Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: HBWOAIspJmSvTj16mWBWj27nSrYn4UCYM6WjBDEKgxs=
Subject key identifier: 42:83:54:09:D6:81:8A:2A:B5:31:72:4B:A5:E3:77:41:57:20:86:BB
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 019D3A8AA5F66F786D88F162978F303B91F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 068F
Signing time: Sun 29 Mar 2026 17:00:58 +0000
Manifest this update: Sun 29 Mar 2026 17:00:58 +0000
Manifest next update: Mon 30 Mar 2026 17:00:58 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: XJ0KLaQXjnWEf5blWS2DzLi+Gzef62FEcrylVgzGoH0=)
2: WrCSnmO3TptCu12D-7QukIGoskU.roa (hash: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:a5:f6:6f:78:6d:88:f1:62:97:8f:30:3b:91:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Mar 29 17:00:58 2026 GMT
Not After : Mar 30 17:00:58 2026 GMT
Subject: CN=42835409d6818a2ab531724ba5e37741572086bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:6a:8e:04:75:3e:47:fb:22:a0:96:06:16:
98:81:f0:95:da:0d:e4:51:dd:9d:b3:72:9f:c2:95:
34:14:24:7b:87:7b:bf:ff:6e:7d:4b:c9:ae:94:80:
93:31:47:1b:12:7e:3b:c4:fc:39:59:1d:89:71:c4:
cd:f0:da:89:13:40:81:8b:f7:91:51:65:e3:cb:63:
5d:a3:c1:f2:5f:90:4b:61:48:6e:c0:f2:fd:d9:c1:
c7:02:8b:e5:05:90:39:8b:4e:e5:5e:79:f1:cf:73:
b0:df:fc:45:81:08:ae:ae:dc:87:85:30:fe:21:ce:
09:7f:61:45:02:27:2a:d9:ae:5c:ba:33:ca:b4:a6:
90:cc:b1:31:3a:5b:49:52:00:e0:0f:61:ba:15:86:
a5:4e:b0:58:19:da:f9:d8:f0:91:d1:b9:a2:1f:f9:
73:33:8b:6e:c7:ed:a4:38:79:62:59:36:84:f7:d8:
d0:54:1f:f4:5b:34:7d:f8:42:52:14:ba:b9:f9:61:
88:98:a4:77:38:d0:d2:2b:ee:12:93:40:fc:c5:bf:
ee:0f:72:a1:48:88:de:65:89:4e:28:c2:fc:2b:90:
24:c6:aa:23:86:4a:85:d2:ee:76:bd:7a:39:06:da:
99:eb:91:71:f9:cb:7a:d1:0c:ad:6e:2d:fd:39:e3:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:54:09:D6:81:8A:2A:B5:31:72:4B:A5:E3:77:41:57:20:86:BB
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9f:62:0c:1b:8b:80:dd:22:47:89:f4:de:da:4c:74:58:37:
ff:d2:dc:d0:4f:95:0e:aa:15:64:27:e8:ff:c9:8e:ec:75:0e:
c8:90:da:94:64:93:5f:04:55:8e:42:1c:8a:87:e6:de:78:64:
7e:2a:fc:4f:35:8b:53:a5:9a:e1:d2:a4:d9:0d:3b:4b:a0:4b:
a3:ec:eb:9a:26:3c:e2:85:1b:b1:26:6a:30:5b:10:bb:bf:f4:
f3:44:71:b0:9a:27:40:6c:c7:3a:b6:ff:19:9e:73:41:08:c9:
f8:e3:f6:ba:9a:1c:38:b7:5d:cc:6d:62:0c:ec:5d:36:ee:17:
07:75:85:21:cb:c0:a0:6b:c5:c1:73:dd:e4:c1:b1:34:49:16:
84:20:b5:8a:b2:76:92:a4:0c:1e:9a:72:ad:60:c1:30:13:93:
bb:ba:bf:f3:39:37:9e:f7:58:3c:da:78:20:6b:7d:79:9b:b9:
82:49:d5:80:6a:0a:e2:0d:a8:69:ad:fc:cf:86:d7:8f:7d:66:
9e:69:72:0c:74:47:d9:ae:9a:58:e1:04:fb:64:2e:5f:c2:a9:
5c:a3:11:6b:2c:86:91:db:93:89:dc:49:82:76:a8:40:e7:64:
3e:98:d0:3d:45:8e:33:6f:30:60:85:db:48:0e:7c:93:05:92:
34:e2:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:27 2026 by rpki-client