Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File: BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier: 4IwGPO3vcrLnLDvlOICB1mvTeSFbU8T4RdNMGpuHKLM=
Subject key identifier: 83:03:06:79:84:5A:B4:C8:1D:55:06:5C:95:57:8A:F3:96:BD:1E:CC
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 019D3789B14E9147C11C06AC99C3D0FEB077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:01:03 +0000
Manifest this update: Sun 29 Mar 2026 03:01:03 +0000
Manifest next update: Mon 30 Mar 2026 03:01:03 +0000
Files and hashes: 1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: 6PbI+aKpCDuwLIk3QTuo/5hXgnnEqezMDqxhrtjOmIc=)
2: IWqOv6y-FG5f7yp9nH6xdgnpv8E.roa (hash: gkV9ez5h044OMkSTspKV9neDGkCTAKH1+BcOktle2ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b1:4e:91:47:c1:1c:06:ac:99:c3:d0:fe:b0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Mar 29 03:01:03 2026 GMT
Not After : Mar 30 03:01:03 2026 GMT
Subject: CN=83030679845ab4c81d55065c95578af396bd1ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:64:01:65:1d:b9:79:9e:d0:a2:d3:b8:a0:
9a:c2:d4:bf:44:ee:b1:73:ac:b9:ea:8b:13:e9:44:
19:71:b9:d3:20:91:63:f5:ae:b4:2f:e4:f3:43:a1:
9e:18:5d:02:4e:0c:cc:db:3f:d0:bc:e5:22:60:15:
93:d6:cb:ad:0f:dd:f3:39:41:85:f0:39:c8:b9:39:
a3:bc:fb:a0:b3:b7:8e:e5:1f:54:fb:7c:ec:a9:94:
e1:ad:1a:0c:75:50:a0:e1:8f:2d:3b:67:cf:6b:87:
15:88:22:fe:f0:49:47:9c:42:88:d1:e4:39:50:9e:
83:ee:13:c2:d4:50:80:7f:12:0a:1b:81:fd:02:2f:
fd:6f:fe:2d:f4:04:4c:87:2f:f3:01:ae:c0:98:c8:
65:d0:c4:3c:ca:b0:11:d5:ea:cf:f8:12:9a:e7:76:
6f:ac:cc:76:48:d1:cd:0e:8e:72:22:21:9e:f3:aa:
d0:11:93:26:53:4e:80:f7:cb:1c:b2:c7:91:78:eb:
cd:19:1e:9e:a6:b5:25:06:42:2f:a0:0f:32:21:61:
94:e0:c2:b2:7f:ab:26:6f:d2:0e:a7:80:4c:f5:3e:
01:4c:97:af:be:a0:5e:ff:df:8e:12:66:55:71:a1:
22:8f:08:4e:7d:9a:d5:b8:14:0d:d7:6f:6e:fd:56:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:03:06:79:84:5A:B4:C8:1D:55:06:5C:95:57:8A:F3:96:BD:1E:CC
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:39:20:05:f8:24:2f:e4:68:87:8d:5e:65:e0:3b:b4:9e:8a:
04:50:44:b8:62:ab:b5:5c:c1:42:5d:4a:06:77:00:78:70:87:
74:2d:bc:57:76:db:a5:43:ab:8c:07:d7:f9:35:81:32:42:6c:
fb:06:9d:60:08:96:5b:28:20:5d:c0:c4:74:65:bc:09:21:88:
df:3b:89:9f:3d:85:62:d0:3a:89:cf:4b:ba:6f:e1:09:a0:12:
6e:23:b1:9d:58:c9:f9:1f:ef:ae:ce:9a:90:65:32:f5:45:5a:
b7:58:b2:16:42:8b:5d:23:c0:29:74:01:ed:4b:46:7f:ba:50:
b7:8b:85:38:b8:96:bb:fc:27:4a:57:b1:5b:8f:cc:1b:57:11:
f6:7b:e2:e4:ad:39:07:40:06:1b:51:e4:9d:a3:24:85:16:a6:
f3:81:b4:e6:a8:26:b3:0a:2f:9d:93:31:05:86:18:9a:40:56:
ea:2a:6d:9a:e6:82:8f:54:46:24:37:7b:20:63:bc:c3:58:fc:
42:24:a9:2e:7a:6a:4b:b1:c3:b3:64:fb:50:a0:f8:b8:d4:11:
ae:60:77:cc:e1:17:2d:ca:ba:30:8d:5b:58:1f:f4:da:39:77:
c5:9b:0a:c5:61:2f:fa:2a:08:0e:00:ce:9c:fc:75:f7:52:ae:
99:71:1b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:30 2026 by rpki-client