
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: UoN/8UdWx5UcRipEBsqy37I7vTurwwf+hr7wZCveVjI=
Subject key identifier: 60:40:6C:E2:6D:60:AA:08:45:0C:9C:50:E0:3B:20:55:E1:E3:52:7B
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 019E2FCDFF777C6631E911DB738014D8D4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 070E
Signing time: Sat 16 May 2026 08:01:29 +0000
Manifest this update: Sat 16 May 2026 08:01:29 +0000
Manifest next update: Sun 17 May 2026 08:01:29 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: KTUojke55X0Tk6Ie6v8CnjYge5v2KPtsj0BucKbf3jU=)
2: WrCSnmO3TptCu12D-7QukIGoskU.roa (hash: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:ff:77:7c:66:31:e9:11:db:73:80:14:d8:d4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: May 16 08:01:29 2026 GMT
Not After : May 17 08:01:29 2026 GMT
Subject: CN=60406ce26d60aa08450c9c50e03b2055e1e3527b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:97:76:c9:3c:a8:9f:cf:06:9e:f2:c8:e0:
78:58:6d:d0:9a:d1:b5:ca:52:e5:cb:69:68:7f:2b:
03:1b:84:a9:63:41:e9:0d:87:80:42:c7:51:d8:74:
b8:73:d7:ac:9f:fe:57:c2:1c:4e:02:c7:7f:13:5d:
21:e5:7d:d5:a9:9f:69:2e:e0:19:67:1e:bc:e9:f1:
b8:a5:d0:f1:eb:1c:b9:5b:fa:dc:db:f3:a5:c3:ca:
8e:31:be:a4:27:1b:b2:08:67:02:90:19:cf:47:96:
a9:ca:de:d3:66:37:b8:98:23:dd:b7:b8:08:1f:21:
55:00:5b:9b:b2:69:45:ce:09:33:57:c3:98:23:84:
bf:d6:5b:09:c2:4e:2b:b5:e1:48:c5:99:10:47:65:
4a:d3:a6:52:bb:10:e2:d7:ab:ce:cd:05:ad:a0:eb:
a2:49:d0:4a:ac:ae:af:6b:e5:d9:dc:63:7d:e4:f2:
7a:27:5f:4d:ae:30:71:84:76:5b:65:b5:a5:b2:32:
06:00:de:f5:2a:59:2b:cd:83:b0:47:8c:61:89:88:
23:4b:ff:81:db:94:8c:07:b2:98:e2:9b:2e:db:f4:
35:59:00:2f:7c:14:8c:a0:65:41:7d:15:4e:28:b4:
83:33:e1:08:95:6f:f4:e5:59:ea:f3:10:dd:9b:11:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:6C:E2:6D:60:AA:08:45:0C:9C:50:E0:3B:20:55:E1:E3:52:7B
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9c:f1:ad:63:fc:a0:d2:59:fd:1b:17:90:3c:46:68:21:8c:
e2:79:31:7a:d4:18:07:d1:1e:51:ca:d8:53:bc:01:f4:a2:7d:
d5:38:16:24:7e:45:0e:09:71:dd:77:35:bc:cc:a6:32:60:3b:
73:8d:01:bd:40:f5:2c:43:73:bb:b4:0c:e9:c5:03:f2:69:bd:
84:48:95:07:74:60:91:57:64:f4:5c:f9:2d:ad:1b:aa:23:5a:
68:b2:f9:58:bd:a1:30:3c:2c:40:49:5c:bd:68:80:f2:b7:d5:
25:83:46:54:4c:48:41:38:f6:32:1b:39:85:b2:1c:24:ae:75:
1e:88:9f:51:30:fc:07:c0:ce:eb:31:9a:cd:59:f5:01:49:60:
f7:b4:48:81:c5:c8:ae:a4:a7:77:0b:6f:eb:82:27:9c:86:ab:
11:b6:b6:85:fb:0c:9a:6d:0e:32:54:62:c9:07:9a:48:47:d6:
cf:9a:67:54:92:ac:89:57:93:60:3d:3c:fa:03:f4:4d:c9:96:
a5:99:a3:e5:5f:a1:85:06:49:98:2d:c8:35:f4:9c:a9:e5:d7:
19:4e:76:ed:ba:6e:13:10:53:2c:78:17:36:19:af:c2:89:e3:
c6:b8:55:77:20:7e:cd:09:77:0f:d1:dc:87:53:de:cd:6a:eb:
97:d6:22:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:28 2026 by rpki-client