Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: Ie4isnnjMuNtxEwCocVvFKN3VIPTlPgV4DkFpo/0c4E=
Subject key identifier: 2D:89:A0:F9:A4:7A:EB:A6:9B:68:7D:5D:3D:66:A3:DF:1A:79:C2:4D
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 01A091A0DEC5DABC22E6BC5C39F40A5CDC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 04B1
Signing time: Fri 11 Sep 2026 18:00:33 +0000
Manifest this update: Fri 11 Sep 2026 18:00:33 +0000
Manifest next update: Sat 12 Sep 2026 18:00:33 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: aFFqnLOsCtI19CPYDps/AjkggYpZQk1zZKkQye2IM8U=)
2: XKwbgCRt39xf-ucRzd4m1YlT77U.roa (hash: Gig9/Xc/hBqodZHjGszTaZgsvQyq9DUaulQG1yPjjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:a0:de:c5:da:bc:22:e6:bc:5c:39:f4:0a:5c:dc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Sep 11 18:00:33 2026 GMT
Not After : Sep 12 18:00:33 2026 GMT
Subject: CN=2d89a0f9a47aeba69b687d5d3d66a3df1a79c24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:ef:12:44:96:24:51:24:85:ba:d9:41:d5:
c9:7e:88:5b:f1:ba:d7:50:2c:cc:8d:5a:be:09:78:
87:6d:0b:c7:c8:73:62:d1:57:c7:45:d0:a9:d9:78:
5e:7c:a0:0f:be:ee:0b:66:27:0c:1a:2d:f8:a6:41:
83:36:02:96:96:ff:e4:47:76:20:72:cc:a7:55:fd:
6b:3e:27:0d:c6:12:1c:56:ce:8d:51:d4:ce:ab:2e:
1e:3a:81:9e:2e:ee:ab:66:8b:33:32:a8:d6:fb:a4:
45:71:f0:8a:3f:67:d3:b8:ae:b0:12:57:a9:15:fa:
f2:96:be:51:29:7c:ae:be:e7:83:3c:a4:b3:56:ec:
5b:70:bc:32:10:11:97:cf:43:81:ea:4a:e7:5f:c3:
cc:b5:1c:b1:0b:c6:b0:7f:b1:63:5e:33:fd:36:47:
6b:a4:00:79:b0:1f:db:5a:04:d3:b7:e0:79:ae:bc:
08:1c:1a:07:7f:3e:00:1a:ee:b8:6b:e6:d1:31:57:
8e:4b:d8:95:b3:3c:4b:11:c8:6c:c2:03:e2:d9:39:
16:70:45:e8:d3:d9:4d:e1:03:1f:1a:85:26:54:73:
2c:52:e3:b9:dd:5b:2a:32:e5:c0:97:c2:1c:55:3f:
4a:ac:a5:50:32:6d:dc:a6:af:18:bb:21:e0:68:1d:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:A0:F9:A4:7A:EB:A6:9B:68:7D:5D:3D:66:A3:DF:1A:79:C2:4D
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:77:ea:83:5f:d1:66:f1:6f:d1:d3:16:f2:d0:0b:b6:ca:a0:
a1:19:a3:45:e1:a6:3d:46:3c:60:30:3f:ef:a8:bb:19:f1:89:
3f:22:4a:ab:e0:3a:c3:0e:4e:21:4d:25:be:b2:54:92:8d:3a:
dd:9d:9e:be:18:b7:6f:f1:c1:6e:df:53:7d:b2:96:42:d2:9d:
da:18:9a:0e:6e:d8:60:ad:fb:f1:1c:12:a4:ae:77:76:58:e0:
10:fe:04:3a:50:e8:2c:40:a8:c6:5d:d6:c1:e8:1d:e9:f3:d7:
a5:78:25:66:b7:bc:59:53:60:c5:d0:c7:80:76:34:3d:b3:3c:
c6:43:cd:de:97:94:26:55:f4:d8:59:48:c9:3f:a1:2d:25:29:
46:4c:5e:62:31:5d:aa:c1:75:6e:c0:c7:8a:e2:9a:5d:9e:10:
05:8d:d1:24:d0:7c:7b:c2:07:b8:a1:7d:3c:ad:f5:f6:82:0f:
55:15:5b:66:2c:73:03:84:83:ff:1c:f5:2d:a3:9a:8b:ce:0e:
f6:72:99:32:c4:19:37:a8:cd:2b:df:e5:5a:95:ca:f0:3c:36:
18:02:02:64:fc:64:ca:ab:10:4b:60:21:3e:c6:1e:9f:5b:56:
ac:ee:88:5f:ee:86:e0:91:72:ce:b6:c7:e5:20:2b:b1:7b:c4:
de:03:bf:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCRoN7F2rwi5rxcOfQKXNxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy
ODAxYmIwHhcNMjYwOTExMTgwMDMzWhcNMjYwOTEyMTgwMDMzWjAzMTEwLwYDVQQD
EygyZDg5YTBmOWE0N2FlYmE2OWI2ODdkNWQzZDY2YTNkZjFhNzljMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZDvEkSWJFEkhbrZQdXJfohb8brX
UCzMjVq+CXiHbQvHyHNi0VfHRdCp2XhefKAPvu4LZicMGi34pkGDNgKWlv/kR3Yg
csynVf1rPicNxhIcVs6NUdTOqy4eOoGeLu6rZoszMqjW+6RFcfCKP2fTuK6wElep
Ffrylr5RKXyuvueDPKSzVuxbcLwyEBGXz0OB6krnX8PMtRyxC8awf7FjXjP9Nkdr
pAB5sB/bWgTTt+B5rrwIHBoHfz4AGu64a+bRMVeOS9iVszxLEchswgPi2TkWcEXo
09lN4QMfGoUmVHMsUuO53VsqMuXAl8IcVT9KrKVQMm3cpq8YuyHgaB2/MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2JoPmkeuumm2h9XT1mo98aecJNMB8GA1UdIwQY
MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt
NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5
LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXfqg1/R
ZvFv0dMW8tALtsqgoRmjReGmPUY8YDA/76i7GfGJPyJKq+A6ww5OIU0lvrJUko06
3Z2evhi3b/HBbt9TfbKWQtKd2hiaDm7YYK378RwSpK53dljgEP4EOlDoLECoxl3W
wegd6fPXpXglZre8WVNgxdDHgHY0PbM8xkPN3peUJlX02FlIyT+hLSUpRkxeYjFd
qsF1bsDHiuKaXZ4QBY3RJNB8e8IHuKF9PK319oIPVRVbZixzA4SD/xz1LaOai84O
9nKZMsQZN6jNK9/lWpXK8Dw2GAICZPxkyqsQS2AhPsYen1tWrO6IX+6G4JFyzrbH
5SArsXvE3gO/1g==
-----END CERTIFICATE-----
Generated at Fri Sep 11 23:42:45 2026 by rpki-client