Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: 7RdOh5w1ExMz0GhXHQc4mbp2mh/YmnYFghbjhozwwMg=
Subject key identifier: BA:5A:35:A2:75:C4:03:47:F0:F5:1D:AF:B3:91:A6:D6:B3:59:12:90
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019F8531715646669D5FD8999AE3FAD32945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0DAD
Signing time: Tue 21 Jul 2026 15:00:37 +0000
Manifest this update: Tue 21 Jul 2026 15:00:37 +0000
Manifest next update: Wed 22 Jul 2026 15:00:37 +0000
Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=)
2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: H69RELOtQWSIgCYmkduUyBsjsrXOJsKMentwOvJ28rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:71:56:46:66:9d:5f:d8:99:9a:e3:fa:d3:29:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Jul 21 15:00:37 2026 GMT
Not After : Jul 22 15:00:37 2026 GMT
Subject: CN=ba5a35a275c40347f0f51dafb391a6d6b3591290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:93:49:eb:b8:3a:bd:04:2b:7d:95:d9:92:
0b:89:f0:ad:af:ab:61:5b:36:79:be:5e:03:99:b1:
07:4d:41:e1:f0:da:3a:ab:b7:e4:50:6c:90:72:0f:
14:88:bc:33:1a:5c:73:3a:ca:d0:d1:f5:5d:07:04:
bf:de:3f:07:01:a6:a3:7d:04:82:f4:c4:87:43:b4:
08:4a:e9:97:8a:2d:b7:c2:9e:4e:68:d3:c6:59:ff:
7e:ef:e9:7c:ca:4f:a8:8f:3a:d2:49:98:4a:28:9c:
c3:6c:2d:05:ff:90:66:00:62:04:62:61:b6:5e:61:
e6:60:02:ba:44:78:1f:63:fa:bc:71:3b:5f:de:d1:
6f:c9:8a:a2:62:da:ca:f1:9a:ab:7f:09:40:3d:64:
d3:23:18:9e:ea:01:86:c0:ce:74:3f:72:1f:c0:be:
7b:07:a6:2b:0b:d8:0c:98:bb:84:22:06:82:10:44:
87:b6:da:2f:ec:3b:2e:00:38:11:ad:68:0b:df:fc:
a2:1d:23:d6:2d:87:de:6d:a9:f2:5c:73:7a:eb:6b:
9d:32:99:66:fc:32:6b:8c:2a:01:a8:d1:72:87:49:
29:ec:31:d0:a2:3c:2b:40:df:2e:a3:a0:f7:d2:11:
27:57:b5:ad:b8:9c:1f:dc:55:c5:26:0e:4a:b1:30:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:35:A2:75:C4:03:47:F0:F5:1D:AF:B3:91:A6:D6:B3:59:12:90
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c1:8e:82:58:40:a9:5a:af:1a:3e:c2:a3:cb:99:77:4f:8d:
40:c9:29:ab:88:4d:29:99:86:a4:2c:b0:a6:0d:57:a9:da:c8:
7a:3b:b8:4b:4b:bf:63:08:71:2c:fc:a4:aa:cb:94:91:da:ac:
88:c8:8c:12:8a:d2:51:d2:ff:4f:c6:8d:e2:77:97:e1:82:7e:
15:9a:5e:9d:4e:2f:75:0b:0d:f1:e9:33:66:fc:77:52:21:ae:
44:80:8b:72:be:09:04:da:a1:e8:c7:26:28:47:8a:69:f0:a0:
79:a8:aa:a9:07:29:c9:b7:fe:e8:aa:fe:94:f7:d9:51:84:2d:
51:b7:e4:fb:9d:be:d4:cc:09:8b:31:5d:75:f8:2d:1a:e9:e0:
ee:a9:b6:39:63:61:6d:40:ae:f4:5f:d5:16:ab:cc:a4:be:98:
64:4e:29:2d:9e:f2:99:dc:a3:cf:48:5d:8a:27:0b:73:f4:90:
dc:77:df:2e:89:ec:bb:99:cf:61:f7:30:d4:18:cd:2e:e7:7a:
9f:81:d0:ed:7d:38:40:18:79:17:cc:8c:cc:0d:fd:12:bd:5e:
34:e3:85:1b:d7:55:f9:25:9c:4f:ae:5a:e6:c8:35:75:13:3b:
54:91:bd:29:3f:ff:97:4f:32:96:5b:c8:1e:58:c6:e0:97:6d:
52:26:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:22:26 2026 by rpki-client