Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier: FFblNBv+Mx2iefWyZz30bl4gQ5D1JFA8YuG1s2m1sh4=
Subject key identifier: B2:54:08:CB:89:20:F1:9F:04:2A:A5:58:A5:74:93:9A:3E:20:CB:DF
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial: 019E1EA334D4378B8429228486BCA117761C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number: 01D5
Signing time: Wed 13 May 2026 00:01:12 +0000
Manifest this update: Wed 13 May 2026 00:01:12 +0000
Manifest next update: Thu 14 May 2026 00:01:12 +0000
Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: qgCpaRvBRhvnVo2DZAZVH1vzwHlty+tuoYLv7dBSgQs=)
2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:34:d4:37:8b:84:29:22:84:86:bc:a1:17:76:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Validity
Not Before: May 13 00:01:12 2026 GMT
Not After : May 14 00:01:12 2026 GMT
Subject: CN=b25408cb8920f19f042aa558a574939a3e20cbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:bd:10:28:e8:72:d8:ca:07:a5:8f:07:8c:
c6:3a:48:a9:d2:64:15:78:2f:ca:de:ba:02:4c:dd:
df:98:d7:d1:e9:66:30:0e:2c:7c:2d:83:be:d7:72:
37:ba:4c:d3:59:be:e8:0b:22:88:4d:df:90:75:a0:
46:9b:8c:e3:b0:10:db:9f:98:80:31:18:8f:4f:6c:
60:bb:5d:35:ae:99:7e:3e:cc:fe:8a:75:f0:49:fb:
77:4c:5f:f5:7f:9b:b9:0c:31:e7:d7:14:b4:be:11:
97:c1:96:51:85:16:b8:8d:ef:8d:03:cc:a6:aa:82:
18:63:5e:09:0e:40:ba:8a:c4:09:47:07:0d:4c:f8:
75:d4:3e:13:4e:11:6c:2b:c4:80:81:a0:a9:0e:9a:
26:bf:d2:49:b8:4d:c6:59:6a:9f:93:1e:35:65:ce:
ee:9d:ff:6b:a7:54:2f:8a:0b:19:16:e8:ed:ba:f5:
5e:91:a9:4f:33:34:f4:97:11:02:9f:38:ba:ed:46:
ee:77:a7:2c:0b:92:a8:37:47:1f:9e:45:22:06:8e:
3a:db:5d:35:34:a5:f2:8f:28:be:88:76:c4:e1:68:
6e:e2:c0:21:9a:2f:76:16:a2:d7:30:f6:c0:7b:d8:
ab:6c:8b:22:91:fb:4b:4e:d7:89:c1:38:36:f5:8c:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:08:CB:89:20:F1:9F:04:2A:A5:58:A5:74:93:9A:3E:20:CB:DF
X509v3 Authority Key Identifier:
keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:b6:df:8b:e7:20:50:77:d9:aa:73:5a:a1:e8:77:40:94:
d9:e7:e7:f3:f9:26:cb:96:85:4c:42:5a:82:80:7f:c3:8c:92:
78:5e:4e:f3:18:9d:50:54:c3:b4:70:53:ba:e6:22:b9:c8:aa:
d1:74:e1:e7:f2:4d:9b:99:cb:22:93:50:02:50:76:54:b0:57:
2f:a5:41:9c:ce:19:f2:4e:a2:ff:04:74:e8:19:6a:ac:61:b0:
60:75:47:7a:25:c9:b8:ef:dc:b7:18:0d:18:5f:54:0d:bb:85:
0e:4a:2b:27:d6:6d:df:c5:67:54:af:c1:0e:dc:ce:b5:b5:36:
6f:ba:e4:a0:e1:8b:5c:86:01:a5:96:bf:0c:a3:4c:de:86:c4:
81:fa:97:a5:de:1f:26:d5:db:fd:a1:84:0d:40:61:a2:e7:25:
a3:a7:77:28:cf:8b:8b:fe:5c:9e:50:4b:3b:b7:68:e0:76:c1:
9d:e2:0b:b8:84:6e:d3:71:9c:15:20:38:eb:f1:6c:1d:f4:53:
e3:09:1d:e7:8b:1c:0a:8c:b5:5a:fb:9f:bb:fd:de:12:60:2f:
d5:6e:4f:e8:c6:9b:37:9f:db:ea:09:70:17:65:2b:04:b5:f7:
f4:86:94:03:94:37:c6:16:e1:fe:96:1b:ff:7c:03:26:c6:75:
0b:57:33:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:38 2026 by rpki-client