Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: 3NEquxIvn4hh0oEx2xWhzbqmV25gV4cV6vt3Rmn1TlU=
Subject key identifier: 9D:67:1A:B7:42:65:08:5D:99:50:58:78:3A:45:55:10:37:12:BD:53
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 019D38D39F3C6E2523C9979E0067DEF249CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: qSb0Ed6md1ZypV/RHbexJvXnyrlPJoM66zOtdCR3xds=)
2: rdPF1oSF697o-6J7h737TTdZ1tI.roa (hash: sMXUA/wK5htTFnsVDTj5g0Rhpnmfg7FybwvswSl03mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9f:3c:6e:25:23:c9:97:9e:00:67:de:f2:49:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=9d671ab74265085d995058783a4555103712bd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:78:a7:f9:c3:91:8c:47:c5:e4:bf:a0:dd:
b2:dd:7a:91:75:9b:d5:6f:58:23:5f:c5:7e:25:93:
9d:9f:87:78:bb:fe:92:c5:68:8f:4b:a0:f0:77:ca:
cd:9c:da:e6:34:57:f1:c5:1e:00:13:34:84:d9:4c:
9f:22:b6:b7:5c:b7:23:cd:c3:a8:59:26:12:38:43:
b8:8f:24:15:f2:3f:98:a2:99:ea:b8:ea:ad:07:b4:
a5:3b:14:35:53:98:51:37:48:a4:dc:a8:84:37:3b:
8e:6e:a0:26:a4:e8:13:fd:3a:d8:c7:e5:81:10:c7:
c8:41:50:8c:55:f4:17:e0:3e:d4:ad:31:28:47:db:
30:6c:02:27:d6:73:b9:70:dd:91:34:a8:fb:8c:f0:
e8:92:36:ed:f4:aa:26:af:c8:59:59:df:4e:4e:a0:
a5:75:5b:e6:6c:82:a8:72:09:76:0b:8c:8b:df:f8:
d4:66:8e:4f:7e:de:e4:07:aa:7d:3e:86:58:56:5c:
60:e0:2a:bb:06:af:02:29:19:31:59:83:bd:42:c2:
a6:ee:a2:cd:fa:71:2d:2c:81:85:8d:f9:a7:fc:7b:
67:8f:c0:04:b5:0b:e5:65:e1:fe:be:08:c7:07:3a:
34:b5:76:c3:46:af:86:9c:16:92:d6:84:43:61:3c:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:67:1A:B7:42:65:08:5D:99:50:58:78:3A:45:55:10:37:12:BD:53
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3d:5e:7e:82:b3:45:fd:67:c8:02:f3:9e:7a:6c:bc:16:7e:
e3:cc:3c:1b:66:5a:bb:a2:db:a2:ed:44:e8:b2:09:75:86:75:
ca:42:02:8a:6a:07:35:c0:18:35:0b:18:05:fe:bc:94:24:4c:
d8:67:15:f1:32:db:72:85:ab:ac:ea:77:2e:c0:58:94:aa:b4:
e3:9d:f5:c7:58:28:f7:c0:01:d0:4e:e9:fe:25:d9:14:c0:14:
91:14:62:24:3d:c6:88:55:51:97:37:4e:31:5d:cc:33:30:b3:
2f:51:48:5d:b9:32:4b:ed:6b:c0:70:cc:17:3b:70:b2:41:b3:
50:0e:02:bd:98:53:a8:02:e4:71:68:6f:be:99:4a:ac:ea:1e:
c7:d3:5d:0a:b4:92:7d:29:7f:33:13:f6:f9:d1:40:75:ac:ee:
c0:d8:2a:2b:bd:56:84:bb:aa:8c:4e:1b:23:06:d5:03:ef:5b:
90:41:40:a3:52:c1:65:ac:21:bc:57:40:62:2f:03:25:3d:7a:
6d:a8:d4:7e:80:7b:15:a5:e7:29:c1:92:10:35:e5:41:b5:01:
38:15:30:ad:8f:26:89:b2:fe:f2:05:25:4f:70:e6:c2:d5:e2:
c7:af:b9:ea:00:62:d6:78:7f:69:04:8a:b4:b5:29:f8:7e:9b:
f6:e3:8d:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040588biUjyZeeAGfe8knOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmM2M1NDA4YjJmNjcyMzNmNjBkNjNmNzQ5YWM0ODNlYjY2
YWU3YzgwHhcNMjYwMzI5MDkwMTI1WhcNMjYwMzMwMDkwMTI1WjAzMTEwLwYDVQQD
Eyg5ZDY3MWFiNzQyNjUwODVkOTk1MDU4NzgzYTQ1NTUxMDM3MTJiZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/B4p/nDkYxHxeS/oN2y3XqRdZvV
b1gjX8V+JZOdn4d4u/6SxWiPS6Dwd8rNnNrmNFfxxR4AEzSE2UyfIra3XLcjzcOo
WSYSOEO4jyQV8j+YopnquOqtB7SlOxQ1U5hRN0ik3KiENzuObqAmpOgT/TrYx+WB
EMfIQVCMVfQX4D7UrTEoR9swbAIn1nO5cN2RNKj7jPDokjbt9Komr8hZWd9OTqCl
dVvmbIKocgl2C4yL3/jUZo5Pft7kB6p9PoZYVlxg4Cq7Bq8CKRkxWYO9QsKm7qLN
+nEtLIGFjfmn/Htnj8AEtQvlZeH+vgjHBzo0tXbDRq+GnBaS1oRDYTwxYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1nGrdCZQhdmVBYeDpFVRA3Er1TMB8GA1UdIwQY
MBaAFG88VAiy9nIz9g1j90msSD62aufIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUt
MThmMzRhN2RiZGQ5LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUtMThmMzRhN2RiZGQ5
LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOz1efoKz
Rf1nyALznnpsvBZ+48w8G2Zau6Lbou1E6LIJdYZ1ykICimoHNcAYNQsYBf68lCRM
2GcV8TLbcoWrrOp3LsBYlKq04531x1go98AB0E7p/iXZFMAUkRRiJD3GiFVRlzdO
MV3MMzCzL1FIXbkyS+1rwHDMFztwskGzUA4CvZhTqALkcWhvvplKrOoex9NdCrSS
fSl/MxP2+dFAdazuwNgqK71WhLuqjE4bIwbVA+9bkEFAo1LBZawhvFdAYi8DJT16
bajUfoB7FaXnKcGSEDXlQbUBOBUwrY8mibL+8gUlT3DmwtXix6+56gBi1nh/aQSK
tLUp+H6b9uONtg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:49 2026 by rpki-client