
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier: rM10BabuEcaQ91wdO8TLFZLmRRXf/L+HJCXvppHsgkQ=
Subject key identifier: 52:6B:94:5B:49:29:33:DE:FF:6C:4B:6B:7C:3B:2C:99:F0:AC:B7:8F
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial: 01A029FE29E52EFBAE15402610B593A3121E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number: 02E4
Signing time: Sat 22 Aug 2026 15:01:57 +0000
Manifest this update: Sat 22 Aug 2026 15:01:57 +0000
Manifest next update: Sun 23 Aug 2026 15:01:57 +0000
Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: QjlN+5vEUevAgQRTnqUdQUUDZ0tz7/MI+Q80XTidAd4=)
2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:fe:29:e5:2e:fb:ae:15:40:26:10:b5:93:a3:12:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Validity
Not Before: Aug 22 15:01:57 2026 GMT
Not After : Aug 23 15:01:57 2026 GMT
Subject: CN=526b945b492933deff6c4b6b7c3b2c99f0acb78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:ed:53:ad:a2:4b:b0:8d:77:6f:5c:d2:1a:
c7:ac:e7:14:84:6b:62:21:81:4a:e5:ee:58:fc:9a:
9b:c5:6d:c7:d6:45:df:87:d5:84:b4:cd:16:82:94:
0d:2d:b1:db:fb:55:70:8d:77:48:32:14:73:b7:c7:
bd:4f:0f:07:2a:7b:62:3d:30:78:48:2b:53:91:e8:
60:ee:eb:71:2c:7f:dc:35:42:69:3e:85:f8:f0:d2:
fd:c2:6c:4c:46:71:c4:c5:f4:60:eb:41:0a:5a:1c:
73:8a:e0:98:b2:a7:f1:ef:c3:db:8e:85:80:90:bc:
62:02:70:bf:a3:4e:38:da:23:c2:2c:82:51:31:84:
43:1c:4d:39:c4:14:4a:5d:41:2b:67:d7:99:8e:9a:
9e:3b:bf:86:e2:f6:c2:5d:76:43:77:ae:59:43:e5:
30:53:6a:f8:ab:f9:70:8b:43:bb:07:79:17:b3:3c:
a3:d5:3d:87:e7:25:23:49:20:92:3f:6d:b7:f1:c2:
5d:55:42:34:51:bc:c7:8b:27:18:16:b3:a0:a6:ec:
79:fb:d7:75:60:ae:09:0f:12:8a:44:8f:6a:9f:dd:
b5:cc:b4:91:f2:19:39:fc:87:9b:b0:ee:d2:70:12:
33:d4:83:bc:9f:33:c0:ca:26:29:ad:49:14:50:57:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6B:94:5B:49:29:33:DE:FF:6C:4B:6B:7C:3B:2C:99:F0:AC:B7:8F
X509v3 Authority Key Identifier:
keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:10:47:b2:27:47:63:94:c9:9f:98:08:1f:3b:39:e8:16:85:
e6:d7:05:dc:d1:80:8c:43:a8:e8:e9:ce:85:f0:10:66:c7:20:
ea:7d:10:73:bf:df:07:66:56:f1:5e:0d:ba:e3:eb:67:46:33:
b3:d4:fc:5d:1c:d2:53:1b:83:c5:35:d2:fd:78:d3:7b:f4:85:
4a:de:4f:86:1e:f6:2f:2b:e2:e7:c0:44:1c:8c:36:a2:37:b3:
cb:06:e6:43:1f:a1:c0:91:a4:a5:9f:ee:79:51:5b:95:2d:8d:
10:cc:7d:ec:88:94:be:77:0f:67:3e:1f:f8:d5:ba:55:d2:65:
f5:fb:c7:bb:ff:e4:e9:e3:56:6d:3e:07:4a:46:35:af:89:89:
97:5c:2c:fe:fe:8f:8c:08:03:ef:b6:0e:3c:b0:f1:8d:88:82:
ab:11:de:d4:16:d0:4e:74:be:d3:07:cf:59:18:bd:f1:c3:19:
38:d6:f4:11:42:2e:61:08:98:c0:a9:81:b3:5b:14:3f:60:fb:
37:ee:70:7c:6d:39:80:35:30:45:c8:1f:4a:6b:2a:44:89:40:
be:8f:e3:f0:75:9e:47:d5:39:bb:5e:f0:60:6a:df:0b:42:44:
28:00:a6:7d:ec:5a:a6:2a:af:2f:c2:d8:a5:1e:3c:9e:d3:4e:
be:7b:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:09 2026 by rpki-client