Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: 54FaFwwxj1+WoWlBdQcGu4R4tn5isExvAt6iG3lDf2c=
Subject key identifier: 02:76:C4:1C:04:FB:CA:CD:3A:E5:68:25:CC:9A:76:9E:CD:ED:90:EB
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 019D2884D74FBC0412D32D4EE1D8E689F972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 059E
Signing time: Thu 26 Mar 2026 05:01:27 +0000
Manifest this update: Thu 26 Mar 2026 05:01:27 +0000
Manifest next update: Fri 27 Mar 2026 05:01:27 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: Jb+QTUNY1xAxFZJFKH2L9xEw9/312N2aWm0rWjptEFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d7:4f:bc:04:12:d3:2d:4e:e1:d8:e6:89:f9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: Mar 26 05:01:27 2026 GMT
Not After : Mar 27 05:01:27 2026 GMT
Subject: CN=0276c41c04fbcacd3ae56825cc9a769ecded90eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:36:72:9e:13:ba:a3:5c:d8:fa:2f:5d:9e:
79:0e:e2:01:7c:2b:24:b9:fc:66:0d:fe:c3:80:2b:
9d:1f:8d:c6:a2:55:f9:21:1a:ca:f1:72:43:a5:9e:
23:e7:20:d9:78:9e:91:fa:b6:a7:7d:ee:15:a9:e8:
f3:d9:4d:99:b2:9b:28:1f:65:d3:82:88:08:16:50:
73:e8:fa:a3:55:c5:b1:30:a3:ad:40:f4:44:6b:65:
2e:36:b7:73:d4:a1:30:e6:41:78:dd:78:b9:65:af:
e3:f1:0c:e6:ab:be:d6:6b:32:8b:1f:c2:84:cb:5b:
12:85:2d:86:97:7f:ee:a2:24:cc:4b:3a:a1:fc:1c:
27:60:55:71:be:89:1f:8e:f7:65:1f:0a:6b:74:95:
73:c5:29:37:86:0f:9c:4f:1f:0c:92:bd:b8:22:44:
7c:7b:d1:76:af:c6:d2:0b:f6:25:f3:a6:58:58:71:
0d:4b:ed:62:60:05:aa:bb:29:0b:84:ae:4c:57:12:
41:17:a9:aa:a5:39:37:4a:77:b1:9d:ee:54:7b:1f:
5f:a9:36:b0:08:f4:bb:16:7b:21:20:de:fc:4d:3e:
c7:a8:6a:b7:14:4f:d3:98:af:14:37:8c:43:7b:27:
a5:34:b8:b5:00:c1:c0:55:af:bc:38:0f:9a:8d:89:
88:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:76:C4:1C:04:FB:CA:CD:3A:E5:68:25:CC:9A:76:9E:CD:ED:90:EB
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:db:c6:34:91:dc:98:48:cf:c2:b6:cc:cd:82:e4:fb:44:db:
27:db:e9:65:3b:55:27:3f:a2:b1:ed:24:5c:58:d5:25:67:b4:
27:51:f1:3f:d5:49:35:2b:10:a9:03:1e:8f:d9:f8:e3:b3:7c:
26:7c:24:13:45:b2:c3:eb:f2:af:38:2d:7f:1d:22:72:f6:d1:
2f:3a:ec:9b:63:62:48:41:30:79:cd:03:02:23:77:d3:29:54:
40:3d:92:c8:e8:79:59:54:7a:a8:f9:17:e3:8a:8a:69:54:04:
f2:6f:41:10:f5:2f:07:6b:54:75:40:ad:b2:0e:cd:3d:89:69:
1d:37:11:cc:5a:04:28:41:1a:4e:f9:2e:f1:75:1c:fc:d4:fc:
59:b8:35:e5:fc:e4:eb:65:f5:2a:18:8f:42:7d:56:17:fe:bc:
81:dd:f0:0f:d2:f8:00:ed:ee:f7:27:f0:f2:6a:83:ef:01:e5:
a9:3a:cf:52:87:63:80:01:5a:d8:d0:7a:23:c8:ae:53:59:81:
14:b2:b7:2e:93:59:90:5a:6d:b1:ca:a3:17:5e:f5:4c:7e:68:
27:2b:a9:cf:26:1f:24:f3:dd:24:c1:b1:24:c0:30:2b:ca:a1:
e6:ed:dc:da:ab:ce:4f:13:41:e2:de:5f:75:b8:d8:74:ca:8e:
07:3b:55:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:24 2026 by rpki-client