Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: YP8tH4ZTLvvPtANfyoGvA4ageFcVjAwiI9rdC/MqTGA=
Subject key identifier: 89:65:93:14:A9:54:68:CF:01:F6:53:F6:F8:27:E1:4E:B1:9C:9A:F8
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019CE5C92F5313629F044AE23E307242CEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 02CA
Signing time: Fri 13 Mar 2026 06:01:33 +0000
Manifest this update: Fri 13 Mar 2026 06:01:33 +0000
Manifest next update: Sat 14 Mar 2026 06:01:33 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: XnDdVSz1jqrDWnCAALRUO7SPqIYJJ/gx9o0VRnGPrm0=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:2f:53:13:62:9f:04:4a:e2:3e:30:72:42:ce:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Mar 13 06:01:33 2026 GMT
Not After : Mar 14 06:01:33 2026 GMT
Subject: CN=89659314a95468cf01f653f6f827e14eb19c9af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:c3:2a:e9:26:6c:62:6a:02:bc:60:c5:78:
79:ad:40:cf:56:ff:10:b3:36:53:9c:b9:14:8e:0d:
a7:59:88:5e:ed:c3:09:1b:8f:c7:ad:43:3e:b4:5e:
ec:14:4e:39:57:03:3b:4f:8f:58:67:34:9b:29:03:
e9:35:7a:62:44:67:a7:3e:6c:b8:8a:6c:36:a9:29:
59:a0:46:c8:f5:fa:62:7a:5f:e9:6e:07:9c:4f:c4:
fd:cc:f8:aa:28:c5:a2:6b:b2:c7:98:a5:33:3c:f1:
ed:30:03:d4:cb:a8:27:af:74:0c:a4:db:81:79:d1:
a2:7c:6c:d9:c0:9e:31:10:f1:67:53:4a:67:7a:b4:
a1:cb:00:d0:3a:d8:fd:16:64:3d:0c:a3:d3:f6:86:
ff:bb:aa:08:2c:b7:8e:6e:0c:7f:d1:81:83:10:32:
c2:74:6b:6d:c2:b6:80:51:59:e1:f3:7e:b7:ca:6b:
ca:b8:a6:64:1a:55:6f:40:51:3e:22:17:64:50:ac:
4d:a4:14:f0:2e:2c:6a:4a:b9:b0:9d:0e:27:45:30:
fd:ca:a6:3a:a5:5c:7c:85:b2:45:4e:f9:79:33:15:
29:24:39:b5:52:2f:d4:4a:f8:db:50:6f:15:c0:61:
e7:a8:f0:f5:ad:53:b6:d5:67:a6:0b:98:21:0f:d5:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:65:93:14:A9:54:68:CF:01:F6:53:F6:F8:27:E1:4E:B1:9C:9A:F8
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:77:3c:40:f4:bc:ea:e6:cf:36:3e:82:33:ac:ad:b0:62:ce:
5c:98:9f:41:9a:a0:e4:98:b8:d3:0c:f2:af:42:9e:3c:52:87:
44:cd:41:87:8b:62:a7:0b:7f:02:c4:bd:40:bc:be:a9:f7:5c:
a0:59:f8:0b:f1:33:5d:a0:f1:0d:c6:11:1c:fd:b0:e7:54:ee:
2b:fc:5a:f3:9a:75:87:ca:89:6c:9f:12:f9:c7:5c:e2:83:4d:
de:55:ce:34:77:92:19:11:bb:3d:c8:37:e0:a4:83:af:b5:f7:
34:ba:24:b1:ed:50:11:ae:40:65:49:54:bc:57:b8:39:af:30:
35:bf:e0:79:19:fd:ce:63:a7:eb:e2:8d:14:a9:d9:f1:40:ef:
f0:ae:8d:f5:8d:f6:59:ed:58:f7:79:60:ee:95:5c:9e:72:ac:
d6:f8:fc:0e:81:cd:94:b8:11:68:f0:5a:db:66:3d:3a:8f:50:
82:b8:14:81:0a:cd:31:51:12:5f:4c:23:1a:78:35:33:55:d7:
89:0b:59:e5:ec:42:71:58:52:15:fc:3c:d9:30:69:e9:ea:48:
c7:64:94:4e:78:2d:35:90:75:1d:d9:85:85:6c:61:56:fc:91:
27:aa:cf:60:49:8b:0e:4b:6c:a0:b7:2c:e0:00:10:cc:35:9c:
0a:41:51:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:09:16 2026 by rpki-client