Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: igsbC/XX1KWe1OhoQMVkh3c852lNCtiMr42TjIxMXnI=
Subject key identifier: 9B:8B:01:76:03:DD:8F:8E:03:0F:78:3C:D9:FC:70:13:8E:41:80:85
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 019F93FFE97CB132B65382362B018533AEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 12:00:49 +0000
Manifest this update: Fri 24 Jul 2026 12:00:49 +0000
Manifest next update: Sat 25 Jul 2026 12:00:49 +0000
Files and hashes: 1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: ajdKID+NCRwCftpFtommATcp9zCNbOB2USzCL9YvCgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:e9:7c:b1:32:b6:53:82:36:2b:01:85:33:ae:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Jul 24 12:00:49 2026 GMT
Not After : Jul 25 12:00:49 2026 GMT
Subject: CN=9b8b017603dd8f8e030f783cd9fc70138e418085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:d8:ab:14:40:40:af:84:11:22:00:ce:a7:
81:62:ae:36:5a:ee:e0:2a:c2:7a:af:3d:08:9f:3f:
f2:18:49:3c:62:10:cb:33:41:9f:53:94:82:98:d8:
c6:80:dd:21:32:12:0f:e1:06:c4:8b:61:c6:0f:70:
d2:be:81:9f:5a:eb:74:e7:c8:c8:2a:a8:72:3c:07:
a2:6b:e1:2a:2a:aa:40:e9:53:08:52:c7:26:86:e1:
76:3d:d6:97:33:3b:41:c8:85:3a:a1:8e:0f:f2:c8:
89:82:e3:b8:c6:27:09:b9:be:0f:cb:b2:d2:f8:29:
02:34:87:e5:e4:32:06:c0:6f:96:01:20:15:71:de:
12:56:4a:93:dd:3e:2c:90:7d:e3:46:0d:6c:15:e8:
15:31:6b:c5:4d:50:11:d0:dc:14:26:36:62:a3:1a:
38:ea:92:e1:3f:7a:c6:b3:3f:f2:15:14:00:8c:49:
ef:3b:ec:5f:ec:72:97:67:2b:30:e4:46:98:c1:8e:
6a:d7:ed:83:03:2f:38:73:74:1c:6c:f0:83:b3:eb:
9c:97:34:9e:60:ac:ae:60:af:18:aa:e9:8e:b6:9e:
df:c1:80:17:57:46:c8:6e:70:f2:d2:38:a7:1a:de:
2c:32:cb:53:4c:cb:5d:5e:1f:de:97:a7:d4:26:ea:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:01:76:03:DD:8F:8E:03:0F:78:3C:D9:FC:70:13:8E:41:80:85
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:32:73:5f:4a:d4:d5:72:c1:96:be:6a:aa:53:13:32:8c:50:
10:dc:39:ca:9a:40:d4:ea:08:5f:70:b8:1c:a7:ed:d0:a7:46:
02:38:c1:0f:c2:58:65:a8:bc:8e:8c:c9:fa:4c:22:92:8e:ee:
22:b3:f7:b3:e9:5a:8b:40:6b:a7:b9:5a:6b:c4:b3:af:a3:08:
a1:28:b0:81:d8:ae:ce:b1:9f:86:48:a9:8a:4a:20:5e:ea:bc:
05:65:07:f1:61:d4:70:32:5d:99:2b:3d:18:47:15:83:e2:4f:
90:e3:80:41:b0:ce:8a:74:72:b8:24:f7:de:92:2a:30:4a:40:
8f:fd:75:5f:a6:c3:be:d6:ff:9d:76:1e:4d:f5:13:47:6d:16:
82:39:5d:8e:9c:4d:86:70:c4:db:de:3b:fe:2d:a7:a7:dc:e5:
62:20:94:ae:99:3f:1e:20:a0:49:7e:f5:6c:3d:86:bb:28:c7:
ba:aa:95:68:19:40:1d:8c:5e:07:f5:e9:08:e1:8d:c8:f4:54:
81:ae:41:1a:da:93:a3:40:70:c9:51:ec:31:eb:43:cb:6f:ff:
5a:d7:91:e6:fd:ab:72:fc:92:c4:3f:fe:0b:0a:3b:19:ce:99:
73:ec:1e:72:18:2b:bc:a4:6d:50:0a:34:de:75:cd:af:e3:c1:
f3:86:9f:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/+l8sTK2U4I2KwGFM67wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzNhZmQ0MWVhMDEyZmIyODAzYzcyNzQ1MjNjOGVjM2Yy
NjEzMTEwHhcNMjYwNzI0MTIwMDQ5WhcNMjYwNzI1MTIwMDQ5WjAzMTEwLwYDVQQD
Eyg5YjhiMDE3NjAzZGQ4ZjhlMDMwZjc4M2NkOWZjNzAxMzhlNDE4MDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY7YqxRAQK+EESIAzqeBYq42Wu7g
KsJ6rz0Inz/yGEk8YhDLM0GfU5SCmNjGgN0hMhIP4QbEi2HGD3DSvoGfWut058jI
KqhyPAeia+EqKqpA6VMIUscmhuF2PdaXMztByIU6oY4P8siJguO4xicJub4Py7LS
+CkCNIfl5DIGwG+WASAVcd4SVkqT3T4skH3jRg1sFegVMWvFTVAR0NwUJjZioxo4
6pLhP3rGsz/yFRQAjEnvO+xf7HKXZysw5EaYwY5q1+2DAy84c3QcbPCDs+uclzSe
YKyuYK8YqumOtp7fwYAXV0bIbnDy0jinGt4sMstTTMtdXh/el6fUJupUvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuLAXYD3Y+OAw94PNn8cBOOQYCFMB8GA1UdIwQY
MBaAFG8zr9QeoBL7KAPHJ0UjyOw/JhMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTIt
YjM1ODA5OTRhM2IxLzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTItYjM1ODA5OTRhM2Ix
LzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjJzX0rU
1XLBlr5qqlMTMoxQENw5yppA1OoIX3C4HKft0KdGAjjBD8JYZai8jozJ+kwiko7u
IrP3s+lai0Brp7laa8Szr6MIoSiwgdiuzrGfhkipikogXuq8BWUH8WHUcDJdmSs9
GEcVg+JPkOOAQbDOinRyuCT33pIqMEpAj/11X6bDvtb/nXYeTfUTR20WgjldjpxN
hnDE2947/i2np9zlYiCUrpk/HiCgSX71bD2GuyjHuqqVaBlAHYxeB/XpCOGNyPRU
ga5BGtqTo0BwyVHsMetDy2//WteR5v2rcvySxD/+Cwo7Gc6Zc+wechgrvKRtUAo0
3nXNr+PB84af7A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:02:47 2026 by rpki-client