Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
File: BkizODOZAP9_O1myRtJNJofGNnw.mft (raw, json)
Hash identifier: HdQinMjGhxiWXTXItjtIvqRF0OXrjBr/rfJq1m28d4g=
Subject key identifier: 42:52:46:66:EF:4C:71:72:9A:0D:13:90:F8:1C:D8:61:2C:88:D2:F4
Authority key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
Certificate issuer: /CN=0648b338339900ff7f3b59b246d24d2687c6367c
Certificate serial: 019F92B633679806616688373C51171DB27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
Manifest number: 0546
Signing time: Fri 24 Jul 2026 06:00:41 +0000
Manifest this update: Fri 24 Jul 2026 06:00:41 +0000
Manifest next update: Sat 25 Jul 2026 06:00:41 +0000
Files and hashes: 1: BkizODOZAP9_O1myRtJNJofGNnw.crl (hash: cqe4MYYX0Hmlf7kpQCj+U0vE3IIofOKcdsdDUQVlwOQ=)
2: cfmhFWxRmQMPqxzLZOdLCKBVtII.roa (hash: hnNzoR6kq2MH8dzC1wQ5EZyQAUNnpRqddoSLhzjNpPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:33:67:98:06:61:66:88:37:3c:51:17:1d:b2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648b338339900ff7f3b59b246d24d2687c6367c
Validity
Not Before: Jul 24 06:00:41 2026 GMT
Not After : Jul 25 06:00:41 2026 GMT
Subject: CN=42524666ef4c71729a0d1390f81cd8612c88d2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:de:43:ec:1b:66:55:d6:05:67:b2:4e:75:
31:39:be:8d:d4:19:04:79:34:99:8b:cd:b0:f8:d2:
e5:e0:49:5d:89:d8:77:a0:36:56:55:9d:ae:53:7d:
47:20:a6:b9:5c:ba:9e:ea:dc:ad:5e:57:74:82:d3:
7b:21:8b:6f:8f:4a:9c:4f:f3:d9:80:74:61:32:5c:
b4:fa:81:35:ae:61:f1:47:cf:e8:a2:da:bd:a9:3a:
aa:42:00:aa:e0:13:1c:5c:d9:98:8a:c5:0c:82:a2:
29:96:78:e6:01:d9:8a:c4:8b:6f:44:2c:8b:6e:89:
0a:4f:bf:f4:ce:23:e9:2b:4e:b4:22:4e:22:46:44:
75:56:8d:35:60:58:66:5f:7c:80:b7:b1:0f:54:b7:
ce:de:24:76:0e:13:c1:85:92:a1:1c:86:4e:02:f5:
79:ea:9a:1e:d4:f3:c5:c5:c1:4d:77:22:24:f5:2a:
84:91:96:80:44:3c:ad:6f:30:46:c3:13:4c:1f:01:
ba:34:f2:37:cd:d4:bb:5b:9c:8e:01:ee:b9:40:af:
f7:28:5b:66:15:09:c7:e8:0c:9a:01:43:1c:e2:77:
34:75:9a:ed:41:8f:aa:8a:39:b3:e7:7a:2e:53:83:
d8:99:bb:2d:bc:bc:d2:c7:38:e5:09:3b:78:b2:a7:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:52:46:66:EF:4C:71:72:9A:0D:13:90:F8:1C:D8:61:2C:88:D2:F4
X509v3 Authority Key Identifier:
keyid:06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:73:d1:b4:99:88:ea:d1:0c:31:92:ec:bb:00:f7:27:cc:
63:42:fc:b2:26:46:ec:72:96:19:6b:5f:e0:4d:32:40:b2:92:
59:d0:25:ce:21:c1:e8:40:ae:84:c2:1c:fd:0b:8d:9d:50:54:
16:8b:a8:6a:80:58:df:83:89:cd:68:3a:73:71:30:3e:e4:be:
e8:ab:b6:18:50:3a:4f:69:16:34:be:0c:dd:f2:1f:43:90:46:
cf:45:fb:0a:99:1e:50:98:ab:20:2f:25:21:2c:9b:ce:3f:59:
f7:06:20:da:3b:27:e0:e0:ab:2f:8e:b7:be:83:79:b8:40:53:
55:3f:67:5a:de:3f:7f:98:5d:ae:af:ad:b7:77:bf:5d:21:4b:
68:e9:06:09:eb:09:e2:35:28:a4:d8:a2:03:e8:a6:1f:21:a2:
21:78:d8:8b:e7:49:d0:23:bf:5b:65:c1:2e:b5:bb:93:45:8c:
b3:14:00:9f:51:ee:bb:40:9e:0c:85:95:49:ba:9d:17:78:98:
fe:eb:56:3e:4e:e4:4f:01:4a:be:9e:7c:61:86:82:25:6b:de:
c7:34:aa:a1:1d:d1:f7:a6:67:9b:5a:4d:8d:a6:d9:d9:9a:d1:
1c:9d:42:41:7b:9f:a8:d4:d6:a2:53:90:ab:f9:06:1c:48:db:
60:02:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:41:28 2026 by rpki-client