Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: elJyZRJq8UeH1zThpHiw/rsVudG2wrQkuMTQfj1HR/I=
Subject key identifier: A8:8A:76:2C:D0:7F:E2:A3:C3:C8:C5:2A:A2:AD:44:FD:EE:E0:84:DC
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 019D2816E004E704E09A6686F1333D737B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:20 +0000
Manifest this update: Thu 26 Mar 2026 03:01:20 +0000
Manifest next update: Fri 27 Mar 2026 03:01:20 +0000
Files and hashes: 1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: KwkALmRHXp8NGo19fLgoBtlcZoFivTHK1oi1643slWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e0:04:e7:04:e0:9a:66:86:f1:33:3d:73:7b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Mar 26 03:01:20 2026 GMT
Not After : Mar 27 03:01:20 2026 GMT
Subject: CN=a88a762cd07fe2a3c3c8c52aa2ad44fdeee084dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:a7:a0:99:47:62:58:7e:99:a1:29:8e:b9:
4e:08:eb:8e:5f:8b:a9:1f:c8:fb:78:90:32:01:59:
45:3d:46:86:46:a5:4b:63:15:ed:49:28:70:8e:a0:
95:15:11:11:c7:1d:72:a0:c7:cd:48:39:62:94:dc:
a5:83:c5:f8:dd:1f:a0:27:b0:02:01:f9:4f:64:9d:
cc:a3:76:c9:2a:a6:d9:12:fd:cd:24:dd:df:77:d7:
29:65:33:f1:2a:8d:53:7e:77:78:29:ce:58:15:93:
bf:cc:72:3a:5e:c1:32:02:51:d7:33:ef:d0:a8:aa:
fe:09:91:93:e2:4d:8e:de:69:40:da:61:d1:ac:5f:
f2:45:99:e3:0c:b7:e5:81:90:74:f6:5c:93:9e:1c:
29:98:30:1b:ab:90:76:9f:cc:89:ac:62:7e:2f:36:
c6:c7:f8:60:df:b3:66:74:28:12:8b:08:84:88:a2:
6c:98:6d:19:5c:5a:e9:8b:98:54:ff:75:7c:ab:9a:
3a:56:75:e0:5d:40:5e:be:0b:4d:15:49:ba:06:e2:
0a:b1:e2:8e:51:45:4a:6f:bd:10:d0:cd:2b:ef:57:
12:36:6e:db:25:ce:b3:22:77:3b:d6:8f:a1:ce:47:
ea:dd:26:e9:ca:42:17:71:38:cb:72:bb:29:6e:3e:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8A:76:2C:D0:7F:E2:A3:C3:C8:C5:2A:A2:AD:44:FD:EE:E0:84:DC
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:50:d0:c4:f4:3b:dc:47:22:7e:0e:f7:62:83:74:e1:3c:a5:
e3:02:6f:09:a6:19:2d:26:81:b1:11:e1:8b:f7:cb:92:62:b7:
a1:3c:8f:29:75:50:a3:3c:fd:7d:9a:bb:12:f4:96:e1:15:93:
17:a5:19:30:ca:26:af:b4:89:e4:87:5c:4d:a0:f0:00:1a:ba:
fb:02:ea:12:33:52:43:6a:0d:4a:de:18:c6:a0:d0:2d:53:a2:
12:b0:83:a3:b7:e8:21:57:f9:44:6b:e3:ae:13:31:1d:b3:ed:
75:24:03:f9:2c:95:97:55:85:29:70:63:90:5e:b0:87:e0:f6:
48:b5:b4:89:11:82:0d:bd:fd:b7:d6:c5:a1:04:7a:b6:d4:e4:
98:c6:c0:1c:81:9f:4e:75:b3:1d:d4:6c:53:0f:36:71:11:19:
5f:a2:59:6f:39:ef:9f:fd:ed:57:0c:f8:80:0d:07:cb:0b:12:
cb:3e:7b:92:42:c7:c4:8e:f9:d6:18:43:19:92:48:3a:e3:15:
bd:7a:ec:e9:b6:1c:6b:e2:47:6b:69:17:9b:af:59:b8:6e:fd:
e7:f1:44:68:0f:8d:68:41:70:c7:76:5d:08:50:9b:14:17:09:
f4:a7:71:81:89:6d:2b:92:6e:36:43:a1:e2:16:db:59:b2:db:
95:bf:ce:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:15 2026 by rpki-client