Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: lIGfK7w067+bMJXqBa+LFCwBbMUcmN1y0ZJrqJnubsg=
Subject key identifier: 67:D8:06:12:5F:6A:5F:F3:9C:4B:28:2C:80:67:35:EC:88:0C:D4:49
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 019F197A5ACEC4E4DF14AA9D2E0DD02AEB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 0787
Signing time: Tue 30 Jun 2026 17:01:16 +0000
Manifest this update: Tue 30 Jun 2026 17:01:16 +0000
Manifest next update: Wed 01 Jul 2026 17:01:16 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: IxZoMxJqzzl3NMelEi1gTce+V8rH7IjN2713nW8I3xQ=)
2: WrCSnmO3TptCu12D-7QukIGoskU.roa (hash: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:5a:ce:c4:e4:df:14:aa:9d:2e:0d:d0:2a:eb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Jun 30 17:01:16 2026 GMT
Not After : Jul 1 17:01:16 2026 GMT
Subject: CN=67d806125f6a5ff39c4b282c806735ec880cd449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:97:3d:02:7e:44:b4:5a:b5:4b:99:db:02:
15:1f:19:8f:d9:6b:f5:21:82:1d:17:2c:e8:b8:4a:
7f:39:3a:01:1d:02:5b:f2:bf:83:02:15:2c:0f:f2:
82:6d:4d:16:a2:aa:88:c1:de:2f:eb:05:bd:5f:fd:
b0:bd:c8:5c:00:9a:04:30:00:fa:f6:e8:64:35:03:
4a:b7:9a:3c:0b:8f:f5:1e:e1:93:05:a8:d1:60:91:
f5:12:61:35:34:a7:cd:87:78:e3:a2:9a:a2:7f:52:
20:56:04:5d:44:bb:77:14:7b:c6:d6:86:fd:9c:d7:
bc:01:d6:e6:06:1e:f2:b2:d2:1b:4f:43:e1:04:14:
25:e5:3d:8a:9a:d2:33:1c:38:fa:78:18:5d:80:1c:
c7:e8:bd:fa:f6:cb:04:9f:fd:f7:d7:13:5a:20:c9:
f8:3c:f5:db:54:22:86:6e:df:fb:16:28:00:a6:92:
f1:2c:e4:3c:56:98:01:69:b0:bf:93:e5:0a:96:6a:
52:cc:4e:7c:e5:ad:99:2b:2f:1a:9d:49:77:bb:ad:
60:db:c1:a3:96:75:b8:31:51:33:93:43:cc:20:3d:
35:4d:17:0f:b3:54:d7:d9:20:f3:f3:97:67:56:62:
be:96:12:82:2b:d6:93:02:cf:cf:7d:84:48:c4:04:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D8:06:12:5F:6A:5F:F3:9C:4B:28:2C:80:67:35:EC:88:0C:D4:49
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:43:c2:35:10:94:13:0b:51:82:98:b0:a6:af:42:9a:95:a0:
d7:a8:c8:33:26:7a:98:7c:16:ec:71:de:e3:9d:4d:bd:58:e7:
bb:4a:30:c4:1a:df:4a:6f:61:c5:bd:ee:ff:10:1d:a4:ae:72:
0d:53:7a:ac:e0:61:79:7c:fb:05:8d:9f:3e:ba:1b:ba:bf:63:
c5:d2:c7:e3:02:40:85:02:e3:9c:3b:10:11:db:b7:e8:13:29:
ea:7b:15:29:d7:bd:85:22:12:e3:2c:3f:45:7b:36:b0:95:3e:
fd:55:1f:b9:9d:6f:76:f2:cd:98:ce:bc:f6:4b:7f:88:55:3a:
d7:df:df:f9:2d:1a:9b:d4:57:c1:5f:e2:7f:bc:63:65:30:cb:
8e:78:8f:bc:6f:8d:5d:32:f2:de:a0:43:2d:cd:8a:e7:c1:e1:
f0:6b:3c:ff:07:70:9c:78:70:75:7e:8a:b3:e4:09:06:f7:47:
28:1a:82:a3:54:12:41:2d:20:7c:7f:5b:b3:a7:6e:a2:71:7a:
f8:b6:4f:03:2f:fc:ae:8e:28:80:03:32:67:d1:51:9c:76:f2:
ad:33:ee:37:2b:c5:30:c5:a6:f0:a3:d8:dd:14:9e:45:e4:f6:
ee:c6:ea:6e:36:8f:35:c5:92:b3:b8:70:86:c1:76:9f:aa:da:
b4:03:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:12 2026 by rpki-client