Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: D1JOhFKFoP06JjiBQjpKxvWDvhKAS9bqWxQloj6m09Y=
Subject key identifier: 29:78:96:1F:AD:42:BC:6A:41:62:42:01:C3:5B:A9:7D:A2:69:38:83
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 019F8756C2A7E18D0108F70EE55D15EE1DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 19CE
Signing time: Wed 22 Jul 2026 01:00:37 +0000
Manifest this update: Wed 22 Jul 2026 01:00:37 +0000
Manifest next update: Thu 23 Jul 2026 01:00:37 +0000
Files and hashes: 1: EcTxX-SiywrzoNwOuII1aWR6zHs.roa (hash: beN8BaOivwm2yhNJxlNC7Uur/3tPi7/Y31IRkJGKn0c=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: kxLdulWDVoXXTdl8C7QdKafRdkpB5i2VGzHBdBFFE6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:56:c2:a7:e1:8d:01:08:f7:0e:e5:5d:15:ee:1d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Jul 22 01:00:37 2026 GMT
Not After : Jul 23 01:00:37 2026 GMT
Subject: CN=2978961fad42bc6a41624201c35ba97da2693883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:2a:0a:bd:95:cc:8b:00:45:0d:24:ea:f3:
2d:d0:63:08:21:b1:d4:57:63:ec:fd:8e:e7:d9:0d:
dd:0e:8c:1f:23:d3:31:2d:3b:ec:76:e9:ce:fa:da:
5f:cb:36:43:8b:85:88:0b:52:3c:58:b7:02:29:11:
4c:94:65:fa:17:0d:0d:69:19:ae:20:a9:84:29:e5:
a3:ae:05:3c:81:e8:f7:fa:dc:31:43:98:ca:22:ef:
6f:74:91:00:4d:f6:17:a1:29:8c:c0:f5:81:3c:35:
1d:62:77:f4:52:56:a6:c5:e0:4d:91:3a:57:25:8c:
4f:a2:be:50:57:5e:19:48:35:56:0e:d0:01:d9:fe:
cc:3f:c1:51:97:77:2d:b8:6b:0d:24:de:3e:02:a9:
82:9c:ef:d9:43:49:ab:dc:68:32:3f:e6:36:6a:3e:
7a:e8:08:f7:03:1d:58:d3:b0:01:de:95:b0:e0:5b:
d8:df:df:e7:19:8b:37:76:76:f2:3c:72:4e:aa:6a:
1f:74:90:d8:4d:7f:2a:9d:d7:f9:52:4c:86:11:a1:
34:54:0b:de:0a:6c:6d:8a:70:d1:08:f9:2e:f1:55:
4b:d6:27:26:6e:5f:b2:ca:9b:92:eb:af:70:19:dc:
01:64:5a:6a:f7:10:3b:ee:51:3c:85:9d:6d:e3:13:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:78:96:1F:AD:42:BC:6A:41:62:42:01:C3:5B:A9:7D:A2:69:38:83
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:99:c5:86:51:cb:5e:9d:cc:d5:ed:92:7c:bc:8a:24:84:e8:
f6:89:b7:2c:dc:60:a0:f0:04:72:81:6c:b7:af:49:5f:4f:0e:
c2:72:f3:86:bb:f2:9a:9f:09:3b:06:60:fd:87:0c:6b:1a:ca:
28:b0:50:ac:63:90:a6:c4:1a:d2:10:41:52:99:c9:a4:12:9d:
6e:da:ed:be:a4:5d:4c:46:b8:c8:9b:e6:43:db:11:79:ab:06:
37:91:32:5e:ef:77:b6:ef:b7:47:0a:fa:55:d3:98:a2:c0:a5:
e1:c0:31:0e:85:4f:42:4b:85:62:4f:b0:40:3c:e5:d0:f8:9d:
3e:94:13:78:3c:e8:05:fe:4e:8a:f2:73:6b:6e:a3:0d:df:78:
64:76:c3:18:e0:20:a2:0b:2e:f1:38:6d:44:0b:ea:33:35:e3:
cf:fe:ff:49:79:21:b7:b6:c2:96:21:dc:4b:67:03:f7:05:0a:
95:1a:a7:63:08:e4:73:58:b6:fd:96:0c:32:06:b1:a5:93:6a:
fe:fd:e1:7a:6d:12:2b:bd:c3:3a:d6:06:9d:e0:9a:f9:bc:ba:
7b:f9:e6:fa:3f:87:b3:d6:c9:72:91:27:54:04:c6:cd:6f:f4:
19:84:21:6d:b6:7f:50:59:f2:5e:b7:86:b6:de:51:42:64:eb:
69:07:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:38:35 2026 by rpki-client