Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
File: bZYBl_5YkhTCJZ9q6olsThAH6YY.mft (raw, json)
Hash identifier: 2d3VZQ/DHCa+eNxK+zd0hp+y6Vc0wYjGqfx9KspRJm0=
Subject key identifier: D3:C5:8B:CB:92:D5:B4:B0:D6:BD:06:8E:0C:FD:30:4B:DE:7B:CE:EC
Authority key identifier: 6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
Certificate issuer: /CN=6d960197fe589214c2259f6aea896c4e1007e986
Certificate serial: 019D386610ED6D0EA9D2C04BC5FA7C71A862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
Manifest number: 0B2C
Signing time: Sun 29 Mar 2026 07:01:46 +0000
Manifest this update: Sun 29 Mar 2026 07:01:46 +0000
Manifest next update: Mon 30 Mar 2026 07:01:46 +0000
Files and hashes: 1: bZYBl_5YkhTCJZ9q6olsThAH6YY.crl (hash: WM4wimqKTb6mFmo8r5/xBUwMqOR+WHiLnoNhqrXngqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:10:ed:6d:0e:a9:d2:c0:4b:c5:fa:7c:71:a8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d960197fe589214c2259f6aea896c4e1007e986
Validity
Not Before: Mar 29 07:01:46 2026 GMT
Not After : Mar 30 07:01:46 2026 GMT
Subject: CN=d3c58bcb92d5b4b0d6bd068e0cfd304bde7bceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:64:2f:e8:0e:a9:52:02:8c:76:aa:b7:ab:
42:64:3a:e8:e4:c0:ea:f9:94:84:65:a6:f5:b4:0f:
25:b0:23:15:52:7d:28:e2:2d:cd:f8:e3:d1:d8:52:
93:3b:b0:8c:8b:02:64:f5:a9:86:41:00:85:c6:63:
8b:20:bc:d0:06:21:98:9a:96:63:c6:99:1e:55:90:
6e:c4:ad:1c:80:c6:9c:47:e2:86:13:bf:0b:5c:17:
09:76:24:57:92:31:6e:22:6b:b3:44:27:30:41:aa:
41:90:f2:38:4c:40:e7:a2:30:20:16:54:01:30:47:
5e:52:d9:9c:8e:97:d7:c8:58:f7:ef:48:17:57:86:
0f:64:2a:2e:d9:8c:0b:85:97:01:8a:7e:70:2a:90:
86:de:67:15:2d:8a:4d:d8:63:0d:af:a1:85:89:67:
59:3d:99:4e:ed:d6:98:d6:89:c4:9c:76:f2:6b:d2:
e3:f0:10:8f:7d:75:7e:33:40:4c:13:ad:c1:65:7b:
41:1d:96:18:47:64:fa:f6:75:aa:4e:28:da:7c:32:
e5:4c:4d:3b:3a:db:7c:e5:1e:84:9f:42:90:84:6d:
96:a8:df:24:65:c0:50:91:9b:2f:7f:59:64:bb:b4:
93:6a:d1:da:1c:bc:96:31:cf:45:64:3b:b5:78:5f:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:8B:CB:92:D5:B4:B0:D6:BD:06:8E:0C:FD:30:4B:DE:7B:CE:EC
X509v3 Authority Key Identifier:
keyid:6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0a:4c:af:21:bf:bb:59:00:91:2e:e8:a3:cd:79:4e:ca:4a:
e1:e3:44:b5:fb:e4:96:c9:8a:0d:36:3e:62:8f:29:d8:19:4d:
56:dc:a0:d1:94:6e:c9:25:21:54:4c:13:43:fd:1d:50:05:d4:
09:fd:a0:eb:ae:a8:49:e4:6b:18:46:29:2c:18:98:c9:bf:a9:
f8:45:13:de:77:8d:af:4e:d1:de:a7:64:68:ea:99:9f:99:f3:
90:da:8c:35:12:27:5f:78:05:01:77:5f:11:47:6c:0a:2d:44:
de:d3:37:20:6d:be:21:be:10:eb:be:84:9c:c4:25:1b:3c:89:
fa:f6:d6:6b:eb:7c:39:ef:ee:52:e7:7d:bd:d8:b0:93:86:95:
d0:5d:e4:7e:cf:d8:20:c2:e8:11:da:da:e2:cf:70:06:15:13:
a4:56:cf:0a:e3:00:4a:ab:49:ea:70:6d:ac:5a:50:3d:e7:77:
c1:d7:79:76:51:77:68:af:f3:4c:dc:cc:cd:f2:c1:c2:fd:fe:
07:96:77:ac:75:2d:e9:db:7f:0a:6e:b6:59:40:99:d8:12:34:
d1:6f:af:5f:8f:d4:a9:14:f8:78:c3:e6:86:a8:82:ad:da:bf:
b6:2d:af:47:10:62:41:15:dd:b2:7f:06:92:e9:44:4a:7e:14:
f2:14:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:37 2026 by rpki-client