Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier: o+yM2UYrdzroSdsqUWX0wg8zAbGalcmN1eQKycKrlzE=
Subject key identifier: 0B:E3:32:FD:BA:49:8F:47:B5:0D:84:D5:BB:33:11:02:13:D3:1F:50
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial: 019D2960BA46A33BA94BFDEF764BE5703176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number: 0156
Signing time: Thu 26 Mar 2026 09:01:38 +0000
Manifest this update: Thu 26 Mar 2026 09:01:38 +0000
Manifest next update: Fri 27 Mar 2026 09:01:38 +0000
Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: SJPpuGPzowXqBsNTnkaeRwxsHZOWOe7vPblBODQTA48=)
2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ba:46:a3:3b:a9:4b:fd:ef:76:4b:e5:70:31:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Validity
Not Before: Mar 26 09:01:38 2026 GMT
Not After : Mar 27 09:01:38 2026 GMT
Subject: CN=0be332fdba498f47b50d84d5bb33110213d31f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:20:e8:f7:85:f2:08:53:48:ac:ac:63:16:
0a:62:dc:d1:11:ff:28:be:fe:97:ee:e3:01:ed:d0:
06:40:9f:38:33:d0:d8:a3:0b:17:fa:dd:b0:f8:26:
76:c4:fd:72:e6:4e:c3:eb:d8:3e:8a:87:4a:e7:9c:
c4:ed:18:43:9d:5e:38:73:63:ec:04:0d:87:cf:3b:
a1:28:b0:40:ce:ea:39:f6:3b:b7:8e:0f:86:9f:33:
a4:d9:2a:ab:8e:b6:45:50:5f:3a:14:1a:4f:c2:51:
67:bf:69:b4:7c:e8:61:99:c0:70:36:a2:2d:ff:e3:
b6:c6:f4:cb:94:9c:20:9a:ed:51:03:b3:1c:e0:66:
73:0c:5d:a7:15:e8:5c:7a:b9:bd:05:ab:19:05:3c:
24:f8:2b:cb:0f:bb:81:6b:78:04:74:90:79:fd:9d:
2b:db:b2:11:24:23:22:08:04:2f:45:44:7d:01:74:
e9:4f:51:98:0f:45:62:84:70:33:1d:49:d8:2d:c0:
91:3d:06:67:95:a0:70:5b:10:e5:69:f3:53:f0:b5:
c1:9f:84:11:38:77:bb:5c:c3:58:f2:c9:76:ed:9e:
55:dd:5e:08:01:35:38:46:2a:53:01:7b:a5:37:26:
19:80:ab:99:ea:57:61:c4:3b:52:c6:90:2b:54:a1:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E3:32:FD:BA:49:8F:47:B5:0D:84:D5:BB:33:11:02:13:D3:1F:50
X509v3 Authority Key Identifier:
keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3c:23:2d:66:2f:18:86:0b:5f:0f:a2:09:9c:37:1e:e4:69:
6c:6c:c7:c1:3b:a4:d9:13:06:f9:ae:74:18:e5:b0:9e:6a:54:
ff:4b:c0:87:5e:6a:d0:78:fe:4f:55:39:de:9e:2a:84:35:93:
5b:5f:c2:c9:e4:80:15:00:95:00:f5:5c:49:3a:f7:4d:6d:ff:
1d:0e:9f:24:87:f0:66:ea:4a:37:f0:f5:ee:0f:e6:81:93:66:
5d:e6:5f:54:37:bf:5c:d6:27:65:84:50:b7:d1:4b:25:8f:11:
e5:21:fd:f6:29:0c:1b:a7:77:c9:59:b3:9f:fe:7c:60:d2:42:
b5:dd:b2:df:4e:1e:f2:7d:75:16:a5:3e:06:3d:57:0c:8e:9b:
62:df:c6:85:dc:33:41:f8:5b:50:b6:cb:40:e9:1e:84:fa:a5:
61:88:5e:ee:cf:e1:22:9b:1b:fe:69:58:84:bf:7b:fa:4f:06:
47:1a:85:6f:c8:19:db:2a:a4:96:1e:9b:2f:8b:6c:08:d6:b0:
be:63:76:da:22:58:13:ee:57:d2:74:4a:80:76:8d:9c:4f:1f:
21:41:30:42:0e:35:7e:0c:b1:86:17:d2:e9:13:df:ee:19:d3:
0e:e9:d7:56:4e:da:2e:56:57:d4:f5:98:e0:1b:f2:16:b0:67:
44:89:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:43 2026 by rpki-client