Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: s5UqRiJB0CwhZEHfq+T0i8XIMgOhNH6gkQjDSmV3w4I=
Subject key identifier: 7C:5A:D8:C3:3E:5D:7E:9E:AC:03:21:A4:5B:E5:54:38:87:03:DE:34
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019E1C104D556134E77836ABB19629160EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0CF2
Signing time: Tue 12 May 2026 12:01:30 +0000
Manifest this update: Tue 12 May 2026 12:01:30 +0000
Manifest next update: Wed 13 May 2026 12:01:30 +0000
Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=)
2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: rUv4QB2XqoPxmH4/c3A+ampTZup1nRRPfSel+EizWY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:4d:55:61:34:e7:78:36:ab:b1:96:29:16:0e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: May 12 12:01:30 2026 GMT
Not After : May 13 12:01:30 2026 GMT
Subject: CN=7c5ad8c33e5d7e9eac0321a45be554388703de34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:ba:0d:47:fc:f3:9b:a2:57:0b:c6:8e:80:
f8:ea:67:76:d0:d9:c0:82:72:24:96:91:1f:f3:f8:
53:ce:98:bc:9c:cf:aa:8b:be:53:1b:1a:13:7a:9f:
b9:42:f4:df:65:4b:b2:97:8f:d8:63:7e:01:6f:f3:
c7:1c:20:79:7d:a0:f0:13:05:89:16:d6:0c:46:d9:
e4:1b:41:4d:f7:6b:05:0b:85:61:0e:e6:90:1a:76:
40:16:ba:51:74:90:42:cd:4e:27:17:e0:0b:51:bd:
47:db:e7:03:7e:d9:fd:d0:ce:f8:a8:f8:5a:ec:b2:
c2:bf:99:06:d7:6e:55:81:3a:79:b8:b5:9c:b8:71:
ff:f4:ba:dd:00:44:b6:59:5e:d4:8a:97:53:76:2b:
4f:8c:22:b3:45:80:89:a5:95:b8:b8:87:69:06:cf:
3d:44:8c:fe:1c:e4:47:e3:97:ad:8d:93:51:8c:71:
c6:3b:db:db:78:cf:0e:1e:08:11:af:27:97:8f:70:
46:39:0e:e7:c6:da:dd:d9:39:af:de:0f:2d:e3:94:
88:06:f6:e5:6d:f4:c4:a7:20:cb:b9:13:cf:fb:f8:
80:e9:60:d9:ce:01:60:ed:9c:f8:cb:7c:c7:ef:98:
96:89:ea:f1:3d:dd:6e:e4:b8:43:81:fc:99:0d:fb:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5A:D8:C3:3E:5D:7E:9E:AC:03:21:A4:5B:E5:54:38:87:03:DE:34
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8f:43:a2:d6:4a:d2:ab:bb:b3:26:dc:ad:8c:d0:9a:04:d8:
db:6d:69:c5:02:43:26:a9:bb:f8:5e:d4:3b:7e:82:55:84:05:
a0:7c:ac:29:61:e6:9f:82:35:13:0b:75:05:1e:ae:57:bb:f1:
b2:29:71:ba:c1:3e:e0:2c:54:ea:b3:4a:c8:5f:db:b1:af:75:
47:2b:6b:ac:1a:7b:d9:3e:6b:e9:03:b2:99:e7:9a:b4:3d:15:
a0:ab:4a:c4:19:d3:4c:d4:04:c4:c9:c2:0a:7b:4e:72:61:77:
1d:aa:a8:1f:77:01:1f:45:4f:2e:f6:24:9c:88:b4:2b:ef:6e:
88:63:a1:b1:16:c0:82:53:77:6e:1a:5e:7b:b0:f7:a0:8a:61:
8e:d5:94:3b:49:7b:45:f4:ea:6e:81:09:92:c1:e3:62:f3:06:
a5:48:c4:9c:f0:a0:f9:b9:3f:02:8e:60:24:b6:2c:79:32:9e:
b2:96:0c:37:64:65:9d:cc:c4:e6:7c:51:ae:56:11:6d:37:64:
df:38:8a:d5:ff:88:5d:d4:a9:b1:b5:91:53:4e:9b:c7:00:0c:
df:7f:07:5d:8f:53:4f:d3:30:1d:86:24:a6:79:21:e7:ce:28:
7b:5a:9e:69:c9:1c:7c:eb:fd:50:95:5b:a2:9c:6e:39:c9:d5:
7c:84:83:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:11 2026 by rpki-client