Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: 5tgFT1Bnw7QKahgAFVmPWy6Omo+Z6kKgNHQ05iaYKS8=
Subject key identifier: 72:1C:9D:33:97:3E:7B:6A:48:6E:0D:6B:19:24:3B:61:60:50:6C:86
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 01A18CAEF1B6C8A1EE4E20BE06C3194BC736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 0533
Signing time: Fri 30 Oct 2026 12:00:37 +0000
Manifest this update: Fri 30 Oct 2026 12:00:37 +0000
Manifest next update: Sat 31 Oct 2026 12:00:37 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: bd3nFlCX8xWJ0/yGOsrkCzdtl0RKuefGy9eKl3bPr1g=)
2: XKwbgCRt39xf-ucRzd4m1YlT77U.roa (hash: Gig9/Xc/hBqodZHjGszTaZgsvQyq9DUaulQG1yPjjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:ae:f1:b6:c8:a1:ee:4e:20:be:06:c3:19:4b:c7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Oct 30 12:00:37 2026 GMT
Not After : Oct 31 12:00:37 2026 GMT
Subject: CN=721c9d33973e7b6a486e0d6b19243b6160506c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:44:75:b9:30:c1:14:a3:47:d4:17:85:fc:
94:6a:99:2c:6a:aa:5c:d8:2b:5c:b3:06:ff:44:4e:
52:ef:f3:93:53:7c:1c:21:22:39:ed:e4:c2:50:5e:
e4:d8:4b:0a:01:5d:03:3f:c2:31:24:6b:0a:09:57:
7b:a1:2d:ea:cd:99:05:91:95:57:35:3e:17:60:1c:
cf:3f:09:3d:e3:ab:a9:be:6c:a6:bf:a5:18:b8:0b:
05:13:6c:22:09:67:2b:bc:19:23:34:3b:98:61:20:
e5:2f:74:63:c6:17:56:0d:6f:8c:d5:97:e4:08:fb:
3c:c5:09:7e:5f:5b:2c:bd:f7:77:83:67:c7:e1:85:
72:9c:75:d2:e9:bf:93:60:09:f2:ad:3d:4f:34:b3:
06:15:4c:13:45:77:0b:b2:68:71:c5:1c:12:fb:6d:
8d:d9:c8:e3:22:bc:06:51:c6:b8:53:2f:14:8b:a1:
33:c2:c7:67:3d:ae:82:dc:e1:30:b7:6f:df:26:07:
7c:da:cf:a3:41:d9:36:ac:db:8e:53:54:4b:ad:82:
71:db:5e:cf:5a:05:e9:87:dc:45:af:5b:4e:34:c2:
6d:53:c8:a0:0e:fc:f1:77:9e:51:eb:86:1a:ab:e2:
2e:2a:44:47:32:70:20:3e:79:dd:37:81:17:6b:e0:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:9D:33:97:3E:7B:6A:48:6E:0D:6B:19:24:3B:61:60:50:6C:86
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:89:10:e3:a5:f2:cb:19:33:9c:57:e1:ae:4c:42:ff:99:88:
11:9a:03:d8:82:17:7a:05:d6:b1:89:ff:eb:2c:45:ef:64:b5:
ee:cf:e0:4c:a1:9b:97:6e:c9:33:24:ae:97:f4:6c:23:d2:41:
6a:6a:31:fb:f1:26:93:e2:6d:9a:93:21:1d:97:25:b0:9e:bd:
48:36:5c:1d:35:28:52:80:20:fb:6a:ec:ba:32:6d:1b:43:50:
f8:f7:82:7f:8d:91:b3:75:41:91:d2:93:d9:57:0e:84:8e:1d:
c2:6a:16:ce:fd:8f:eb:8b:da:a4:06:52:50:2f:ac:94:cb:66:
19:c4:2e:c5:f7:31:38:ca:ec:74:10:f8:ad:18:85:4a:28:b8:
3b:d1:6d:af:bf:51:24:49:73:7a:cf:17:f9:09:b6:72:a1:21:
0c:4a:42:a7:88:ca:96:2b:27:66:fa:58:4f:d2:ef:d6:29:18:
12:0d:70:d0:08:10:80:84:0b:77:d0:ea:82:c3:10:3b:7f:16:
42:fc:63:08:4f:50:4b:46:34:d6:91:84:53:f4:43:87:93:44:
09:ea:09:75:8d:0f:4e:08:dd:a7:8b:e0:99:dd:c7:b3:75:03:
c2:fb:64:5c:9e:b4:7c:ca:5c:93:50:67:e9:86:d1:89:d8:95:
08:ce:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:06:26 2026 by rpki-client