Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: 7ocfCRMvp5vyoxRsknq9PE8HocBrjHGe5B/CKGqmQgA=
Subject key identifier: A8:53:62:AD:0A:9E:BE:57:31:9A:B8:28:E2:B9:5A:70:D6:32:1E:D0
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 019F92ED15221024E52CEFFAE868FACC6E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 19D4
Signing time: Fri 24 Jul 2026 07:00:38 +0000
Manifest this update: Fri 24 Jul 2026 07:00:38 +0000
Manifest next update: Sat 25 Jul 2026 07:00:38 +0000
Files and hashes: 1: EcTxX-SiywrzoNwOuII1aWR6zHs.roa (hash: beN8BaOivwm2yhNJxlNC7Uur/3tPi7/Y31IRkJGKn0c=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: +KxN8rMgmJlKuAj5BebG7ONOANBevd9T6bvo9rTV6Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:15:22:10:24:e5:2c:ef:fa:e8:68:fa:cc:6e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Jul 24 07:00:38 2026 GMT
Not After : Jul 25 07:00:38 2026 GMT
Subject: CN=a85362ad0a9ebe57319ab828e2b95a70d6321ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:10:c8:65:4f:74:9d:e7:68:ba:37:34:5d:
bb:08:36:ab:8d:8c:76:9d:95:08:5b:f2:a8:13:72:
57:09:be:14:b5:42:c7:c9:29:04:19:13:48:b1:ba:
81:5e:56:01:11:54:4f:e0:d0:25:1f:ab:1e:1b:c8:
30:17:96:99:fe:e8:53:1d:3a:b3:24:c5:0e:12:48:
52:1a:08:9c:73:2a:4b:29:b3:05:52:c7:ec:9e:db:
91:24:1d:fc:5f:93:45:52:73:07:16:43:8e:24:7b:
4f:b6:15:4c:78:a4:1a:58:8b:22:07:c6:e5:f9:40:
62:c5:f5:e0:09:67:f1:c7:67:98:65:75:2a:08:9e:
23:74:2f:09:7b:5c:71:be:08:75:b2:05:a7:44:7f:
d8:e5:3b:40:6f:02:16:7f:7e:ab:ce:02:da:46:39:
82:19:39:0c:91:84:d6:85:3d:3a:82:a3:1e:82:f3:
cf:14:92:a1:49:8c:9b:74:91:e5:67:ab:4a:11:67:
11:22:b8:bd:49:d6:85:d7:18:71:38:90:b3:b6:4f:
32:b2:fd:7a:54:10:e8:b2:47:44:b4:a3:0d:57:97:
00:a5:4d:4a:18:22:7f:e9:81:c9:9d:73:93:a6:92:
ea:73:87:2f:7f:1e:92:bf:60:2c:2b:80:23:e0:92:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:62:AD:0A:9E:BE:57:31:9A:B8:28:E2:B9:5A:70:D6:32:1E:D0
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:68:bc:3c:7a:58:ea:9c:4a:ba:a9:f2:14:2e:75:82:2d:66:
4b:b5:ed:76:41:5b:0b:ed:95:b4:0b:de:80:09:e9:2b:d8:90:
ad:c7:ed:42:8d:e2:26:4b:97:83:01:dc:2f:51:0b:07:28:2a:
94:c9:1e:34:18:ad:f2:b1:bd:f2:2b:58:a2:31:6c:d7:60:c4:
d3:69:7c:22:6a:66:97:89:e1:6b:f6:a9:fc:34:ca:cc:01:9a:
e6:2b:16:a8:a6:00:5b:ee:1c:eb:b4:f3:15:e6:b8:35:1d:c2:
00:1d:33:cf:77:05:14:e8:6e:52:79:b7:9a:50:84:fd:9e:a8:
fe:18:d9:68:4c:bb:9c:48:5b:8c:ba:8a:97:41:d0:03:70:5e:
b5:f1:3f:70:1a:2e:34:06:a7:0a:aa:2f:8b:c7:2a:41:30:c4:
75:36:9c:9c:61:b8:7b:cd:ff:e2:6e:da:60:a7:c9:84:7f:22:
2f:7a:38:d2:9e:b3:c6:77:55:14:f7:8c:6f:71:e4:b9:64:24:
5a:52:36:f2:af:1f:fa:66:aa:48:65:ef:9f:ed:ea:69:cc:5c:
ae:46:fe:05:68:d2:f0:2d:fb:a7:70:b9:59:d2:4d:c6:0e:60:
f6:d8:a3:c7:e9:f7:bf:aa:f5:8e:8d:a2:1e:c7:b9:a1:06:8f:
10:3d:d1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:25 2026 by rpki-client