Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: EcrpHNM0YPSO97oHnK962tRTcgaNBRTQZAUbWMF+LWI=
Subject key identifier: A0:F2:A9:F8:16:CF:84:83:C2:31:10:EF:17:6F:2B:F6:67:75:79:B4
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019FA2CEEE3038FA95A3F6EDF626BAB1DC9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 0435
Signing time: Mon 27 Jul 2026 09:01:38 +0000
Manifest this update: Mon 27 Jul 2026 09:01:38 +0000
Manifest next update: Tue 28 Jul 2026 09:01:38 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: KZ2jV1VUyciKrNyWbgY6PhGegqsz0AtxLgGEpmavGf8=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:ee:30:38:fa:95:a3:f6:ed:f6:26:ba:b1:dc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Jul 27 09:01:38 2026 GMT
Not After : Jul 28 09:01:38 2026 GMT
Subject: CN=a0f2a9f816cf8483c23110ef176f2bf6677579b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:98:80:54:2b:9f:ea:ed:52:a1:75:b0:56:
d4:47:ce:c3:7e:44:e8:8e:44:6a:1c:83:e1:ae:15:
bb:e8:a8:c9:37:67:ad:f8:82:7f:99:e0:fb:2c:03:
a8:9d:40:d5:3a:03:5b:c3:eb:f4:f7:4a:69:77:79:
35:c9:f7:2e:79:d3:be:75:ab:12:aa:7a:4f:99:dd:
3a:18:08:24:23:be:f2:a5:cf:85:79:fd:90:54:2c:
53:0c:d4:b5:d0:e5:02:07:b1:5c:4b:8a:64:74:a2:
3d:05:00:97:3a:51:07:11:0f:b5:f8:59:7e:89:57:
b1:39:50:73:90:fb:77:83:e2:12:1b:9a:10:8c:7a:
a8:eb:51:f5:a7:23:f3:1d:7b:a2:cf:3e:0a:d4:7f:
f8:84:a0:21:b9:7d:e9:d0:d4:d1:0a:1a:25:44:ab:
51:fb:ea:3b:9e:87:fc:69:a4:a6:87:9a:7d:bf:70:
23:f8:05:b2:52:7b:1b:23:35:ee:10:24:56:09:92:
69:e4:42:1d:9a:5e:0a:e9:c4:65:d2:2a:9d:ce:c1:
78:bd:d2:c0:21:92:53:5f:b3:5f:55:80:c8:54:4e:
75:39:9c:a9:65:d8:d4:77:65:f0:55:e1:55:08:d9:
7f:a6:c9:b3:23:75:93:71:c1:3b:f5:1d:72:9d:a4:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:A9:F8:16:CF:84:83:C2:31:10:EF:17:6F:2B:F6:67:75:79:B4
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f0:f7:a8:15:c3:f5:36:fd:8c:d7:2a:d0:2c:07:0d:d4:c5:
a9:cd:e8:d8:08:71:45:4a:bb:86:1d:e3:d4:56:35:f3:5e:88:
71:1c:6f:46:cb:76:68:63:56:3b:8a:76:d2:13:71:bf:dc:69:
0c:8e:4a:10:37:bf:20:b4:8f:6c:47:94:f3:a1:54:96:d0:4c:
24:7f:f7:07:51:e9:d7:b5:7f:76:4a:43:7a:ac:57:68:74:3f:
45:e8:1a:c9:95:bf:ca:7a:70:c3:a8:fc:f9:26:a3:a8:8e:a7:
50:68:05:0f:e1:e8:da:b4:d2:bc:58:3d:bb:89:7b:19:2e:05:
26:d9:db:07:6b:1e:60:ae:fa:fc:e0:93:b3:99:16:89:d8:d5:
f0:cb:fd:ba:cb:86:58:85:38:f3:a4:4e:ae:0f:e8:13:a0:fe:
06:1d:6f:35:8d:b7:76:18:a9:2a:54:b4:99:cc:12:e1:8f:88:
ae:c3:2a:dc:fe:9e:75:06:ad:59:27:cd:2a:6a:63:59:71:85:
57:5e:e4:e4:4d:53:68:c6:34:f9:19:5f:60:0b:ee:1f:30:a8:
e6:49:2d:16:2c:d1:7d:33:c7:81:b1:b4:4d:f5:79:02:18:33:
33:6b:b2:d8:65:57:ca:02:cb:43:3c:22:15:ba:a7:35:a0:89:
3b:75:b8:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izu4wOPqVo/bt9ia6sdyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy
ODAxYmIwHhcNMjYwNzI3MDkwMTM4WhcNMjYwNzI4MDkwMTM4WjAzMTEwLwYDVQQD
EyhhMGYyYTlmODE2Y2Y4NDgzYzIzMTEwZWYxNzZmMmJmNjY3NzU3OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLiYgFQrn+rtUqF1sFbUR87DfkTo
jkRqHIPhrhW76KjJN2et+IJ/meD7LAOonUDVOgNbw+v090ppd3k1yfcuedO+dasS
qnpPmd06GAgkI77ypc+Fef2QVCxTDNS10OUCB7FcS4pkdKI9BQCXOlEHEQ+1+Fl+
iVexOVBzkPt3g+ISG5oQjHqo61H1pyPzHXuizz4K1H/4hKAhuX3p0NTRCholRKtR
++o7nof8aaSmh5p9v3Aj+AWyUnsbIzXuECRWCZJp5EIdml4K6cRl0iqdzsF4vdLA
IZJTX7NfVYDIVE51OZypZdjUd2XwVeFVCNl/psmzI3WTccE79R1ynaSnXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDyqfgWz4SDwjEQ7xdvK/ZndXm0MB8GA1UdIwQY
MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt
NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5
LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfD3qBXD
9Tb9jNcq0CwHDdTFqc3o2AhxRUq7hh3j1FY1816IcRxvRst2aGNWO4p20hNxv9xp
DI5KEDe/ILSPbEeU86FUltBMJH/3B1Hp17V/dkpDeqxXaHQ/RegayZW/ynpww6j8
+SajqI6nUGgFD+Ho2rTSvFg9u4l7GS4FJtnbB2seYK76/OCTs5kWidjV8Mv9usuG
WIU486ROrg/oE6D+Bh1vNY23dhipKlS0mcwS4Y+IrsMq3P6edQatWSfNKmpjWXGF
V17k5E1TaMY0+RlfYAvuHzCo5kktFizRfTPHgbG0TfV5AhgzM2uy2GVXygLLQzwi
FbqnNaCJO3W47w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:50:51 2026 by rpki-client