Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
File: bzU9GF_B600HBKS0qJD5i4tP74M.mft (raw, json)
Hash identifier: ifbvZfcUn3+WKRbA8CWvqejwMp4yl45lt0l3SQ69Mog=
Subject key identifier: C6:47:95:8F:3E:DF:74:52:8D:D8:3A:F5:89:29:EE:A0:4F:FA:2D:56
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 019F916D4276E0B2A7801D403F78CE87FB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
Manifest number: 17EC
Signing time: Fri 24 Jul 2026 00:01:24 +0000
Manifest this update: Fri 24 Jul 2026 00:01:24 +0000
Manifest next update: Sat 25 Jul 2026 00:01:24 +0000
Files and hashes: 1: bzU9GF_B600HBKS0qJD5i4tP74M.crl (hash: Gla0UDkla+BdtVOr0mZcuoOq/FFifxtAAtpYbOEN3B0=)
2: dEBO9P2rTzMGj8WCAwefx9LMEiY.roa (hash: KzSq8awg8N2A2yqoLCZBBx9w+DQcNParU+eeSoLEIgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:42:76:e0:b2:a7:80:1d:40:3f:78:ce:87:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: Jul 24 00:01:24 2026 GMT
Not After : Jul 25 00:01:24 2026 GMT
Subject: CN=c647958f3edf74528dd83af58929eea04ffa2d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:ff:1e:d5:61:69:26:9d:72:81:28:c4:20:
c6:7d:f8:e5:0b:d0:4c:10:7e:9a:8e:e0:4d:38:a5:
85:b8:bf:8c:c4:f3:30:48:ec:81:e7:89:89:3f:24:
6c:57:1f:f8:38:ad:a7:09:59:eb:cd:14:73:a6:17:
95:b3:a0:14:89:6c:52:88:d7:ec:50:6d:48:c6:80:
5e:62:8a:26:6b:de:fb:1e:1f:52:21:5a:dc:26:14:
fe:7c:8a:72:37:63:98:b6:94:a4:2f:fc:81:96:f6:
17:8e:3d:57:22:db:9d:c8:f9:ed:f3:16:6e:d9:ae:
e7:6a:58:ff:15:74:26:12:fa:da:58:b0:b3:7e:e0:
c2:42:05:56:eb:19:77:9a:09:28:bd:8e:7e:34:86:
53:7a:65:e7:74:be:be:04:5e:01:72:d7:b4:85:54:
91:49:17:89:9b:5e:25:65:c8:91:0b:55:66:02:5c:
9e:72:d1:b0:9a:44:df:0f:90:53:e8:65:f2:81:46:
76:79:9e:9a:06:02:5c:3f:fb:84:8c:f3:f6:02:ca:
9a:63:81:ff:d5:6b:84:35:39:47:c7:de:71:8a:1e:
f0:b8:98:a8:12:e2:11:43:e2:dd:2b:f9:9e:9b:5e:
7a:55:a9:d5:a4:31:58:e6:ba:2a:fe:43:23:bc:f3:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:47:95:8F:3E:DF:74:52:8D:D8:3A:F5:89:29:EE:A0:4F:FA:2D:56
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b3:b3:fc:84:99:86:1b:a3:a7:00:7d:47:1e:b3:f1:85:c7:
65:98:94:02:05:e5:dc:20:fc:9a:55:12:ec:85:1e:9d:b9:f6:
af:0c:c4:1f:3e:41:d2:e7:b6:08:c1:fe:eb:69:06:e1:55:e8:
a9:b5:00:28:af:00:d1:51:b5:42:0e:b5:5a:25:ef:88:e7:7e:
b8:c6:96:0e:b9:62:fb:f5:78:39:ea:33:a0:70:7b:38:ef:13:
ed:2d:70:17:05:f8:cb:02:90:66:27:2d:73:23:9e:07:09:d3:
aa:df:3f:a1:dd:77:94:b6:9d:60:4f:91:08:9e:2f:db:5a:f7:
a8:ce:8f:6c:fe:43:a9:44:24:35:06:0f:bf:6b:1a:88:1d:64:
17:2f:96:13:65:98:b7:de:43:9d:30:97:99:71:7c:8f:4f:7a:
59:1a:46:a8:b0:55:f9:c9:76:33:de:43:7e:eb:ad:26:f7:5c:
bb:f7:08:16:90:56:57:76:e5:35:90:4c:5c:f4:c3:2b:fa:db:
70:19:a7:29:19:f1:ba:4b:72:e2:6c:3d:ca:92:1a:e2:44:a4:
bb:32:ab:ba:96:51:6e:b7:b2:f6:c9:44:d6:f9:3b:78:07:4d:
5a:7e:18:85:3d:98:37:60:73:26:36:c5:87:7d:df:36:1e:39:
08:36:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:56:58 2026 by rpki-client