Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: DagG5OTLYguVW7U3D/YSTu6owlqOztg4vMIOqPtefW4=
Subject key identifier: 3A:61:EB:6F:C8:A7:86:4A:95:50:C2:44:53:85:B3:34:08:0E:26:A8
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 019D37F74DDCD48A5C764F7E28286EB4B139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 05A6
Signing time: Sun 29 Mar 2026 05:00:47 +0000
Manifest this update: Sun 29 Mar 2026 05:00:47 +0000
Manifest next update: Mon 30 Mar 2026 05:00:47 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: iVxO4P2y5lq56eg4pocDc1pEDeE4RQ83rbY0BqNfen8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4d:dc:d4:8a:5c:76:4f:7e:28:28:6e:b4:b1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: Mar 29 05:00:47 2026 GMT
Not After : Mar 30 05:00:47 2026 GMT
Subject: CN=3a61eb6fc8a7864a9550c2445385b334080e26a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:a6:a4:e5:73:e0:5e:16:0c:ec:09:7f:ea:
6c:86:d1:2d:a8:9a:84:61:1c:98:d3:8d:ce:20:e8:
2f:87:8d:81:b2:ec:b7:35:49:22:3f:37:46:cd:5b:
7d:fd:c4:0f:b4:35:f9:2a:42:ee:e4:04:e2:76:00:
39:8f:2c:47:d1:8a:11:00:b8:05:91:e6:6c:30:dd:
9a:ea:54:ec:08:1d:ab:b6:ef:ac:d7:48:d6:5a:ba:
a8:70:d7:5b:f0:77:11:b6:e4:14:97:01:f5:39:14:
d5:32:f5:7e:65:87:77:12:39:7d:1c:a2:fc:91:1a:
d6:ca:63:a2:a3:ea:0b:7f:03:7d:a9:02:5a:0f:e9:
9e:e5:2c:51:f7:5d:2f:75:15:98:eb:19:ca:04:af:
44:d4:3a:e2:ad:dd:84:97:05:f3:24:c5:d4:96:2e:
a7:89:bd:39:bf:c2:37:78:40:fc:91:bd:66:0e:7e:
d9:db:b6:10:28:64:d6:fe:1f:3d:4d:c3:62:47:36:
92:97:0f:36:c8:fb:76:1e:95:38:d5:5e:35:8a:87:
60:61:8e:16:11:fc:2a:ee:1c:fa:47:db:5a:b4:ad:
07:91:7d:d8:92:25:cc:ff:b0:64:ec:49:07:e0:44:
95:7d:29:d8:47:77:60:3d:1d:9d:e2:8d:07:2d:1d:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:61:EB:6F:C8:A7:86:4A:95:50:C2:44:53:85:B3:34:08:0E:26:A8
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f9:8d:c2:28:e4:ca:ca:72:e7:99:46:26:12:78:d8:fc:13:
4c:26:f6:cb:53:77:3f:e6:8a:0b:f6:eb:54:b2:90:60:a8:37:
fe:92:30:0d:6c:7a:1b:b4:dc:69:4b:a8:b0:d9:e2:79:db:ab:
ab:0b:b5:35:68:6c:bd:aa:ba:1b:89:de:1f:e1:0f:1b:5a:60:
cb:f7:ef:1c:41:3c:50:5f:19:df:3e:89:36:e1:66:50:e0:10:
40:c5:09:fa:76:f7:49:13:f7:2b:e4:8b:2d:04:3d:94:6c:2e:
05:16:21:3f:19:54:f3:15:ae:b9:91:53:72:0f:65:80:8f:5b:
24:41:99:ef:70:f0:d9:fa:43:87:3d:6d:d8:a3:8a:f1:78:8a:
a7:4e:b9:a7:5b:0f:48:3f:e5:fe:bf:36:ad:13:d4:bd:e5:90:
19:c5:e5:e9:12:a6:27:1f:12:48:03:60:dd:4d:e8:8e:39:8b:
8e:71:d9:2a:37:70:2e:d6:3f:f2:54:a7:03:f4:df:22:14:5c:
fd:76:fe:00:18:8c:a7:3e:34:b2:b2:45:e3:73:f3:38:2b:d9:
55:e9:68:cd:17:5e:fc:70:6e:ca:6a:28:66:43:7a:97:b1:95:
84:e7:0d:b5:47:04:dd:76:86:77:eb:21:e0:ab:ef:5a:cd:dc:
cb:dc:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:09 2026 by rpki-client