:37:
c8:e8:b6:dc:bd:bd:d1:6f:9f:9f:ac:00:20:e5:07:b1:8e:84:
f3:d6:67:62:c8:a8:76:df:df:40:60:11:1a:73:0b:4d:70:dc:
a7:3c:14:21:16:2d:24:4e:15:28:97:e1:3a:a5:14:39:59:2e:
77:49:7d:04:0f:7a:bb:a3:97:5a:f6:87:90:34:96:96:fd:54:
26:0e:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:17 2026 by rpki-client