Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: 1zj2Z1VF67ckBxnkCJtAfudGdxpd0dKXZuc+qXxoQJc=
Subject key identifier: E3:93:04:2B:40:CD:53:8B:86:28:97:D0:ED:B3:42:26:A3:D6:AF:E0
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019EB9222B095153A81BCB83DBFB659C895E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 03BC
Signing time: Fri 12 Jun 2026 00:01:24 +0000
Manifest this update: Fri 12 Jun 2026 00:01:24 +0000
Manifest next update: Sat 13 Jun 2026 00:01:24 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: tqRl7YSXBvENPmqqi03JWFhaGmQIQxWI5dR95q7TFmA=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:2b:09:51:53:a8:1b:cb:83:db:fb:65:9c:89:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Jun 12 00:01:24 2026 GMT
Not After : Jun 13 00:01:24 2026 GMT
Subject: CN=e393042b40cd538b862897d0edb34226a3d6afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1a:2d:1c:60:6e:40:f9:d4:0c:a4:41:0f:9f:
98:7d:41:95:6c:5d:f8:ab:3e:11:ae:13:29:87:6d:
04:4b:f8:fb:81:bf:0e:d5:86:f5:c3:9d:6a:ed:89:
74:82:fa:4a:03:b3:fb:c7:cc:6b:3f:d0:c9:a8:c8:
61:5c:2b:08:20:56:a7:b8:41:ed:ce:b9:85:19:56:
fc:64:e7:2a:6d:a0:cc:e7:a5:2a:bc:89:62:b7:1a:
5d:74:b2:6b:99:fe:36:c0:17:a4:fe:8c:ce:c3:e6:
c1:d9:f1:5d:07:84:16:3b:38:c5:1b:56:70:cb:a5:
fb:87:2b:f6:20:b2:9a:aa:50:cf:fb:69:bd:e9:83:
d1:cc:8f:68:f5:de:6a:52:3a:c0:96:1e:8c:47:c0:
a8:18:3c:d7:45:1b:30:a0:d6:f6:92:65:85:4d:e9:
00:70:29:38:15:42:0f:7d:ca:34:cd:ca:6e:4b:23:
c4:b2:d2:60:97:6b:a8:9d:91:ab:ab:e5:21:20:9f:
ef:db:f5:29:bb:9e:db:11:ea:f1:eb:37:c5:a9:3e:
96:b0:48:2a:62:28:8a:7a:d0:ce:62:71:44:0e:a4:
db:59:8c:d8:f1:d0:fb:b5:62:f0:a1:88:58:14:c0:
3c:ba:44:4e:d1:d2:4b:02:e5:0c:e2:1e:27:36:f6:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:04:2B:40:CD:53:8B:86:28:97:D0:ED:B3:42:26:A3:D6:AF:E0
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ab:a8:af:91:62:a6:8c:d3:b9:32:1f:9e:4b:ac:a9:c3:80:
06:24:6c:d7:bf:64:2f:fa:cd:34:85:1f:e0:46:0a:e0:9a:60:
0a:9a:46:a5:ac:14:7d:d3:96:26:ed:e2:a5:a1:5c:4e:ef:6c:
12:b6:e0:c7:71:d0:2b:10:e9:c2:a4:62:69:66:33:02:31:94:
a3:7d:d0:6c:4a:f7:51:53:c1:bd:01:b0:6e:eb:e2:9f:c9:55:
48:b3:36:c5:cd:79:43:56:3a:17:ae:41:3a:9f:59:a7:db:a8:
83:ba:fc:94:f5:bf:36:44:83:cb:45:cf:41:c8:2c:58:80:34:
05:b5:ea:46:5a:d0:ef:a3:b8:ba:39:a7:e2:c1:04:58:58:1d:
c5:fc:07:72:3d:35:a8:ba:50:98:53:bf:32:2e:7f:d0:d8:7c:
0d:c7:94:30:b3:8a:2f:da:cf:c2:00:ab:8f:4f:58:54:ce:66:
dd:b1:41:d9:6d:09:e0:26:0c:71:90:11:1b:6a:5d:0e:69:f0:
e9:6b:98:08:e6:a4:45:0d:dc:53:8e:fe:cd:b6:09:c2:57:0e:
aa:4b:75:75:1f:60:1a:9f:ad:5d:98:1d:e0:e6:90:04:bf:1f:
f8:b3:91:be:1f:91:0d:39:c6:d4:41:2b:28:71:75:2b:02:f5:
a0:72:f1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:50:38 2026 by rpki-client