Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: H53O46pShHdpNCPDIH/hPUMbyP4kXpvKEgibEvqMBXs=
Subject key identifier: C8:42:66:76:1D:0B:E7:81:7F:2F:AB:0F:16:9B:A4:81:1E:8E:93:36
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 01A18E9D2963CE3AA364D610E0BA71D82201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 0534
Signing time: Fri 30 Oct 2026 21:00:26 +0000
Manifest this update: Fri 30 Oct 2026 21:00:26 +0000
Manifest next update: Sat 31 Oct 2026 21:00:26 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: zmpw3hWfTSa1lBrWt5cOXH+JOXFZM7upUfvTdqJyR4M=)
2: XKwbgCRt39xf-ucRzd4m1YlT77U.roa (hash: Gig9/Xc/hBqodZHjGszTaZgsvQyq9DUaulQG1yPjjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:9d:29:63:ce:3a:a3:64:d6:10:e0:ba:71:d8:22:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Oct 30 21:00:26 2026 GMT
Not After : Oct 31 21:00:26 2026 GMT
Subject: CN=c84266761d0be7817f2fab0f169ba4811e8e9336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:21:e5:ac:2f:a0:da:e9:17:1e:b8:4b:a1:
cd:4d:30:7d:07:cc:7a:d9:f3:41:ba:f2:a2:bf:f2:
1a:df:93:c4:a1:40:e8:a0:6c:6d:3c:80:cd:97:42:
4f:5a:3b:61:19:51:b3:43:3f:17:34:4a:2a:82:42:
cc:03:ae:e8:5a:e3:8e:64:f3:42:dc:ab:39:c1:b2:
57:89:38:cd:d8:e9:98:aa:35:29:b7:f1:f4:54:67:
3c:23:a8:28:ad:73:41:4b:ab:81:bb:b7:96:fb:1a:
e8:19:74:e8:76:8f:bf:d5:1b:c7:b6:db:0e:31:d5:
e8:99:a0:09:c1:e4:d5:32:9d:ed:b0:7c:d1:12:fd:
4e:0b:a4:0f:7f:8f:e6:8d:3b:c0:73:91:30:b3:53:
0a:c7:2a:d3:43:43:d9:ac:54:23:c1:bd:8b:b6:ed:
02:c6:66:83:44:fb:68:31:fa:ab:f9:0c:51:93:28:
b1:69:fb:ad:29:60:cf:a6:04:39:84:e3:2e:24:2c:
87:d1:24:48:41:70:a7:c2:b7:4a:2b:21:18:38:48:
f2:5b:d5:97:1f:50:09:89:39:35:ce:27:36:e6:c1:
80:66:17:9f:c9:1d:b0:f6:9b:54:7e:01:14:c2:c5:
60:33:2b:e8:47:76:56:52:82:6b:1e:ca:59:6a:23:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:42:66:76:1D:0B:E7:81:7F:2F:AB:0F:16:9B:A4:81:1E:8E:93:36
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:18:bf:16:35:11:b6:d5:db:82:84:2f:68:d4:a4:30:51:
87:25:9c:71:7d:62:df:ec:33:f0:7d:5b:e7:5f:ec:23:36:51:
d4:83:9d:d2:11:cd:06:dc:c8:4b:26:94:3b:ab:9d:2c:de:05:
8b:5e:99:b9:4d:72:28:27:b2:19:d8:fc:29:de:54:64:66:c8:
25:0b:57:01:e4:53:fe:d7:d4:b4:f8:0f:7c:b2:06:85:ef:09:
c6:24:14:10:cf:85:fb:56:38:4a:52:24:c9:ba:20:7e:4c:cb:
a0:51:ad:8d:dd:e1:20:87:36:73:65:7c:14:b8:8d:d8:3e:0c:
0c:05:08:4a:d6:53:ef:3d:de:2a:d0:82:e3:cd:ec:0b:5e:bf:
0a:c8:fe:88:10:ff:bd:9c:f0:40:f9:2c:80:61:ca:2d:5a:dd:
be:57:13:96:69:71:0e:46:ca:83:53:25:80:dc:11:23:8b:79:
de:77:14:f3:c4:df:0e:77:80:20:1f:3e:6c:a8:3c:3a:27:f8:
75:0a:b4:33:61:ee:1a:f7:71:a2:69:9b:48:30:c4:59:d5:f8:
9d:90:e4:26:d0:da:03:9c:9c:6e:48:c9:f1:14:db:41:26:92:
7b:cc:51:10:d5:ba:0a:8e:73:06:18:17:33:e2:9a:38:b5:fe:
b9:3b:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:22:38 2026 by rpki-client