Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: d8k3udygtzEAtUbA08yBSUs4ZE849BO2y1+6b6MKGvE=
Subject key identifier: A6:2C:D3:49:1A:A6:69:95:6C:70:74:93:01:1E:30:B7:C5:8A:91:FF
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 019D29298C1DCD498AB25D42576884D3B4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 0686
Signing time: Thu 26 Mar 2026 08:01:21 +0000
Manifest this update: Thu 26 Mar 2026 08:01:21 +0000
Manifest next update: Fri 27 Mar 2026 08:01:21 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: vE6JpzaUV0eknLCyz98bsV96/+0RNawRnNNxw2JsPh4=)
2: WrCSnmO3TptCu12D-7QukIGoskU.roa (hash: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:8c:1d:cd:49:8a:b2:5d:42:57:68:84:d3:b4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Mar 26 08:01:21 2026 GMT
Not After : Mar 27 08:01:21 2026 GMT
Subject: CN=a62cd3491aa669956c707493011e30b7c58a91ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:3c:f8:51:26:d6:89:71:04:e8:7b:b6:53:
d0:f1:a9:3b:4f:e5:54:eb:e1:07:61:e2:e2:eb:18:
d9:e5:2c:98:67:fe:5e:61:24:9c:3b:89:59:cd:65:
63:89:ee:30:bf:ff:01:39:8d:29:45:2b:4f:2e:40:
9f:a3:1c:11:16:91:f7:07:14:bf:d8:e5:8a:de:88:
67:0d:9f:bf:a9:90:0e:aa:f0:11:65:18:71:70:bf:
26:b7:0a:7f:e0:21:d4:37:42:c8:94:ea:cd:de:af:
f7:c6:ca:5e:9b:a5:73:36:26:68:0e:98:35:61:ef:
3d:7c:cf:f6:29:96:cb:1a:ea:27:c1:4e:6b:b2:1b:
d7:32:b4:9d:cd:3b:70:91:22:d4:8c:fd:82:e3:bd:
05:5b:6e:36:ab:29:90:23:ef:04:79:d8:df:3c:d9:
ec:fa:ff:f5:2d:7f:46:30:b7:1c:58:6c:07:31:77:
1e:f4:0f:1a:48:ca:10:50:0d:af:c0:0e:42:e4:a0:
1b:4b:58:1d:c4:68:cc:a8:34:e0:05:cc:50:4c:c9:
c7:fd:0c:7d:53:f1:37:64:1b:0f:59:97:51:bf:23:
36:0a:1e:78:9a:2f:15:1f:3e:51:49:ad:ee:7d:cf:
ff:fb:7f:cc:ba:db:05:01:e0:07:8d:84:c1:60:d2:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2C:D3:49:1A:A6:69:95:6C:70:74:93:01:1E:30:B7:C5:8A:91:FF
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1e:7e:8b:8b:cf:62:9a:4b:93:9d:9e:59:08:76:2c:00:03:
83:2d:62:6e:16:43:11:e0:f3:5e:df:38:74:8b:22:e7:be:9e:
72:ec:0c:33:84:2a:ec:47:3a:c4:5b:3b:c4:2f:4e:d5:db:32:
2e:cd:31:bd:ae:4e:f0:53:0e:eb:99:1a:6f:99:4f:af:ea:4b:
66:37:cb:ea:8b:f6:1c:a1:f6:a8:d9:7f:ec:a9:03:11:84:49:
57:e1:3b:2d:5c:5a:b1:5d:3f:46:ed:48:9a:43:78:48:00:27:
56:a6:ab:a3:13:5a:82:1f:bb:81:77:44:23:eb:9a:0c:cb:dc:
42:a8:a1:ad:26:84:97:6d:04:de:40:ee:77:7e:0c:4a:4c:73:
9f:10:80:19:c8:5b:8f:b5:3b:a7:63:0b:bd:89:51:06:a7:22:
94:f2:f8:96:a2:05:ad:93:8e:95:74:5e:5a:7a:09:cc:12:02:
62:81:db:88:ff:92:2c:3c:7b:cf:36:e1:00:d4:26:bd:35:74:
29:c9:19:2f:98:36:24:e8:7c:db:a0:67:32:ed:08:50:49:03:
32:e1:01:2f:df:40:97:9a:6f:54:44:f1:d3:99:c5:18:22:d3:
8a:63:7d:23:1c:1a:02:64:18:ea:8a:c2:75:65:6f:e7:02:ca:
3f:11:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:33 2026 by rpki-client