Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.mft
File: bzumz3nFWiV59WPufUVG3b15n5M.mft (raw, json)
Hash identifier: nhOdQY7Kd0v/0aRUNxtUXENBiejvMziu+IukDd3NUdA=
Subject key identifier: 8C:D8:39:FC:5C:A9:47:5B:00:4F:E9:61:57:11:D5:7C:DE:C9:4A:98
Authority key identifier: 6F:3B:A6:CF:79:C5:5A:25:79:F5:63:EE:7D:45:46:DD:BD:79:9F:93
Certificate issuer: /CN=6f3ba6cf79c55a2579f563ee7d4546ddbd799f93
Certificate serial: 01A0E32C04531DAD9E8440DD2155B21B5FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzumz3nFWiV59WPufUVG3b15n5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.mft
Manifest number: 85
Signing time: Sun 27 Sep 2026 14:01:47 +0000
Manifest this update: Sun 27 Sep 2026 14:01:47 +0000
Manifest next update: Mon 28 Sep 2026 14:01:47 +0000
Files and hashes: 1: Q1w-Bs6jfTowNymPHFm55S8gHwI.asa (hash: SfZ/zly/5VvKGmydfZ73MXbkedBsN91u4THWza4zaTY=)
2: bzumz3nFWiV59WPufUVG3b15n5M.crl (hash: 6XiilLX4/2Q/PPHMp3JiYJKjq+juP8L57fbGNAM9+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzumz3nFWiV59WPufUVG3b15n5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2c:04:53:1d:ad:9e:84:40:dd:21:55:b2:1b:5f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3ba6cf79c55a2579f563ee7d4546ddbd799f93
Validity
Not Before: Sep 27 14:01:47 2026 GMT
Not After : Sep 28 14:01:47 2026 GMT
Subject: CN=8cd839fc5ca9475b004fe9615711d57cdec94a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:70:44:e8:6b:8a:32:96:76:c6:3b:85:c9:83:
3f:91:d3:0b:52:e9:fa:7d:75:26:2a:e4:b9:82:20:
97:98:38:4b:d3:ba:32:1b:6b:09:99:6b:24:76:32:
9e:83:47:ae:da:b1:fa:b1:9c:14:81:86:33:e7:3c:
16:fd:c4:e4:66:49:52:ba:b3:e6:53:7d:f7:ee:f8:
47:9e:12:b9:74:0a:b8:b0:76:18:7b:6d:78:b2:94:
6e:4d:a0:dd:ca:92:ab:c0:26:ed:40:d6:27:32:dd:
ca:61:a2:2a:4f:27:f4:81:4b:1e:92:52:27:ba:48:
12:de:cc:83:b2:61:26:f9:c0:e1:35:7b:30:b7:d5:
5d:61:2f:c7:33:15:d2:77:a6:53:33:db:b2:4f:86:
4c:14:3b:4b:36:8f:60:32:a3:5a:f1:ba:6f:6e:79:
3a:84:46:91:23:ef:44:d0:9e:93:00:f1:70:66:39:
3b:86:c0:16:24:f3:b4:0c:07:e9:dd:3c:df:f0:02:
82:a1:b5:f9:8b:9f:ca:c0:02:88:69:2a:d5:3f:ad:
ce:78:1c:ee:d7:db:1b:96:f9:4f:30:c1:72:bf:57:
44:67:f8:38:78:64:2e:b6:bc:0f:c9:2b:7e:b3:fc:
fc:75:1a:23:ea:3c:60:fe:93:e7:71:c6:f0:20:ec:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D8:39:FC:5C:A9:47:5B:00:4F:E9:61:57:11:D5:7C:DE:C9:4A:98
X509v3 Authority Key Identifier:
keyid:6F:3B:A6:CF:79:C5:5A:25:79:F5:63:EE:7D:45:46:DD:BD:79:9F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzumz3nFWiV59WPufUVG3b15n5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/130c39-c2b8-444d-8a1c-f7b7ff9615be/1/bzumz3nFWiV59WPufUVG3b15n5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f9:d6:bb:26:2c:63:c8:c6:f7:53:f6:42:13:53:52:4d:70:
d9:1f:b8:2d:3b:98:e1:34:3a:5c:f4:83:65:1c:08:e5:88:ad:
68:99:9f:24:c8:0c:7e:ac:0c:53:53:bf:aa:07:63:05:29:07:
f8:cf:b8:27:a4:1c:28:ad:35:33:f1:9e:dd:e1:2d:cf:82:59:
4b:7b:ae:2d:18:f6:49:35:31:04:64:16:74:c5:84:10:a5:be:
83:e9:09:43:62:aa:78:71:05:d3:32:04:0a:fe:ef:84:ac:dd:
69:bd:0e:15:ac:5b:7d:3e:4f:78:5f:f8:8a:b7:11:16:c6:32:
11:d0:d1:2a:76:de:97:14:ad:f2:a5:90:82:a1:2c:b1:37:70:
e8:65:e1:0a:90:d0:9c:89:9d:d0:fe:0c:43:66:db:50:04:59:
2e:b5:7a:06:06:b9:b7:08:5a:22:dd:50:00:a2:33:a5:0e:67:
eb:fe:81:80:51:99:36:34:37:4e:25:1a:5e:0e:a0:92:0c:b6:
fb:13:b5:43:71:22:bc:e8:8b:81:a4:b0:3b:94:9d:9f:33:6b:
c4:36:38:bc:1b:3a:43:01:ca:dc:00:7f:29:4e:ce:0a:c8:09:
3a:55:10:10:d3:f0:60:c1:3b:c1:ac:59:17:32:28:51:ea:d5:
9e:f7:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:13:03 2026 by rpki-client