Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
File: 153OHAWhQ_3YWEdABMR_bzv_90k.mft (raw, json)
Hash identifier: uKruCNIyPIsGbe+4ie/RjjYcV82K1jFN+p+wva3PL3M=
Subject key identifier: 2C:46:05:5A:0A:52:D1:F7:77:36:A7:84:14:59:67:79:AD:1F:F4:AA
Authority key identifier: D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
Certificate issuer: /CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Certificate serial: 019D389BB55982D4BB4B4F922886A56A9FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
Manifest number: 0732
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: 153OHAWhQ_3YWEdABMR_bzv_90k.crl (hash: aTZfGyOr17aUKDKMd4NiouG5iaDv0/TfVDabXhBq/Nw=)
2: nN-ju_64Z90TCxYhBDeQTLTn6vo.roa (hash: 8L8/L9YEesxygj4vPAkV5W3fYmJFnHglj85qEirp6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b5:59:82:d4:bb:4b:4f:92:28:86:a5:6a:9f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79dce1c05a143fdd858474004c47f6f3bfff749
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=2c46055a0a52d1f77736a78414596779ad1ff4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:94:a3:01:76:8d:4c:16:3d:f5:bc:dc:39:
ec:52:02:07:a5:10:6f:00:3a:5b:06:3a:31:2a:cb:
e6:89:70:21:ac:a1:98:26:56:e8:d4:20:ac:de:29:
5e:1d:c7:de:66:3b:35:f1:3a:e3:42:f3:1b:f3:5b:
0e:13:58:ea:56:23:56:43:52:d3:1c:a8:51:a8:a9:
79:93:32:b3:1f:d8:cc:a1:f7:46:fc:53:16:bc:77:
1f:2d:14:90:60:d7:c7:2b:e1:a0:5c:3e:91:e5:27:
94:05:bb:42:ad:96:df:c3:e6:e0:2e:bb:76:ad:38:
30:53:cc:cc:69:cc:c1:d1:2b:68:1d:91:07:bf:b0:
e5:e1:8a:ef:76:ea:34:52:59:87:5b:e9:ec:ac:74:
94:f3:c4:d9:2c:9a:36:cf:1f:04:02:bf:93:fe:fd:
6a:60:57:6a:18:bd:65:f6:91:6c:e3:85:f2:ca:b9:
d8:08:f6:0d:05:a7:d5:5b:6d:5d:d2:14:dd:ac:27:
2e:7c:27:79:9a:5c:01:70:8c:ff:df:ca:b4:e1:bc:
7e:f5:c5:d4:17:d3:53:bb:90:69:25:b0:cf:05:3f:
d2:b6:f6:6f:78:b9:81:ae:b8:0b:ec:4a:37:c9:a5:
7a:f0:f4:d1:e2:47:d6:02:fd:8f:ad:d2:3e:39:b1:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:05:5A:0A:52:D1:F7:77:36:A7:84:14:59:67:79:AD:1F:F4:AA
X509v3 Authority Key Identifier:
keyid:D7:9D:CE:1C:05:A1:43:FD:D8:58:47:40:04:C4:7F:6F:3B:FF:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/153OHAWhQ_3YWEdABMR_bzv_90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f99e4-8dd5-4e5f-beaa-a756929a8dc8/1/153OHAWhQ_3YWEdABMR_bzv_90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a4:34:fc:41:8c:48:6c:be:52:49:61:3c:b2:34:12:20:32:
e1:67:6b:1b:c6:ca:02:50:80:1b:5a:eb:79:1d:d7:87:f7:17:
10:f3:c7:19:31:52:12:9e:95:31:1e:b1:fd:84:9b:eb:24:be:
f8:3b:d0:cd:54:8c:e8:d3:d6:ef:61:7a:e5:9f:13:aa:dc:bb:
67:81:4b:63:1c:b7:a9:02:0e:5f:31:b0:cc:35:94:5c:13:aa:
49:65:48:f4:a0:7f:db:35:08:cf:a2:42:d7:9d:fe:ce:ce:d4:
63:ad:1f:e5:3a:e5:76:48:62:6a:45:36:1d:57:74:3b:33:01:
22:27:8e:47:5c:2c:36:96:6d:26:ee:b2:cd:ac:51:02:14:9d:
cd:5d:14:d6:2d:77:4d:17:ef:74:ac:a6:96:76:c6:05:a4:02:
01:b9:1e:68:15:d1:12:d9:0a:5e:a1:f2:49:1c:75:13:2e:c1:
6a:e9:0e:21:82:f5:1e:b7:f1:96:47:96:7f:ba:a1:ae:b9:a8:
cc:54:26:75:c6:50:e8:e8:25:7c:ee:c9:79:2f:fd:b3:3c:93:
7c:16:72:70:a6:0f:cd:58:89:1e:83:fd:7a:20:06:3e:ca:37:
56:00:2f:80:44:da:b5:42:23:ea:a9:8a:a2:8c:a6:54:8a:71:
61:ee:ad:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7VZgtS7S0+SKIalap+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWRjZTFjMDVhMTQzZmRkODU4NDc0MDA0YzQ3ZjZmM2Jm
ZmY3NDkwHhcNMjYwMzI5MDgwMDIxWhcNMjYwMzMwMDgwMDIxWjAzMTEwLwYDVQQD
EygyYzQ2MDU1YTBhNTJkMWY3NzczNmE3ODQxNDU5Njc3OWFkMWZmNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoaUowF2jUwWPfW83DnsUgIHpRBv
ADpbBjoxKsvmiXAhrKGYJlbo1CCs3ileHcfeZjs18TrjQvMb81sOE1jqViNWQ1LT
HKhRqKl5kzKzH9jMofdG/FMWvHcfLRSQYNfHK+GgXD6R5SeUBbtCrZbfw+bgLrt2
rTgwU8zMaczB0StoHZEHv7Dl4Yrvduo0UlmHW+nsrHSU88TZLJo2zx8EAr+T/v1q
YFdqGL1l9pFs44XyyrnYCPYNBafVW21d0hTdrCcufCd5mlwBcIz/38q04bx+9cXU
F9NTu5BpJbDPBT/StvZveLmBrrgL7Eo3yaV68PTR4kfWAv2PrdI+ObHjcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxGBVoKUtH3dzanhBRZZ3mtH/SqMB8GA1UdIwQY
MBaAFNedzhwFoUP92FhHQATEf287//dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjk5ZTQtOGRkNS00ZTVmLWJlYWEt
YTc1NjkyOWE4ZGM4LzEvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zZjk5ZTQtOGRkNS00ZTVmLWJlYWEtYTc1NjkyOWE4ZGM4
LzEvMTUzT0hBV2hRXzNZV0VkQUJNUl9ienZfOTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKQ0/EGM
SGy+UklhPLI0EiAy4WdrG8bKAlCAG1rreR3Xh/cXEPPHGTFSEp6VMR6x/YSb6yS+
+DvQzVSM6NPW72F65Z8Tqty7Z4FLYxy3qQIOXzGwzDWUXBOqSWVI9KB/2zUIz6JC
153+zs7UY60f5TrldkhiakU2HVd0OzMBIieOR1wsNpZtJu6yzaxRAhSdzV0U1i13
TRfvdKymlnbGBaQCAbkeaBXREtkKXqHySRx1Ey7BaukOIYL1HrfxlkeWf7qhrrmo
zFQmdcZQ6OglfO7JeS/9szyTfBZycKYPzViJHoP9eiAGPso3VgAvgETatUIj6qmK
ooymVIpxYe6tkA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:22 2026 by rpki-client