Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: Hujg+wv1+wiHOLlkcbWhKgmLMpAL+dIoj4ntT5eNMGU=
Subject key identifier: 10:00:CD:37:C2:11:62:C3:91:84:E0:E5:F6:0D:5B:BB:35:42:3D:C6
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 019E202358BE19009158E57F013B6FA403DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 1914
Signing time: Wed 13 May 2026 07:00:47 +0000
Manifest this update: Wed 13 May 2026 07:00:47 +0000
Manifest next update: Thu 14 May 2026 07:00:47 +0000
Files and hashes: 1: EcTxX-SiywrzoNwOuII1aWR6zHs.roa (hash: beN8BaOivwm2yhNJxlNC7Uur/3tPi7/Y31IRkJGKn0c=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: 0PiriSXXp3FziS1ZKYmnKQUd/9HoXCYtYAxo5BEIPaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:58:be:19:00:91:58:e5:7f:01:3b:6f:a4:03:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: May 13 07:00:47 2026 GMT
Not After : May 14 07:00:47 2026 GMT
Subject: CN=1000cd37c21162c39184e0e5f60d5bbb35423dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:b1:8a:0b:56:12:12:8a:45:54:8f:42:c1:
6b:7b:62:46:99:8d:6f:82:4d:0c:76:fe:3d:dc:96:
07:62:7b:60:46:e6:24:d5:57:87:5c:fb:7f:a3:42:
dc:67:8e:78:93:2f:89:65:86:95:be:1a:be:88:40:
fa:3e:1f:f5:97:15:03:1a:da:bf:1a:83:ed:2b:17:
94:42:7f:5e:05:5b:1a:12:ed:65:6c:1a:2d:aa:aa:
0a:be:4e:1d:22:5d:ed:81:d1:fc:9f:4c:a4:62:86:
c7:f6:8f:e7:47:77:f3:9c:97:a9:ba:91:7b:eb:4a:
ab:a7:4c:7c:ec:08:b7:7d:63:10:5d:90:8b:95:b9:
19:57:64:26:60:59:29:2c:b0:43:f8:23:78:7f:38:
9d:88:5c:ff:62:e8:f7:57:2e:0a:05:be:7a:e8:86:
4a:b7:28:e2:0c:fb:dc:79:8c:50:42:57:9f:f6:a8:
1a:a0:6a:ee:b7:77:d7:e1:2e:d5:ae:1a:53:3c:5e:
35:50:94:96:ff:f2:55:b2:55:cf:f5:c3:6d:39:e1:
03:03:41:4e:1e:45:ed:74:57:31:0b:7a:a4:ac:22:
55:c9:1f:62:32:08:ab:10:08:01:0a:63:cf:11:b5:
da:34:a0:df:ce:a5:b0:02:71:5a:3d:ce:ff:00:f2:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:CD:37:C2:11:62:C3:91:84:E0:E5:F6:0D:5B:BB:35:42:3D:C6
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:32:2f:25:64:08:cb:80:d5:3a:f3:71:2b:88:8d:2a:48:02:
71:b0:0c:b3:13:47:2f:08:f2:aa:c7:3a:f9:32:cf:7d:99:81:
d0:c5:38:c8:50:6a:97:1a:42:87:40:16:e8:ca:5e:29:ca:a6:
18:d0:f9:2c:bc:8e:84:53:57:8c:4e:14:8c:17:26:12:36:a5:
62:43:d4:df:ba:c8:6c:87:df:e8:f0:95:0e:4f:78:13:86:c7:
4c:0c:ac:f2:07:a1:f9:cb:fd:9e:e2:81:f0:7e:8c:30:6f:78:
d1:ea:9a:f4:72:2a:5c:76:c1:c7:4a:bb:fe:8c:a0:0e:09:4e:
8d:3a:aa:10:80:94:2f:94:36:25:e8:d1:d8:e4:f2:75:13:ef:
6b:fc:f5:cf:37:27:62:bb:3a:e0:bc:fa:01:8c:cd:7c:e6:90:
f9:a4:4c:0f:7f:46:3f:02:64:b6:35:61:01:b7:53:8c:d2:8d:
a5:7b:58:90:cf:5a:3d:18:93:ae:2b:13:9c:e7:b6:a5:34:ce:
ce:d0:39:9c:12:21:08:60:b0:a5:52:9b:35:e1:19:60:2b:9d:
8b:3a:ed:4c:aa:4a:19:ee:cf:72:56:bf:d9:ce:40:61:e7:10:
cf:07:a1:d5:2e:19:b0:50:7f:f0:37:94:35:91:34:84:38:2e:
9e:78:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:37 2026 by rpki-client