
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: sJTpch7j13Z17IKO0249AYR7oqgvKvmECA87yvZjPo8=
Subject key identifier: EB:B0:B7:9E:0F:CE:03:48:0B:EE:5E:5E:E4:1A:C3:0D:D0:B6:0D:8D
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 019E1C7D9D54017DDF5E21FB6CE1A06B4823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 07A8
Signing time: Tue 12 May 2026 14:00:54 +0000
Manifest this update: Tue 12 May 2026 14:00:54 +0000
Manifest next update: Wed 13 May 2026 14:00:54 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: NinrUuMDZ14c7iRy/xHq2nsw2++/qU7fdZpO4j7Wq+Q=)
2: nN-ju_64Z90TCxYhBDeQTLTn6vo.roa (hash: 8L8/L9YEesxygj4vPAkV5W3fYmJFnHglj85qEirp6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:9d:54:01:7d:df:5e:21:fb:6c:e1:a0:6b:48:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: May 12 14:00:54 2026 GMT
Not After : May 13 14:00:54 2026 GMT
Subject: CN=ebb0b79e0fce03480bee5e5ee41ac30dd0b60d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:80:79:96:0d:04:d5:cd:af:07:24:f7:5b:
cc:f7:ff:82:1e:24:2f:c4:02:74:0e:40:cb:95:b6:
1e:0f:52:a1:5d:f9:f1:cf:2d:37:1e:ee:96:4b:3f:
d6:7d:44:32:26:f7:c6:d6:fd:44:e0:d8:3c:df:c1:
0f:d3:44:cd:2f:af:4c:75:c5:81:53:bb:b2:4a:e3:
40:10:d0:03:04:e2:01:ec:8b:91:b9:e9:d4:b6:59:
d1:e4:ef:e4:c9:e1:c1:18:dc:22:75:8e:b9:4d:6e:
c4:95:28:ff:fa:77:ac:39:c0:ab:84:80:92:c5:15:
de:ed:72:a2:16:f1:3e:71:13:7a:43:9d:c4:c0:23:
05:88:81:49:a1:39:1a:14:7f:82:eb:e9:80:48:01:
67:5b:ce:51:d5:16:23:fa:3d:5e:95:80:c6:bf:dd:
4f:e9:61:40:41:17:5e:f7:08:d2:73:9c:3b:9a:9f:
1f:ff:8b:cb:19:5c:3a:d9:73:5e:cb:c4:56:80:28:
aa:63:ec:ac:86:cb:27:cd:fc:79:23:9b:83:bb:9a:
fe:79:ea:64:eb:0c:90:1e:41:2a:60:cd:43:a1:9b:
ff:e5:9a:82:c2:4c:38:ee:62:b3:cd:00:c8:86:38:
51:38:04:af:11:2d:e8:06:e6:39:28:96:84:c6:0a:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B0:B7:9E:0F:CE:03:48:0B:EE:5E:5E:E4:1A:C3:0D:D0:B6:0D:8D
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f5:85:c2:c0:c6:e8:dd:3a:f0:42:f8:3a:08:16:24:db:6c:
ac:f2:00:19:40:1c:d3:cb:98:64:b3:8e:ca:5b:06:0e:0b:5c:
a6:50:b1:88:58:ca:e6:aa:45:69:8d:3a:00:63:47:54:e1:c1:
9d:c8:86:8f:03:d9:23:b8:e6:c2:12:f1:c4:ce:47:a6:0d:47:
31:e1:ef:8e:39:66:17:03:54:6b:d3:04:08:1d:00:05:b2:16:
22:55:ae:5d:20:30:94:0e:4c:78:95:5e:b5:8e:ca:2e:ca:c3:
e6:e2:af:90:bc:71:bb:e9:05:77:b9:c1:cd:5c:bc:54:4b:b5:
03:bf:72:40:52:2e:22:17:a6:e4:51:23:d0:63:82:ef:a2:5b:
c3:3b:07:6d:9b:63:cc:3a:57:da:c4:00:b2:52:42:fc:87:e8:
10:45:36:a9:c4:72:e5:88:0b:4d:dd:11:f8:a2:07:47:cb:3f:
e6:de:6b:30:f4:6d:6a:3e:74:9f:05:80:45:d3:ae:48:ba:c6:
76:4d:be:de:23:f7:da:b0:80:51:83:99:e8:32:ae:74:95:b5:
43:54:c6:df:1c:b8:46:6e:3f:a7:fe:46:aa:62:12:ae:52:2f:
20:52:cc:30:78:c5:1d:05:74:1b:0a:b0:7b:99:03:2b:31:da:
be:68:92:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:03:19 2026 by rpki-client