Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: 8GWDxAyGLqaKHD6C1ORvCBW0ze4JGmVOSJVUoO+FDtA=
Subject key identifier: 2D:AD:2C:E5:94:22:05:7D:A1:7D:35:BF:86:35:63:F6:B1:07:1A:29
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 01A0CDED002806314A696C011B8693B93F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 090D
Signing time: Wed 23 Sep 2026 11:00:56 +0000
Manifest this update: Wed 23 Sep 2026 11:00:56 +0000
Manifest next update: Thu 24 Sep 2026 11:00:56 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: 7inIx1KYJN7ioMW4PDgRynSde+CLD2vK9aSUsY+PSq4=)
2: nN-ju_64Z90TCxYhBDeQTLTn6vo.roa (hash: 8L8/L9YEesxygj4vPAkV5W3fYmJFnHglj85qEirp6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ed:00:28:06:31:4a:69:6c:01:1b:86:93:b9:3f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: Sep 23 11:00:56 2026 GMT
Not After : Sep 24 11:00:56 2026 GMT
Subject: CN=2dad2ce59422057da17d35bf863563f6b1071a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:71:ca:f7:73:3b:a7:fa:4f:ac:10:20:2e:
af:a5:18:00:ac:8f:1b:3c:c8:07:39:f3:55:21:ae:
8c:d0:88:8d:72:2d:a8:4b:4b:50:98:e0:1c:f9:c9:
c5:e7:54:e9:5c:c7:46:92:68:2b:43:a1:05:1a:63:
db:5a:94:ce:c6:ce:d0:cd:f6:63:f4:67:a4:e6:e3:
26:ac:ad:09:4c:e7:0c:0d:20:05:39:2e:a8:69:dc:
8c:cd:5d:76:2a:ee:fc:01:6d:4a:c4:19:9c:12:a5:
c9:c4:03:84:46:36:50:18:b7:8f:ba:76:0c:4d:a3:
9d:a0:8e:5e:4f:af:ee:28:41:50:69:06:82:20:4e:
5f:32:6e:63:63:58:23:68:ea:f2:9c:f3:4b:4a:c3:
3e:de:54:38:5f:0a:6a:09:e7:f8:06:7c:bd:0f:7a:
97:06:05:71:f4:40:21:91:1c:61:1e:cf:00:de:e4:
89:c3:a8:f7:49:42:2d:06:e2:22:dc:98:5d:20:e1:
d2:a6:28:ee:d0:f5:91:17:13:23:02:ff:42:1d:29:
22:4d:ec:cb:5c:51:48:b6:dc:46:f7:77:30:01:f4:
b1:56:9b:f8:af:fa:37:7b:ba:05:a1:df:3e:b5:3c:
a7:6e:12:d7:5f:34:eb:3f:31:52:40:12:27:d3:5f:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AD:2C:E5:94:22:05:7D:A1:7D:35:BF:86:35:63:F6:B1:07:1A:29
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9e:0b:ab:ac:a9:e6:49:c1:10:79:aa:ea:06:85:3e:f9:df:
c5:4d:b6:3f:a5:42:45:08:4b:78:90:e4:cf:ca:6f:4c:95:bb:
49:b8:f9:62:9c:83:a0:b9:b8:bd:23:cf:ea:cf:92:ba:29:58:
62:dd:11:21:72:bf:dc:ae:8f:af:d2:ed:41:82:ff:69:b0:f0:
52:8f:34:ad:f1:44:32:58:68:8a:98:e4:2b:cd:d1:a1:08:06:
82:6f:33:82:6f:8b:8f:36:ea:cb:a2:9f:af:c5:a5:87:93:fd:
50:d3:25:3d:ae:ef:9d:89:92:d3:7d:45:48:a6:9a:c6:9e:cf:
a4:b9:8d:42:1a:a5:29:64:e2:c5:60:94:d5:e2:1a:fc:22:cd:
c7:39:5b:2f:19:de:16:ce:6c:67:e8:da:50:38:f0:b0:c8:75:
cd:d6:ed:31:64:b5:8c:a5:50:7b:79:64:f9:2a:d6:80:fd:04:
c8:17:5c:f2:d9:9e:6d:b4:b4:83:0f:9a:e4:93:d7:94:41:98:
a1:03:f7:40:ae:f3:12:f0:98:28:e9:b1:98:cb:cd:63:ab:73:
3d:d6:ff:af:70:01:de:d6:29:bb:a0:8c:c3:ca:46:9e:fb:ed:
f4:e4:a5:9b:f7:58:49:99:cf:62:da:7e:a6:02:6e:c3:76:bb:
61:8b:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:58:53 2026 by rpki-client