Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
File: BkizODOZAP9_O1myRtJNJofGNnw.mft (raw, json)
Hash identifier: x/NxtveEMlqWuWSs800UYo0VC15a1bCJFo3KHLpuxwM=
Subject key identifier: 6E:9A:83:C7:C1:C9:2C:55:99:DC:68:00:48:3F:C9:26:46:28:4C:63
Authority key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
Certificate issuer: /CN=0648b338339900ff7f3b59b246d24d2687c6367c
Certificate serial: 01A0DB04512A02421169519DEA5010733690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
Manifest number: 05F0
Signing time: Sat 26 Sep 2026 00:01:28 +0000
Manifest this update: Sat 26 Sep 2026 00:01:28 +0000
Manifest next update: Sun 27 Sep 2026 00:01:28 +0000
Files and hashes: 1: BkizODOZAP9_O1myRtJNJofGNnw.crl (hash: CkINv5h754vDsocPbcjuNf6nBh0+S/I19COPkla4a98=)
2: cfmhFWxRmQMPqxzLZOdLCKBVtII.roa (hash: hnNzoR6kq2MH8dzC1wQ5EZyQAUNnpRqddoSLhzjNpPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:51:2a:02:42:11:69:51:9d:ea:50:10:73:36:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648b338339900ff7f3b59b246d24d2687c6367c
Validity
Not Before: Sep 26 00:01:28 2026 GMT
Not After : Sep 27 00:01:28 2026 GMT
Subject: CN=6e9a83c7c1c92c5599dc6800483fc92646284c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:86:1f:8c:e3:8d:2c:99:d7:32:5a:d7:b2:
76:6b:d8:cb:2c:15:9d:3e:95:72:84:ce:ec:5a:51:
16:19:26:71:1e:6b:9f:33:87:51:dc:d2:7b:8a:86:
6b:9e:ad:d6:67:0e:d2:d6:74:ce:9b:27:ea:d8:a4:
bb:4f:e7:0f:16:8c:75:b5:ac:1e:a8:6f:24:f2:5a:
6c:d5:90:9b:27:49:87:6e:27:bd:1e:7e:8c:03:79:
8a:6c:0d:70:2e:78:bf:c3:5f:16:e7:94:34:c9:bd:
1a:22:56:cf:8b:52:62:52:d3:da:9d:88:46:6c:4e:
9e:dc:65:66:1d:11:e6:9b:09:60:4f:5c:b0:37:5b:
d0:cc:06:24:6f:3b:9f:94:a4:44:c0:c1:82:97:e8:
aa:a6:55:4f:5b:30:99:d2:0a:cd:7f:3e:b8:63:e3:
a4:25:58:c3:6a:74:0d:58:e6:54:b3:bf:f3:9a:7e:
6d:87:b1:69:b1:a5:99:b7:90:6f:ae:7e:04:0d:16:
16:1f:8e:91:60:9c:a5:8c:5d:b7:a1:05:f7:26:ef:
45:86:5e:a8:a7:a8:34:59:06:d1:63:13:e2:b6:9f:
f5:80:37:83:20:f6:74:72:c9:68:7b:33:6b:da:35:
28:22:0e:aa:89:1f:15:62:da:5c:c3:28:c9:ea:64:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9A:83:C7:C1:C9:2C:55:99:DC:68:00:48:3F:C9:26:46:28:4C:63
X509v3 Authority Key Identifier:
keyid:06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c9:a0:27:0f:1c:27:9f:0c:b2:9c:bc:0a:44:25:0b:95:a1:
bf:f9:cf:22:15:15:7e:07:45:7c:16:ba:66:08:5d:ed:e8:17:
c5:d3:0f:ad:dd:15:47:82:59:09:61:97:8b:d0:43:00:0e:66:
0d:64:3b:a8:9d:43:1f:1c:b8:05:ee:76:07:48:43:8d:1c:d6:
40:4e:6b:5e:4d:bf:33:4a:f1:74:6b:d0:57:23:2b:59:f9:fd:
d8:e6:dc:b9:7a:9f:c4:4d:2c:4d:a5:00:d4:3d:65:b0:98:64:
3a:ba:f6:35:1d:02:45:c3:96:5f:50:e2:4b:ef:0f:bd:2a:ab:
df:de:29:1a:a0:3e:8c:3a:1d:94:91:49:e2:7e:54:3c:aa:f6:
f5:7e:a3:11:5f:01:ef:cb:f1:2c:6e:33:68:29:75:2f:4e:58:
df:e7:bc:89:a4:e1:dd:8e:f5:dd:d5:e2:17:c8:df:e2:01:d6:
c3:94:57:1d:73:d9:e8:5f:e5:3a:a4:29:44:8b:1b:b0:2b:e4:
32:1d:2e:9d:e4:f2:5e:15:b0:a1:99:03:73:27:92:e6:da:1f:
92:eb:5f:e2:84:7b:ab:d0:32:2d:ab:8d:d2:25:74:e0:4b:cd:
d4:a4:e9:5e:20:13:79:ad:98:68:60:18:04:c9:6a:40:69:63:
1e:4d:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:45:56 2026 by rpki-client