Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: AL+FWLO1LwPI3BkMtYnosKWoexCqkm6ix7qhP1AOY0I=
Subject key identifier: 7E:33:F0:AF:CD:FD:D6:DE:42:F6:BC:73:FE:0C:C0:64:2F:0E:15:FC
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019F90C7F72486A51EDBD7881B5B024D1AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0DB3
Signing time: Thu 23 Jul 2026 21:00:51 +0000
Manifest this update: Thu 23 Jul 2026 21:00:51 +0000
Manifest next update: Fri 24 Jul 2026 21:00:51 +0000
Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=)
2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: EfnlU/Ooj40++ZvUqQOmwXdlRu5KCKBVKC0rMiaRaXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:f7:24:86:a5:1e:db:d7:88:1b:5b:02:4d:1a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Jul 23 21:00:51 2026 GMT
Not After : Jul 24 21:00:51 2026 GMT
Subject: CN=7e33f0afcdfdd6de42f6bc73fe0cc0642f0e15fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:30:53:7d:69:01:e6:f0:a7:14:16:7d:32:
11:af:cf:f5:75:62:d8:6a:2d:3b:c6:2a:63:6a:2f:
86:83:f4:67:b1:4b:e7:55:7b:f0:5b:65:f6:bb:6f:
8d:72:4f:05:0e:8f:18:f1:ba:fc:1f:d8:f0:b2:f9:
ba:5a:f5:17:dd:d5:d5:23:e6:f7:9a:9d:4e:fc:7e:
56:e8:67:97:2e:b0:26:bd:05:64:85:26:8a:8e:36:
0d:61:d9:37:bd:d0:66:63:2b:0b:7b:f9:db:1e:e2:
54:b0:58:27:6a:23:53:4c:3e:0f:d3:fc:85:c3:e6:
08:52:d9:da:a4:cb:5e:12:23:b5:e4:9b:19:a2:9e:
d6:44:03:64:f2:b5:bf:85:b1:62:ae:c3:61:e0:4a:
a5:81:06:64:b3:c8:fe:d1:6e:f4:e7:ff:5d:b8:21:
dc:e6:0c:e2:2c:67:1f:80:4b:dc:f9:17:83:e6:0d:
28:5a:6e:2a:98:5d:3c:aa:73:0f:48:eb:d7:1d:9c:
cd:e1:c7:5b:95:46:fc:fa:c3:aa:04:c8:8c:79:62:
47:81:cd:8b:15:55:ee:5b:6a:ec:d5:24:9b:5f:84:
ce:3d:df:9f:dd:17:27:a8:ff:fa:84:83:c1:2f:cd:
a6:cf:67:79:44:c6:9e:f9:fe:5d:86:12:6e:5e:89:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:F0:AF:CD:FD:D6:DE:42:F6:BC:73:FE:0C:C0:64:2F:0E:15:FC
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a3:92:3a:5f:ad:88:a6:ff:e2:cd:4e:bf:2f:7d:94:97:b5:
46:d8:18:6c:db:58:03:49:30:3a:e6:e4:9c:df:7f:4c:66:43:
8a:9f:07:2e:d5:4b:96:70:2d:06:f6:b3:88:fe:4b:2b:15:f7:
84:0b:e7:a4:2f:8a:4d:ff:32:65:e1:57:3f:37:b1:5b:ca:79:
c0:98:27:8d:6f:da:74:6f:6b:c1:d8:9d:5b:e0:96:3d:08:aa:
52:8f:e3:47:2f:da:a5:8f:cc:23:99:c6:73:06:91:db:48:75:
fb:6b:e0:be:52:37:2c:6c:73:d4:40:4e:a2:dc:ba:6d:68:52:
f3:30:2b:78:e1:68:28:1f:67:b5:85:f2:b7:d8:b1:7c:4e:13:
24:e0:a5:f1:63:de:0c:86:a3:ff:44:da:ee:fa:10:1f:16:6e:
44:3a:d9:50:e6:5a:19:d3:92:92:d0:48:56:89:cf:6b:a1:0b:
63:07:5a:05:09:d3:c7:63:10:20:7c:79:04:5d:83:e8:77:f7:
31:68:4e:5b:7a:65:a4:2c:bf:58:57:87:d6:9e:b2:9e:b7:a3:
4e:86:d9:8d:80:33:73:dc:fe:30:b2:c4:db:bf:bb:89:cc:a2:
ad:08:36:42:fc:50:2c:d5:1e:9a:b9:00:44:f9:8a:a9:50:da:
a4:4e:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:46 2026 by rpki-client