Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: YSjBDPMszuUuJBlkR6uMyE9vocERwCgGIVExMd4vLIM=
Subject key identifier: F3:CE:B4:05:43:B5:86:7A:04:35:A0:3B:22:AA:40:7B:39:DE:E4:B1
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 01A0E02A6DF9CA20A721493C9DE6123716E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 00:01:12 +0000
Manifest this update: Sun 27 Sep 2026 00:01:12 +0000
Manifest next update: Mon 28 Sep 2026 00:01:12 +0000
Files and hashes: 1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: k/CFOlgogqXPQZ+g8SCgijgO9FKde0aDqQM7Usxp5QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:6d:f9:ca:20:a7:21:49:3c:9d:e6:12:37:16:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Sep 27 00:01:12 2026 GMT
Not After : Sep 28 00:01:12 2026 GMT
Subject: CN=f3ceb40543b5867a0435a03b22aa407b39dee4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:1c:03:cb:1c:6f:72:57:23:11:1e:c0:a8:
5c:be:45:e1:12:eb:99:97:b6:f2:ba:49:15:c9:b8:
f9:a4:24:5b:54:81:70:c6:bd:5a:f1:74:97:58:36:
f1:86:09:b2:b4:f5:56:d6:da:5f:de:3b:ae:4c:3f:
b9:73:39:6c:a4:a9:57:3d:43:ff:02:df:54:cb:18:
c8:47:42:22:54:02:d2:5a:6c:9e:59:0b:31:93:8c:
d8:b7:02:06:17:e7:63:7b:93:cc:23:c6:3a:f8:f2:
b7:52:a8:77:2c:a0:90:bb:cb:2b:a3:2d:bb:55:6a:
87:21:9e:f0:90:96:bf:96:93:cb:91:06:10:20:00:
b5:f1:74:52:11:2f:06:13:67:5a:14:78:51:bd:41:
1b:7b:bd:34:de:26:da:ae:e5:50:71:c6:81:dc:4b:
89:dc:00:10:53:7f:72:4c:b9:22:2e:7c:81:66:1a:
46:6a:7b:15:13:67:29:98:f0:15:7e:38:1c:3d:15:
b0:55:11:6b:26:57:34:8c:b8:f8:b2:2d:fd:b9:c6:
5d:2d:d8:17:3a:a5:5b:48:e3:ff:33:ff:0e:e6:b0:
b4:dd:4f:5d:55:94:52:1e:22:fd:64:10:26:e7:7d:
9b:31:aa:35:c6:fb:22:cb:c5:66:34:92:4f:52:aa:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:B4:05:43:B5:86:7A:04:35:A0:3B:22:AA:40:7B:39:DE:E4:B1
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:33:a4:56:3f:8b:9d:26:3b:3f:b6:1d:e9:c3:1d:43:80:cd:
ec:6e:1a:0a:d7:75:65:0d:7b:df:25:62:c1:2c:c6:d6:a6:e7:
27:58:9c:3a:a5:98:ca:42:02:df:86:b0:fe:85:73:18:0a:91:
18:40:31:1c:3d:52:b8:0c:5a:08:d7:7f:a7:71:c5:c2:79:a8:
c4:2d:38:5c:ec:55:67:99:c0:56:e4:38:f5:47:5f:85:8b:f8:
db:44:ef:96:d6:ef:d1:0e:eb:ef:24:63:5d:86:5b:a7:9f:c5:
6a:5e:ac:7d:06:38:0b:a5:1b:b9:a7:e6:80:d3:3c:c9:f5:16:
03:86:e9:de:ce:77:1d:dc:db:2f:75:9d:ec:26:18:29:b4:1c:
e0:0c:fa:e5:c7:82:6c:2f:60:d8:5b:1a:68:71:e9:14:b0:49:
11:f1:61:3e:a9:0f:d1:1c:96:a1:a1:4d:0f:7b:04:f2:e1:ca:
44:43:28:b1:38:ad:4e:a7:4c:cb:0e:00:ca:53:83:f6:30:d0:
60:90:83:d8:8c:a0:57:19:25:48:91:2b:c2:d6:b5:19:c1:bb:
87:56:61:bc:cd:9e:9a:66:74:54:43:56:fc:53:af:3e:41:df:
a3:70:ee:57:84:85:f2:90:6f:7f:60:4a:50:ee:7e:ab:9d:26:
15:8c:4f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:10:45 2026 by rpki-client