Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: W0mwZNLa5UHx011LsD27XTBJGwKW2AJgEhN1Na4T0DI=
Subject key identifier: 24:99:0F:0A:A7:36:71:77:E0:C0:53:94:50:2C:4A:CA:DD:9D:D4:FD
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 019D37F72440EF666DB9D05CD3C76E782A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 18A0
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: 3rkjwwginUfLartcn5VoY9PgC_E.roa (hash: Nn/SgK0GWp70Grm4pzV4xOWCunqMV5me8PRwpUORXuM=)
2: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: 1UqgoozsaTUpnOAw9dTNS5nQOmkqZ3jf/xVnKIgkYTI=)
3: moQuVmxjsR-mYaj7vGqjSq6tBD4.roa (hash: r12qZYf01z6oZFiID2ggMHEg9yzTBTtove+KMzZqvDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:24:40:ef:66:6d:b9:d0:5c:d3:c7:6e:78:2a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=24990f0aa7367177e0c05394502c4acadd9dd4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:e4:b4:7d:4d:74:69:9b:60:48:9d:65:6d:
ba:01:c6:63:4f:19:ea:88:f3:2d:ba:57:38:81:bd:
3c:fe:8a:c0:22:11:c4:1e:c2:1a:8f:52:d3:47:76:
de:bd:fc:29:5e:f9:33:c9:3c:cf:c9:d5:79:f2:6a:
43:99:a4:62:db:26:e8:b1:09:b6:3c:f9:e7:13:d8:
27:49:71:6b:5c:da:0a:fa:33:eb:0f:80:f4:23:64:
dc:d4:99:ce:00:c9:20:7b:12:c6:32:f5:cb:7e:bc:
7d:24:98:11:73:81:1b:85:e3:13:c9:cf:8e:f6:c5:
63:0a:0c:28:ca:16:1e:57:75:00:33:dd:52:7e:14:
9a:bc:60:fd:ad:7f:19:df:6f:f0:d0:dc:90:22:e8:
90:ae:83:f3:09:b3:8a:3e:ce:42:4d:6a:41:5b:ed:
3e:8d:84:5b:99:9c:25:01:d6:98:99:48:1d:70:47:
3a:50:e0:a4:81:53:0b:7d:1a:87:99:fe:20:2c:f5:
3e:69:97:9e:2c:b8:2d:d4:b4:67:74:9e:68:d7:18:
17:ba:9a:d5:3e:6c:68:02:ea:4b:c4:74:e6:7a:86:
f2:80:1e:42:1a:fd:24:37:e9:8e:a3:05:5a:94:18:
c8:83:0d:7e:2a:c5:31:7c:77:bf:19:3f:c0:35:b8:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:0F:0A:A7:36:71:77:E0:C0:53:94:50:2C:4A:CA:DD:9D:D4:FD
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:17:24:f8:22:33:fd:3c:4a:07:e6:6c:98:04:d0:ee:4b:63:
63:aa:c8:6f:02:26:ad:51:f4:2c:1f:ad:9b:0d:d6:36:cc:9e:
e0:f0:dc:c9:2e:3c:7b:b0:3d:50:70:87:6c:d1:83:6c:77:4f:
a4:9a:93:a1:06:98:72:7e:bb:da:db:4c:95:6d:43:92:55:52:
1a:4e:65:6e:c6:c2:2e:95:fd:6c:01:97:ab:72:e8:6a:da:94:
cc:77:f7:16:14:e3:2c:44:c5:36:7b:4e:ac:87:ea:c5:a5:ec:
8a:ec:f9:21:2b:9c:27:56:b5:e7:0f:53:20:6b:17:eb:5a:4a:
a6:9b:3a:5f:dc:d5:4b:44:e3:3c:a5:c5:c4:a9:22:6b:55:f7:
d2:1b:e2:3c:a2:d6:25:82:17:ae:7f:52:79:8b:6d:9a:9a:bd:
a0:64:fa:e6:e6:9a:38:6a:75:61:6b:2d:b1:d2:38:89:5c:4b:
dd:26:e7:1b:2b:f6:09:3a:f4:4c:2b:3f:5c:75:69:5d:10:cc:
03:f0:2c:ee:90:cf:41:e7:7c:46:c0:2b:e7:f6:36:ec:b0:d7:
f5:74:46:b2:e2:ab:8e:4c:dc:0d:db:9d:3e:20:3e:f5:60:73:
3e:c0:9d:bf:6d:d2:4b:7d:93:fa:d7:4c:06:ab:23:af:c5:6f:
d9:2e:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:47 2026 by rpki-client