Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
File: BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft (raw, json)
Hash identifier: FnfZ/n4hMVGRZrW0UsJfVEy+crblZzcCC23CMg8JMz0=
Subject key identifier: D2:92:66:BF:77:DF:E8:44:A9:19:B7:E8:48:71:17:96:08:2A:DA:30
Authority key identifier: 05:96:1F:09:4A:0E:9C:8F:66:82:82:39:FC:C5:28:1D:8D:2F:8C:E3
Certificate issuer: /CN=05961f094a0e9c8f66828239fcc5281d8d2f8ce3
Certificate serial: 01A160E8D7624D3A27915D347F52A4308A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
Manifest number: 9F
Signing time: Thu 22 Oct 2026 00:00:34 +0000
Manifest this update: Thu 22 Oct 2026 00:00:34 +0000
Manifest next update: Fri 23 Oct 2026 00:00:34 +0000
Files and hashes: 1: BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl (hash: 5LM7NCpQbQ7N08Vmz8v/Irlp+g69dKlxtXP+nzILeoE=)
2: vOFi4vqQ941RKVxLlL--Kjz4M1Y.roa (hash: NTePj0xJxi4d0cbIEQcwBmxgG0qDewsP9PpsmvJHEzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e8:d7:62:4d:3a:27:91:5d:34:7f:52:a4:30:8a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05961f094a0e9c8f66828239fcc5281d8d2f8ce3
Validity
Not Before: Oct 22 00:00:34 2026 GMT
Not After : Oct 23 00:00:34 2026 GMT
Subject: CN=d29266bf77dfe844a919b7e848711796082ada30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:ed:7a:a3:5a:8e:cd:0a:5f:2b:72:c1:6e:
48:34:80:60:9c:aa:55:ff:96:ce:ac:94:d2:98:44:
ac:12:fb:86:40:1d:4b:83:06:b7:b2:a7:55:e6:95:
57:26:c5:f5:08:3d:74:cf:90:ea:34:d6:be:8c:80:
75:c5:63:50:94:31:76:49:ca:0c:e9:a5:3f:de:16:
3d:95:f0:61:3a:13:f7:cb:4a:fc:e6:01:50:8f:70:
ff:11:69:24:04:af:24:8e:63:46:73:d5:72:4d:8a:
75:96:2c:21:b1:93:99:eb:2c:69:2c:27:5c:f1:fe:
b1:24:a0:24:56:fe:1f:48:da:2b:d4:1e:aa:dd:23:
75:49:a0:d0:fc:a2:73:27:e5:71:2e:b0:ea:d5:79:
25:b0:d9:b4:37:ab:c7:5f:dc:e6:43:42:27:53:53:
63:db:95:f2:d6:b7:0d:c3:98:80:f4:3b:ff:37:91:
a8:cb:9f:b4:7d:d2:47:55:a7:bb:ae:2e:a1:df:ff:
0b:b4:a3:04:b8:fd:8a:56:d6:7f:22:ea:90:74:9d:
0f:2e:2d:bd:1e:3d:ed:13:34:8a:69:d7:24:45:2f:
76:42:c1:99:b1:a4:18:ba:ad:26:61:35:b9:79:55:
b5:c2:2e:96:d1:b1:a4:f9:2b:c2:00:f0:59:8d:6d:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:92:66:BF:77:DF:E8:44:A9:19:B7:E8:48:71:17:96:08:2A:DA:30
X509v3 Authority Key Identifier:
keyid:05:96:1F:09:4A:0E:9C:8F:66:82:82:39:FC:C5:28:1D:8D:2F:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:00:28:99:c9:c9:06:10:ca:f5:f4:8c:e7:58:03:9e:1f:ae:
e0:6e:33:3a:9e:58:32:c1:cc:38:ad:2b:48:87:1b:57:42:15:
4a:32:76:51:cb:cc:91:72:a6:99:16:4a:80:24:d5:4d:85:db:
06:0a:3a:65:2b:2c:67:1e:0a:d7:05:f8:49:2c:f0:37:c5:4e:
bc:cf:af:6f:c9:77:c5:5d:70:71:ba:e9:d4:56:37:18:44:4f:
d7:71:5a:91:4f:e6:18:11:44:d4:98:0a:16:5d:e2:29:eb:35:
1c:13:05:bb:51:02:d5:8d:e2:0c:85:bc:cf:c1:1a:1d:ba:59:
b9:6b:0d:93:78:53:66:23:28:3b:6c:a7:75:58:a5:23:69:02:
91:db:82:4f:aa:47:a5:0f:ad:22:09:3d:cb:59:1b:cf:cd:60:
4c:5e:4f:22:25:98:b5:64:56:15:1d:b5:b6:aa:73:db:e6:3f:
ca:dd:42:f8:8d:00:2c:03:8a:51:e2:b2:d0:e9:72:e6:c2:ed:
b0:e0:d1:f3:e7:4b:20:58:98:5a:14:71:76:4e:e0:a1:8a:e7:
32:fe:81:71:7e:0f:d8:dd:63:99:30:a6:bc:91:43:be:4b:53:
a3:16:cd:a4:2d:d8:8e:17:58:68:0e:61:ca:8d:2f:5a:10:3f:
1a:2b:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:03:44 2026 by rpki-client