Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
File: BkizODOZAP9_O1myRtJNJofGNnw.mft (raw, json)
Hash identifier: G1X0oNHsn07Lcy+Iai/iGd7WdX1VRP+RQCsvjCTRhtY=
Subject key identifier: 9A:61:7B:B9:38:CC:DB:24:9F:85:A3:31:13:FC:15:F6:01:44:7C:64
Authority key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
Certificate issuer: /CN=0648b338339900ff7f3b59b246d24d2687c6367c
Certificate serial: 019FE1E4A88C13B4BE4B7FBB1DFECD3DC92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
Manifest number: 056F
Signing time: Sat 08 Aug 2026 15:01:26 +0000
Manifest this update: Sat 08 Aug 2026 15:01:26 +0000
Manifest next update: Sun 09 Aug 2026 15:01:26 +0000
Files and hashes: 1: BkizODOZAP9_O1myRtJNJofGNnw.crl (hash: 5MdRkdLPDZkhrVaC4fz30G4e+ffpeKKKwZXc8T09Q8g=)
2: cfmhFWxRmQMPqxzLZOdLCKBVtII.roa (hash: hnNzoR6kq2MH8dzC1wQ5EZyQAUNnpRqddoSLhzjNpPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:e4:a8:8c:13:b4:be:4b:7f:bb:1d:fe:cd:3d:c9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648b338339900ff7f3b59b246d24d2687c6367c
Validity
Not Before: Aug 8 15:01:26 2026 GMT
Not After : Aug 9 15:01:26 2026 GMT
Subject: CN=9a617bb938ccdb249f85a33113fc15f601447c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:05:59:0f:bf:a5:e1:4d:a2:79:b0:16:c6:
58:b5:04:cb:9e:c0:44:41:ca:f0:95:ff:87:60:b0:
a3:cd:8e:47:0f:a0:92:23:ba:e0:0d:25:25:61:16:
e6:d3:e6:2a:72:f3:7c:ab:8d:a4:50:7f:14:90:b9:
b6:5c:8c:57:cd:d0:43:d9:97:8f:33:6d:39:a4:3e:
16:0f:b0:4c:4b:14:60:37:47:d7:9a:fd:a3:ac:3c:
3d:15:d4:d3:87:e1:80:3d:40:03:f6:3a:6f:1a:07:
21:e7:92:9a:d1:7e:d2:da:b9:68:a7:d3:50:3a:37:
a9:5d:93:72:53:dd:10:65:58:27:3e:d5:b1:3b:15:
a5:99:3f:56:91:cd:b5:61:59:32:53:8c:3d:5a:3d:
8e:19:f8:62:84:b0:f8:d1:4b:83:ef:93:5c:01:39:
d0:6b:75:45:1b:08:bf:30:9e:50:e5:39:dc:6d:f0:
d2:3f:0c:e9:b0:d4:dd:df:22:e9:8c:39:a9:6e:58:
35:15:f1:72:54:14:df:a5:e6:27:44:20:9e:c2:2b:
1b:3f:0c:f3:a3:a4:ad:ee:e9:c7:e6:5a:49:79:9f:
13:8b:88:4b:00:c2:d2:4b:2f:17:8a:b1:40:a7:6b:
b9:f7:98:48:69:f7:f2:5d:ae:19:c4:7b:20:fa:10:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:7B:B9:38:CC:DB:24:9F:85:A3:31:13:FC:15:F6:01:44:7C:64
X509v3 Authority Key Identifier:
keyid:06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b4:d3:ea:2a:8e:6c:cf:c4:08:83:e9:5a:7f:13:54:e5:47:
0a:45:13:11:4d:ba:eb:24:d1:54:30:19:75:23:db:72:59:4d:
aa:17:60:bc:d3:a7:32:32:ac:4d:de:12:5f:96:24:8d:69:1e:
aa:e9:1c:48:82:b0:a1:e9:b5:0a:68:48:e5:4b:e2:a4:3f:9a:
db:db:72:fb:98:9a:44:6b:88:8b:8b:e5:ce:62:bf:4e:d6:93:
1e:80:14:3a:84:5e:64:be:a5:f2:f2:8b:43:77:a6:04:0d:29:
01:3e:1e:a9:8c:24:00:a7:ba:79:ee:02:f8:16:07:cb:bc:6e:
b6:de:f9:ae:80:4b:ee:7f:11:b7:65:be:e7:1d:8e:89:44:a1:
71:08:82:89:bd:3b:d0:37:6b:52:c9:fa:7b:50:54:66:ec:e5:
1b:ae:08:05:22:a5:a2:f1:0e:8f:a2:76:62:d9:02:f1:84:8b:
fb:e4:ae:93:21:6c:1b:ab:4c:87:73:89:21:3e:2c:cf:08:60:
48:df:1c:25:26:4d:94:a0:d8:87:25:54:23:b4:a7:7e:ab:8c:
a3:5f:8b:a6:9f:a8:11:2e:46:9d:bd:fa:7d:23:6b:df:d6:f8:
75:c7:80:7d:ce:b3:2b:f6:ba:3e:8f:e3:51:a7:b0:bf:7a:fa:
c5:0d:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 18:15:33 2026 by rpki-client