Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: Lkxq7OpES5a1vqa4rQe9glvBwrcnkf5fr6JXdteLsts=
Subject key identifier: AE:7B:B2:5E:96:AA:61:19:F2:B9:1E:2D:AC:48:0D:AA:2F:26:FC:65
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019D26CD64C2DE696537A9343FD1DC3B5A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0C73
Signing time: Wed 25 Mar 2026 21:01:27 +0000
Manifest this update: Wed 25 Mar 2026 21:01:27 +0000
Manifest next update: Thu 26 Mar 2026 21:01:27 +0000
Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=)
2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: Xt5o7Q2w+eCXc9w2vtIgqX1PRY4zsxmrVMK/peG16VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:64:c2:de:69:65:37:a9:34:3f:d1:dc:3b:5a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Mar 25 21:01:27 2026 GMT
Not After : Mar 26 21:01:27 2026 GMT
Subject: CN=ae7bb25e96aa6119f2b91e2dac480daa2f26fc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:66:c9:e8:75:f5:de:8a:d0:2a:63:ed:13:
bd:12:e6:f9:9e:3d:1c:87:60:47:79:b9:45:9e:32:
68:74:fc:36:38:b3:59:fe:78:5c:57:43:56:1c:4f:
31:28:b5:f2:bd:e2:f9:b8:10:c1:a5:3b:c0:0f:1e:
e4:7d:16:62:f6:d8:5f:34:e1:20:bb:c5:18:4a:7e:
b1:eb:4c:bb:20:6f:45:c5:f7:98:e5:4a:bb:67:ad:
82:7e:5c:e1:0c:92:24:6d:11:c6:b7:2d:41:61:b3:
78:e7:0e:d3:56:4d:2c:da:25:28:87:82:36:cc:8e:
a2:09:1f:57:04:19:bb:50:8a:ef:c3:d0:d6:2b:e1:
fc:9c:fe:2d:33:aa:6e:b4:cd:96:2b:6e:0c:fa:33:
4f:38:c5:fb:1b:49:b7:75:e0:16:9b:2b:92:b0:86:
9f:4f:db:3a:90:f7:8a:08:70:dd:af:07:c1:dd:d4:
cb:5e:44:4f:55:28:b9:e7:5d:e8:96:76:4b:9d:63:
c4:f2:1c:06:c6:95:20:de:8a:5e:bf:b8:9b:5b:d6:
9d:13:a2:84:86:94:c5:0d:ea:83:5e:d6:7e:7d:87:
56:dc:86:21:eb:2f:a1:ef:c9:86:6b:a9:95:31:06:
5a:13:ec:ca:c7:c6:e3:a0:58:3b:c1:e4:6e:20:21:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:B2:5E:96:AA:61:19:F2:B9:1E:2D:AC:48:0D:AA:2F:26:FC:65
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7d:04:41:0b:b1:ae:d7:d3:b6:1c:6a:32:a3:b1:cb:d4:94:
f4:a9:16:1b:5a:83:55:b1:fb:d5:43:1b:bf:2d:70:69:d5:79:
f6:bb:3a:82:db:c3:ec:87:44:44:8f:9b:b6:00:f0:99:1c:05:
1e:1b:74:64:94:20:8f:29:bd:9e:ba:76:72:1e:ee:ee:44:87:
b0:e6:2a:76:2b:bd:b3:e2:1a:8e:07:4a:87:12:a3:b1:a5:68:
6f:e7:53:f9:51:58:ff:42:8e:5b:21:06:fd:15:c3:09:f3:63:
18:6e:05:6e:16:8a:30:a0:f0:11:cb:19:90:50:19:04:e0:e9:
67:62:7e:f1:98:9a:98:bf:f4:94:de:b0:c6:f6:8c:f7:5b:1d:
91:d4:fc:1f:4b:12:b4:b5:1f:e5:30:e4:5c:3d:66:a3:c8:93:
f0:de:b3:35:78:46:de:20:bc:0d:d8:65:9e:70:3d:ee:20:b1:
d0:f2:ab:99:ad:ed:4e:2c:74:5c:74:b5:8a:11:e7:e1:47:1b:
cb:bc:98:c7:39:b4:5a:0d:cf:5d:db:a3:3f:f4:95:3a:46:c4:
b1:62:3f:bc:1d:a5:af:16:c1:10:77:52:44:01:19:07:d3:aa:
24:c8:cd:e4:7d:91:9f:c9:94:57:38:85:34:b1:5a:86:ca:48:
f5:1e:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:09 2026 by rpki-client