Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json)
Hash identifier: 45jkBSzdr6V6XL1T4ttzfmOY6gE5e7VugtjekAMWVno=
Subject key identifier: 1C:E1:9A:58:4C:F2:B7:8E:F0:33:4D:A5:C0:CC:2A:60:AC:62:F1:A0
Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Certificate serial: 019D38D2B07AEAAB71147E3C100F02D3F01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
Manifest number: 015E
Signing time: Sun 29 Mar 2026 09:00:24 +0000
Manifest this update: Sun 29 Mar 2026 09:00:24 +0000
Manifest next update: Mon 30 Mar 2026 09:00:24 +0000
Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: tPIkA8coHEpiYacOajtpxP/zUTtcdONkz04remi+jOw=)
2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b0:7a:ea:ab:71:14:7e:3c:10:0f:02:d3:f0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a
Validity
Not Before: Mar 29 09:00:24 2026 GMT
Not After : Mar 30 09:00:24 2026 GMT
Subject: CN=1ce19a584cf2b78ef0334da5c0cc2a60ac62f1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:e5:dc:0c:89:5f:fb:4f:b7:d9:b6:5d:11:
99:44:22:7a:38:59:77:48:c9:b1:ac:78:4c:92:bb:
f7:46:80:3a:03:d4:78:fc:c0:ef:5f:8a:96:c9:e3:
4f:85:fb:83:df:9b:ab:35:7f:30:10:a4:76:24:13:
dd:8b:e3:e0:2d:3c:eb:cd:0e:71:7f:4c:01:f8:52:
82:fb:94:6b:a6:7f:32:3e:35:18:06:f6:41:35:b4:
ea:55:11:a5:a1:0b:ea:1d:fe:15:12:21:f7:dc:32:
ae:98:1d:27:1b:7c:d9:4c:45:62:09:d8:51:a4:69:
ba:66:d1:b4:cd:44:6d:24:7d:a5:ee:8f:bf:9a:7e:
76:49:6a:e7:10:da:c9:ae:bb:51:00:ed:ab:c1:0c:
f3:e3:76:97:36:4c:ec:3b:0c:82:22:17:8b:ab:81:
f7:17:e3:f8:25:cd:bf:c4:32:86:03:7c:bd:4c:f1:
a5:af:a8:ce:b2:74:30:2c:d1:40:ab:5f:6a:bf:e4:
c5:d5:c8:53:b2:cc:02:cc:5c:5c:18:92:80:6e:d3:
b8:f1:2c:da:45:76:b0:0c:8b:84:46:cb:88:d4:bd:
4b:70:41:16:4b:69:f1:56:3c:e2:38:a5:36:90:2e:
54:bc:e2:2c:62:2e:6b:69:6b:cd:74:fd:0c:6e:bf:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E1:9A:58:4C:F2:B7:8E:F0:33:4D:A5:C0:CC:2A:60:AC:62:F1:A0
X509v3 Authority Key Identifier:
keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:82:35:8e:49:b2:cb:1e:cb:0b:92:21:6c:51:c6:68:34:73:
54:8a:b4:55:72:c1:24:b6:fc:c9:c9:70:52:04:90:22:fa:58:
82:e1:22:51:fb:ee:4c:69:4c:6c:cb:02:63:ad:fe:25:54:42:
e9:17:34:d0:99:ce:85:7a:1a:0b:70:0b:3a:cd:8f:89:25:5b:
ff:ac:a2:bb:77:60:ed:50:b9:ec:a5:43:b9:aa:31:9f:09:95:
c7:59:6f:04:86:48:58:b6:b4:0d:41:36:fd:b2:9c:70:a7:02:
59:48:19:2b:49:89:e4:78:d6:36:79:74:31:e5:95:ca:c9:2a:
c2:e0:db:69:73:cc:97:33:ab:6f:ec:5b:98:c1:9b:09:0f:48:
35:26:11:47:6b:64:93:f3:4e:9a:fc:c3:53:ee:1a:a9:32:81:
e4:44:3d:65:8a:32:dc:d6:6a:fd:3f:8f:46:18:88:f1:3e:7a:
50:61:45:28:6b:7f:19:45:3b:a9:3a:0e:d5:cd:ae:b6:b8:c5:
2a:d9:9f:c3:9c:e7:fb:e4:ea:a0:f1:5e:97:45:af:92:9a:4c:
86:01:4f:2e:fa:dc:0a:60:ec:e9:80:4c:bb:56:1c:fa:bf:1d:
04:4b:4e:2f:eb:7e:87:82:00:fc:7e:4b:7e:27:65:1d:e2:25:
14:ca:62:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040rB66qtxFH48EA8C0/AdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzJlZTVmMDE4OWVmOWI2NzE0MThlZDMzNmVjYjE3Mjhm
OTkyMGEwHhcNMjYwMzI5MDkwMDI0WhcNMjYwMzMwMDkwMDI0WjAzMTEwLwYDVQQD
EygxY2UxOWE1ODRjZjJiNzhlZjAzMzRkYTVjMGNjMmE2MGFjNjJmMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/zl3AyJX/tPt9m2XRGZRCJ6OFl3
SMmxrHhMkrv3RoA6A9R4/MDvX4qWyeNPhfuD35urNX8wEKR2JBPdi+PgLTzrzQ5x
f0wB+FKC+5Rrpn8yPjUYBvZBNbTqVRGloQvqHf4VEiH33DKumB0nG3zZTEViCdhR
pGm6ZtG0zURtJH2l7o+/mn52SWrnENrJrrtRAO2rwQzz43aXNkzsOwyCIheLq4H3
F+P4Jc2/xDKGA3y9TPGlr6jOsnQwLNFAq19qv+TF1chTsswCzFxcGJKAbtO48Sza
RXawDIuERsuI1L1LcEEWS2nxVjziOKU2kC5UvOIsYi5raWvNdP0Mbr9NOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzhmlhM8reO8DNNpcDMKmCsYvGgMB8GA1UdIwQY
MBaAFG8y7l8Bie+bZxQY7TNuyxco+ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2Yt
OGU3NjEzODA0YzgwLzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2YtOGU3NjEzODA0Yzgw
LzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYI1jkmy
yx7LC5IhbFHGaDRzVIq0VXLBJLb8yclwUgSQIvpYguEiUfvuTGlMbMsCY63+JVRC
6Rc00JnOhXoaC3ALOs2PiSVb/6yiu3dg7VC57KVDuaoxnwmVx1lvBIZIWLa0DUE2
/bKccKcCWUgZK0mJ5HjWNnl0MeWVyskqwuDbaXPMlzOrb+xbmMGbCQ9INSYRR2tk
k/NOmvzDU+4aqTKB5EQ9ZYoy3NZq/T+PRhiI8T56UGFFKGt/GUU7qToO1c2utrjF
Ktmfw5zn++TqoPFel0WvkppMhgFPLvrcCmDs6YBMu1Yc+r8dBEtOL+t+h4IA/H5L
fidlHeIlFMpiVg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:38 2026 by rpki-client