
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
File: BzX8jPArik43L6W8ZAlE_rwk8f4.mft (raw, json)
Hash identifier: rvwR15aaEXtSW+TGpi/43UK8vlD/34fTA8D+2uardq4=
Subject key identifier: 5E:E7:91:FF:1D:E2:8B:C5:58:D9:32:02:86:93:F0:B0:3A:8A:4F:DF
Authority key identifier: 07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
Certificate issuer: /CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Certificate serial: 01A145A918666359CDBEF48C2A74BA2B2706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
Manifest number: 08A7
Signing time: Fri 16 Oct 2026 17:01:12 +0000
Manifest this update: Fri 16 Oct 2026 17:01:12 +0000
Manifest next update: Sat 17 Oct 2026 17:01:12 +0000
Files and hashes: 1: BzX8jPArik43L6W8ZAlE_rwk8f4.crl (hash: bF9QBqJxAJZpVHJhiIO+7kJTIVrj+kOKqwY6r/kZGmA=)
2: WrCSnmO3TptCu12D-7QukIGoskU.roa (hash: SmXLGdZ06cpzybo2WIdSNuF5mOp0yHjCCfLvK0oa2kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:a9:18:66:63:59:cd:be:f4:8c:2a:74:ba:2b:27:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735fc8cf02b8a4e372fa5bc640944febc24f1fe
Validity
Not Before: Oct 16 17:01:12 2026 GMT
Not After : Oct 17 17:01:12 2026 GMT
Subject: CN=5ee791ff1de28bc558d932028693f0b03a8a4fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:21:05:73:04:d0:af:66:63:46:1f:3b:df:
90:08:66:a7:fc:84:6b:5d:0d:a7:d9:5f:f3:e9:bb:
10:8b:8e:f6:69:dd:28:c6:82:8b:06:01:9b:7c:f4:
49:ba:f4:83:9a:1e:4a:8b:c2:64:9f:a5:3e:d5:52:
8e:58:ed:27:fc:8a:59:40:11:95:ec:42:00:c3:71:
a1:73:c4:e7:0f:4c:3a:28:a4:d8:cf:9c:7a:58:39:
d6:b0:e9:e2:0e:14:f5:54:dc:84:8e:5a:ef:61:b7:
47:5d:f0:43:6e:52:3b:78:63:2c:6c:4b:a1:61:75:
5e:95:1b:0a:03:c8:70:92:79:8f:dc:a0:19:9f:af:
c4:24:c4:a2:83:95:71:aa:90:6f:13:65:6b:00:67:
b5:4a:17:ca:30:dd:fc:6d:0d:5f:45:b3:78:a5:56:
b5:ae:0f:58:0c:ec:c8:6a:ed:14:55:5c:70:0e:8c:
3e:76:af:c2:52:2c:0f:a2:87:e4:f7:3b:48:b0:85:
f3:27:3f:a9:0d:14:78:af:ed:4d:1b:1d:d5:8c:6c:
32:df:60:e7:32:25:e0:52:13:ef:14:7d:9c:19:1a:
a2:7c:8a:c6:a9:a9:07:c3:5b:92:43:54:bf:15:09:
b4:7a:a8:49:99:98:53:03:8e:f9:72:b3:87:3b:07:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E7:91:FF:1D:E2:8B:C5:58:D9:32:02:86:93:F0:B0:3A:8A:4F:DF
X509v3 Authority Key Identifier:
keyid:07:35:FC:8C:F0:2B:8A:4E:37:2F:A5:BC:64:09:44:FE:BC:24:F1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzX8jPArik43L6W8ZAlE_rwk8f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/cf3b98-4941-4bbe-82b3-731e9339d6ac/1/BzX8jPArik43L6W8ZAlE_rwk8f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6a:be:00:cb:9a:c3:02:3b:a3:4d:68:b1:c8:90:2c:a8:1a:
eb:c2:78:b3:96:c7:f0:3e:30:09:5e:4d:aa:83:ca:4a:7d:7d:
bf:53:49:40:bc:a7:2f:a3:68:b6:8b:f9:b7:03:db:52:47:92:
19:86:f4:fb:ce:30:46:53:2b:b7:f9:78:2c:1f:e6:cf:4e:41:
25:2a:28:3c:da:27:a2:e7:ca:80:da:b3:26:83:16:dd:f3:56:
8c:b7:6a:70:4b:f0:ee:e9:6f:b6:cf:c5:f4:bc:21:c6:4e:fb:
b7:14:fe:64:03:84:c2:c7:63:c9:5b:e0:ff:e0:0a:ed:72:85:
38:52:88:a8:bc:bd:f7:72:5d:7c:f4:c8:ee:4e:cb:49:2d:b3:
2f:b7:c1:b4:67:6d:d5:8f:de:47:03:e6:a3:d0:ad:e0:d1:7a:
68:c3:25:c4:b4:5d:c7:7e:d9:92:61:72:ac:17:1c:e8:97:79:
6e:a6:ab:b4:9e:7d:e6:8d:e0:be:43:64:2d:bb:0d:36:72:75:
6f:c1:78:d2:fe:27:7f:ee:9d:33:48:ad:d5:1e:0c:78:59:81:
59:f2:bd:b1:8b:f9:da:41:6c:cc:d4:c2:eb:f9:da:52:08:e5:
21:c9:03:3a:ec:8b:a0:96:3c:8d:21:bd:17:ff:1b:ca:bc:22:
d5:62:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:57:29 2026 by rpki-client