Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier: CP8RCApXjZXLkw0+uDWTjJavW698MEZKoL85RAqcMLU=
Subject key identifier: 72:6E:1F:88:20:EF:4E:B7:BB:A4:09:45:7E:EC:FF:C7:7A:BE:C5:21
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial: 019F42406D051F19AC26EE3332B9D69EB823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number: 026C
Signing time: Wed 08 Jul 2026 15:02:26 +0000
Manifest this update: Wed 08 Jul 2026 15:02:26 +0000
Manifest next update: Thu 09 Jul 2026 15:02:26 +0000
Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: FwSjJnySB7WszYowMhf8vrwq9UNCiirLImpoeHStTBI=)
2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:40:6d:05:1f:19:ac:26:ee:33:32:b9:d6:9e:b8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Validity
Not Before: Jul 8 15:02:26 2026 GMT
Not After : Jul 9 15:02:26 2026 GMT
Subject: CN=726e1f8820ef4eb7bba409457eecffc77abec521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:25:2a:eb:e6:43:82:00:99:71:9f:41:51:
e1:72:9f:18:ce:ce:33:6d:9b:c6:6d:c8:0e:ca:2b:
c7:a0:62:c8:58:08:79:07:0c:0b:4d:a8:1b:be:02:
6a:79:b5:b3:7e:2d:a8:cd:ed:6c:74:85:5a:68:28:
11:5c:1d:73:78:9b:95:41:31:fb:c4:59:c8:d0:c6:
67:91:8a:f1:68:eb:3f:cd:27:a4:7b:7a:89:66:1a:
6e:9e:ce:bc:7e:5b:65:09:f0:27:e0:15:f7:4b:28:
92:20:58:07:ed:8e:0f:3e:1f:f1:6f:91:70:60:58:
b8:ae:68:51:ef:29:33:5f:a7:c5:df:e4:8f:c5:d4:
57:ff:95:4c:0c:f9:14:43:5f:e0:24:7d:8f:b3:da:
e7:cc:c4:66:eb:60:54:6c:39:c0:d5:f8:0e:43:bb:
77:df:d7:2f:1d:5c:70:74:6d:82:6c:4a:6a:51:05:
93:93:f4:73:18:4c:78:c3:5c:6a:66:23:75:e8:88:
62:72:ee:1a:db:71:b7:9b:c4:3f:a8:9c:2e:06:ae:
1c:55:14:1a:2f:bb:22:59:cf:97:bf:f2:e7:4c:aa:
c7:9f:f9:49:79:95:71:c6:8b:39:d7:d4:37:c0:9c:
4d:76:94:ff:e4:d5:3a:21:4b:2e:17:a4:cf:af:57:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6E:1F:88:20:EF:4E:B7:BB:A4:09:45:7E:EC:FF:C7:7A:BE:C5:21
X509v3 Authority Key Identifier:
keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e4:4a:ee:e3:80:fd:da:b7:96:16:6f:9d:be:c8:36:61:a7:
8f:77:22:01:d5:e5:68:83:ac:73:ea:39:42:f8:20:0c:da:13:
89:41:0c:bc:38:e8:5a:1a:5b:5d:26:0d:e8:4c:78:1b:3e:9c:
67:0c:79:d4:3a:f0:d8:f0:ed:aa:4a:65:8f:e2:05:d1:c9:e0:
35:82:4f:d3:ba:06:a5:0f:10:0d:71:d7:f2:a0:f7:84:bc:55:
42:a7:82:f1:fd:d6:8a:26:36:f9:d1:71:ca:b7:62:a6:64:c3:
a3:80:63:75:07:b9:f0:b4:59:60:ac:41:5a:2f:d5:7c:78:3e:
51:8e:a1:1c:94:f1:69:63:c5:7b:d0:91:9c:57:c4:4d:13:41:
ac:70:a1:9c:79:7e:36:cf:bb:2e:b5:1c:3b:1e:c2:ec:fb:4e:
5d:52:09:b6:4a:3a:90:2e:30:7d:31:e7:3d:2a:55:7d:a8:ff:
fe:76:0e:85:4f:b0:01:8b:54:23:db:24:20:be:5e:d0:5e:4b:
81:1b:92:91:3b:b2:6b:72:15:b2:24:80:67:22:5b:5e:12:2f:
5b:c8:ac:74:ef:27:fe:40:ba:95:16:09:17:70:77:86:de:27:
4e:e5:ff:b4:e2:15:b4:d8:9c:6b:1c:14:c3:b9:24:ad:29:5e:
d6:6a:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:30:50 2026 by rpki-client