Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: J3siOliOiD4UMk0eX2Z+0EMHZb7WhFywNT+DIj/E8/4=
Subject key identifier: 2E:30:0B:0F:71:8F:68:25:F3:1B:4C:F8:AC:80:6F:56:48:6F:01:05
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 019F178C2291D05138FF95CB1CD07E8003A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 082A
Signing time: Tue 30 Jun 2026 08:01:27 +0000
Manifest this update: Tue 30 Jun 2026 08:01:27 +0000
Manifest next update: Wed 01 Jul 2026 08:01:27 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: mP1/grDerlaZOVpNHsZLues8ei8Uu1mcWKih5fVTkpI=)
2: nN-ju_64Z90TCxYhBDeQTLTn6vo.roa (hash: 8L8/L9YEesxygj4vPAkV5W3fYmJFnHglj85qEirp6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:22:91:d0:51:38:ff:95:cb:1c:d0:7e:80:03:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: Jun 30 08:01:27 2026 GMT
Not After : Jul 1 08:01:27 2026 GMT
Subject: CN=2e300b0f718f6825f31b4cf8ac806f56486f0105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:2a:a1:b4:89:35:15:8c:28:f4:33:11:59:
bd:0f:c9:ca:0b:36:aa:d5:16:35:6c:97:40:43:bc:
12:42:28:6d:f7:15:e8:3e:31:65:35:18:ac:79:ed:
7a:83:2b:ce:f6:6b:06:73:a1:44:15:72:d4:93:0e:
55:80:ab:89:76:a2:06:f6:b9:8e:e3:7f:26:92:5d:
1d:11:ec:c6:50:43:21:da:08:3e:29:d1:60:f5:f7:
45:76:c0:6c:2c:5f:15:7b:5e:a1:c9:f7:3a:1d:36:
0f:51:90:f7:00:f0:d0:af:39:bf:72:b8:63:83:7e:
12:13:77:79:0b:08:43:0a:fe:4a:b9:db:ca:58:4e:
7d:dd:f0:22:ed:5e:23:c8:0b:87:bc:e2:2c:e0:c7:
40:3e:7a:fe:98:41:89:a2:a6:55:08:41:3e:98:44:
19:db:f6:aa:16:57:8e:5b:fe:98:db:76:26:38:a4:
1d:23:5e:0c:cb:d0:2a:9e:55:eb:77:64:18:ac:6d:
c0:a3:81:8c:42:3f:ad:73:f5:3e:a5:86:70:fc:59:
a1:ff:88:51:d9:93:0e:7d:a5:1c:31:93:ee:05:cd:
37:ba:54:86:3a:f8:96:74:82:7a:d4:44:55:34:89:
3a:e4:11:4f:7f:b4:ee:e4:81:7f:6e:e0:f1:cf:20:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:30:0B:0F:71:8F:68:25:F3:1B:4C:F8:AC:80:6F:56:48:6F:01:05
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ec:02:49:c6:0a:db:bb:3a:4c:a3:93:46:af:e8:36:91:16:
17:82:87:f4:cc:d1:35:d9:ae:e9:4d:38:21:f3:61:c9:fb:4d:
ca:f7:b2:f6:9c:b7:cb:98:58:53:c9:ff:21:57:46:15:b7:df:
1c:d3:2d:ee:ab:a1:6c:99:e3:7c:e0:15:e7:71:25:5e:e8:e2:
2c:d7:f4:82:12:33:34:6e:66:46:4a:d5:7c:da:dd:b6:1f:89:
b7:f1:87:4d:cb:8f:56:e5:48:ef:36:91:7a:dc:ac:81:69:47:
bb:d3:14:38:22:37:2f:33:e4:c1:4f:bb:20:23:38:9b:0b:56:
7d:e5:3d:00:05:74:c4:d5:ed:7b:0c:65:7d:05:cf:8b:91:7d:
65:bd:ab:5d:51:73:c8:b8:95:a3:bb:d7:67:05:ac:ce:5a:a9:
b4:11:54:46:40:57:a0:ef:42:d1:35:9b:23:80:05:81:e4:b0:
09:07:1d:d6:fb:bd:ae:46:1b:42:69:ab:c5:b7:45:92:21:50:
01:95:f3:43:16:74:fb:ef:ca:e8:84:d2:c8:2e:85:b6:b4:28:
5a:d1:e8:c7:3d:56:93:c2:51:4f:92:ea:1c:f6:62:b8:59:e9:
3e:fe:c0:ff:c3:8e:5d:58:a0:8a:b2:4c:56:b2:dd:be:ce:fb:
63:df:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:03 2026 by rpki-client