Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: 6MkuMB74UTvR6VNfjAV+HEXflwFZXgEPXpizm+TcgEQ=
Subject key identifier: A1:C6:38:E5:B4:EB:FD:98:BD:88:87:A4:63:88:F7:4A:40:65:C7:47
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019DD16409F6B8C93285792A70F8DFD05256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 0344
Signing time: Tue 28 Apr 2026 00:01:27 +0000
Manifest this update: Tue 28 Apr 2026 00:01:27 +0000
Manifest next update: Wed 29 Apr 2026 00:01:27 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: jkCbPghX16jRvHIgNyfNsGsN+4lYCRLjLdilDcnCpHw=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:64:09:f6:b8:c9:32:85:79:2a:70:f8:df:d0:52:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Apr 28 00:01:27 2026 GMT
Not After : Apr 29 00:01:27 2026 GMT
Subject: CN=a1c638e5b4ebfd98bd8887a46388f74a4065c747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:46:8f:52:c2:a5:67:fa:83:68:3c:37:c6:
cc:d3:7d:3a:ac:34:63:37:c9:2b:c3:91:73:88:6e:
fd:93:ad:b7:46:f8:05:85:1e:d0:ba:b9:1a:a8:77:
f4:f6:d1:a1:b7:62:dc:bd:49:32:13:90:94:7a:4f:
e4:e7:3f:27:cb:39:31:b9:41:a1:f8:bc:4c:e6:e4:
f2:7d:15:da:17:0d:2a:33:37:fa:4d:ff:bd:6f:f5:
04:49:87:d8:83:c1:43:e4:f2:8e:1f:4a:c7:43:7c:
48:ce:6c:48:8d:47:3b:8c:f2:59:0b:5f:99:1c:2e:
95:fd:20:f1:7e:4a:f0:69:83:c8:af:54:52:14:71:
9a:7d:5d:14:b9:fd:db:39:7e:d9:b2:a6:75:94:9f:
99:55:55:36:4b:7d:cb:29:70:bf:bb:43:56:c1:76:
99:91:fd:88:9c:d7:17:93:0b:bc:07:aa:83:3b:cf:
e5:b5:e5:9f:dd:52:38:10:cc:42:25:30:54:5e:29:
4c:05:72:26:2f:1c:e5:98:31:cc:15:cb:dc:a2:38:
06:a7:7b:8e:dc:f8:be:7a:09:00:35:06:fc:4e:5c:
44:d7:cd:41:8a:b2:06:da:4c:75:64:41:49:53:f5:
90:c0:da:36:f6:64:67:c4:e9:06:79:cf:6d:8f:f2:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:38:E5:B4:EB:FD:98:BD:88:87:A4:63:88:F7:4A:40:65:C7:47
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:37:a3:11:f3:56:b9:fe:2c:44:2a:32:27:9b:3c:23:15:de:
f0:af:bd:b7:01:b1:2f:70:48:81:9e:71:4f:8e:d0:e6:78:d5:
e1:86:8a:fa:a2:07:ce:60:ed:77:1e:a5:9d:65:44:f9:2f:d0:
15:51:c4:17:2d:9a:96:f6:f0:f8:83:d2:e0:05:d0:d3:57:e3:
8e:fb:6a:da:1a:79:b4:78:33:76:1c:e1:b3:50:12:57:89:fb:
13:e9:88:44:04:a6:e2:40:7c:f9:f8:1e:a0:eb:c1:12:93:52:
95:71:8f:f6:a6:fe:b7:74:52:d9:07:cf:12:2d:21:e2:02:79:
64:58:44:e8:6a:d6:b2:ad:93:d8:85:dd:bc:b0:25:02:e0:e5:
54:5f:4b:2b:c5:48:73:a5:e9:16:19:1d:8c:ab:24:35:f1:d5:
05:31:b8:de:92:f7:e6:6a:f7:92:3e:b6:e5:99:e6:e1:3a:98:
cc:89:0e:e8:4f:06:b6:9c:12:34:d6:08:f5:66:7d:6b:29:73:
77:48:00:e0:3f:aa:d4:6b:0b:d0:37:7a:fc:b1:a7:bb:42:3d:
cf:70:17:18:6c:5b:ce:ca:fc:7f:c9:21:d0:8b:2f:af:8d:d7:
3d:67:c1:fc:31:1f:84:11:b3:45:1f:3a:e3:1a:8b:0f:38:47:
c1:7b:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 06:06:48 2026 by rpki-client