Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
File: bzU9GF_B600HBKS0qJD5i4tP74M.mft (raw, json)
Hash identifier: 3dlrR6q10Tstk+71/jnX0SJ7m1Fd9Gh+vNV/mrgH8m4=
Subject key identifier: 23:DB:B0:6E:D9:B7:02:38:D5:BD:7D:68:6B:85:68:5A:52:75:FD:01
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 019D2772524A3DB47B65ECED2FBCE180E9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
Manifest number: 16AC
Signing time: Thu 26 Mar 2026 00:01:36 +0000
Manifest this update: Thu 26 Mar 2026 00:01:36 +0000
Manifest next update: Fri 27 Mar 2026 00:01:36 +0000
Files and hashes: 1: bzU9GF_B600HBKS0qJD5i4tP74M.crl (hash: nDYn+ae/zblkDFGmvYKrSvGPw7TFm1bht1NC2oCxtjE=)
2: dEBO9P2rTzMGj8WCAwefx9LMEiY.roa (hash: KzSq8awg8N2A2yqoLCZBBx9w+DQcNParU+eeSoLEIgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:52:4a:3d:b4:7b:65:ec:ed:2f:bc:e1:80:e9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: Mar 26 00:01:36 2026 GMT
Not After : Mar 27 00:01:36 2026 GMT
Subject: CN=23dbb06ed9b70238d5bd7d686b85685a5275fd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:7a:26:00:19:86:17:af:af:35:50:a2:c4:
25:9a:17:3c:19:87:da:ae:64:6e:8b:34:0d:c3:df:
63:20:06:20:3a:80:86:27:6e:88:fe:36:94:9a:a7:
6e:2d:32:8d:b8:8f:3e:8c:1b:eb:e9:15:f2:db:bd:
b2:d1:76:ce:ae:e9:39:04:83:0c:1c:1c:82:7a:5d:
0a:61:b0:55:07:2e:b0:df:c7:f1:55:15:e2:8d:a7:
38:02:55:f8:3d:98:96:2c:df:57:c0:ee:31:98:e0:
8a:10:4c:13:16:04:10:60:f8:04:a4:41:ee:44:3c:
9a:36:01:eb:dd:b2:53:67:4f:df:e5:37:f7:e2:b8:
77:17:c1:13:3c:8e:1f:65:4a:a4:be:3b:1a:5e:ce:
15:a4:9a:c0:0f:e8:f2:08:17:f1:28:45:39:ae:bd:
c3:aa:0f:85:ea:e2:ed:d2:2f:90:7e:84:c3:5b:8e:
4f:96:e4:c5:47:0b:76:01:d6:7b:28:17:e4:bc:12:
b8:4b:80:aa:22:7f:03:28:ec:9e:fd:b9:79:2a:f1:
9f:b4:63:53:c8:20:7f:52:80:c1:cc:57:ae:12:6f:
d7:96:ab:d7:f2:34:1f:a5:da:9a:2f:4b:b3:0e:4c:
ca:c6:77:04:d5:bf:0c:a9:e6:e7:9b:02:d6:6c:36:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DB:B0:6E:D9:B7:02:38:D5:BD:7D:68:6B:85:68:5A:52:75:FD:01
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a8:f6:50:ed:c1:c2:71:51:1a:ce:08:9c:11:ad:8f:e7:7a:
47:b9:83:80:58:52:d5:44:cd:ec:8b:8f:f6:0e:eb:e8:4d:65:
31:db:79:a6:09:df:b6:f6:d9:54:01:57:34:21:25:e5:4c:f9:
fc:ac:b5:0f:dc:12:4d:de:af:f6:e0:26:a9:fa:b1:09:03:64:
00:c5:84:0b:b5:66:16:81:1a:2c:39:b3:5e:96:ec:b1:12:c5:
f7:38:d2:0f:3d:b1:bb:72:34:54:15:44:f1:2f:01:82:64:5f:
f5:81:d5:1e:21:e3:11:45:34:bf:1a:e0:de:a9:ee:d0:5b:04:
7b:a8:82:48:b1:c5:c0:1e:3f:8a:7b:a1:71:8f:e9:9c:a4:48:
43:96:49:bc:7c:99:b8:7b:1d:61:4e:a8:e6:94:7e:fd:47:11:
af:dc:2c:ad:53:34:6a:0d:6e:fe:2f:72:3f:04:ca:2d:ee:76:
89:37:43:96:ff:e7:86:18:c6:e2:ac:63:b1:30:6b:ec:38:28:
d5:3d:3c:e1:92:76:b6:1b:41:f7:a2:1c:9c:8b:61:89:70:91:
e0:f0:2d:d7:93:4b:61:c6:9f:47:2d:75:fe:a2:94:1a:4e:ef:
eb:e6:5d:67:0a:0f:88:09:ba:d1:d5:ca:3e:5a:ef:55:ba:10:
be:15:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:45 2026 by rpki-client