Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
File: BkizODOZAP9_O1myRtJNJofGNnw.mft (raw, json)
Hash identifier: kdT8/xA0N6S7TnB5ji6gq3Qeie9bYS5GN+oEVa3zcM4=
Subject key identifier: 3C:08:86:19:36:F7:3C:F6:51:F9:42:A4:1E:9C:33:E9:7C:4A:EC:BF
Authority key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
Certificate issuer: /CN=0648b338339900ff7f3b59b246d24d2687c6367c
Certificate serial: 01A0D34AE6190CA9DE6586C05E490AAE94C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
Manifest number: 05EC
Signing time: Thu 24 Sep 2026 12:01:36 +0000
Manifest this update: Thu 24 Sep 2026 12:01:36 +0000
Manifest next update: Fri 25 Sep 2026 12:01:36 +0000
Files and hashes: 1: BkizODOZAP9_O1myRtJNJofGNnw.crl (hash: OUU2e94bDdSCQcrB3KaEW2Oc0RA8AknWs9YWFFw5oFA=)
2: cfmhFWxRmQMPqxzLZOdLCKBVtII.roa (hash: hnNzoR6kq2MH8dzC1wQ5EZyQAUNnpRqddoSLhzjNpPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:e6:19:0c:a9:de:65:86:c0:5e:49:0a:ae:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648b338339900ff7f3b59b246d24d2687c6367c
Validity
Not Before: Sep 24 12:01:36 2026 GMT
Not After : Sep 25 12:01:36 2026 GMT
Subject: CN=3c08861936f73cf651f942a41e9c33e97c4aecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:33:8b:5b:40:38:56:31:e7:22:dc:64:bb:
a1:ba:50:51:39:58:8b:94:b6:d7:18:14:ab:40:87:
bd:29:d8:b6:a7:e0:f1:39:77:e2:b5:72:87:14:93:
ac:bb:16:4a:c5:dd:3c:d7:ec:ac:36:44:f9:0b:96:
e8:1f:3b:8f:ca:59:6a:99:9b:f0:78:5e:29:8b:9e:
6b:fe:86:98:24:12:d9:65:57:ee:11:27:e6:1c:e6:
72:b6:46:47:80:a3:fc:d7:53:ec:39:15:ae:22:49:
a6:ed:98:a5:5c:e9:34:c0:2f:1f:6e:af:ad:43:17:
07:13:ee:41:db:5d:84:74:c5:10:3f:f6:f2:77:6e:
6b:f1:25:60:0c:5c:60:cf:78:f4:ba:ef:97:bc:d4:
4e:a2:37:83:27:c0:d2:b1:cf:36:c6:e0:28:90:7e:
0a:ff:0b:26:73:ac:8a:5c:4b:7a:1a:db:32:7e:9d:
6b:cf:1c:53:f1:1d:57:df:69:8b:c0:bd:73:b2:d1:
fd:27:07:fe:a0:2e:a3:83:4f:5f:9b:44:ec:b8:14:
f6:b3:eb:56:40:04:5e:28:0d:e0:a9:42:27:4b:ab:
1a:70:33:7c:be:ba:04:49:4f:f9:1b:56:5a:e3:74:
8a:65:d5:aa:4c:3e:fa:0e:c3:ec:5e:87:66:82:05:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:08:86:19:36:F7:3C:F6:51:F9:42:A4:1E:9C:33:E9:7C:4A:EC:BF
X509v3 Authority Key Identifier:
keyid:06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9b:8d:a7:f9:d9:37:37:4b:1c:a1:bb:c8:0f:59:5e:95:1b:
95:ec:83:c8:f9:4e:76:fc:bb:11:1f:ca:0e:36:d0:63:5c:45:
07:23:47:ae:15:91:3a:8e:4a:f1:ef:c5:58:dc:3d:3b:f8:00:
48:fd:e2:ff:07:1c:e6:53:93:c2:29:72:ea:d1:8d:16:8e:ad:
ab:e1:a3:2b:a1:53:81:34:61:4f:59:d7:0f:83:7c:c7:82:8e:
45:5c:e1:09:d2:5e:d8:7b:77:f6:76:a6:ba:b5:a9:27:d7:69:
17:50:d8:b8:54:db:2a:ce:f2:60:8c:ce:2d:86:a0:22:12:df:
ee:6c:59:d4:eb:23:a7:6a:d8:03:18:35:69:e6:cd:cf:99:5f:
b1:ee:12:fb:f2:9f:3a:1b:7f:f7:38:ac:99:a0:56:a6:45:27:
f0:6d:33:31:50:83:7b:cf:e0:1e:0e:5d:2a:6c:ce:4a:be:b5:
5d:db:c9:63:96:5b:8e:af:2f:a3:6f:a2:b0:35:ad:48:a5:39:
65:50:78:53:9d:cf:d1:c4:58:3f:b3:fa:c4:d7:58:75:4c:92:
4a:c3:17:dd:3a:e5:b7:09:b0:7a:30:eb:c9:18:6f:8f:f7:f4:
3b:73:4d:ff:41:eb:e9:45:04:9f:65:8c:51:bb:53:1a:4b:f5:
7a:8a:86:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:57:07 2026 by rpki-client