Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: jCh0kxIY6DEn4t3RMBH4z+0qBrIyC8hfAU9lY1xTdRM=
Subject key identifier: EC:21:E2:0C:7E:50:4E:14:04:AB:F6:74:C0:91:D3:51:CB:BB:0D:9A
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019D382EACFD1C7F7991DFCA9C6C8EB87570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0C7C
Signing time: Sun 29 Mar 2026 06:01:16 +0000
Manifest this update: Sun 29 Mar 2026 06:01:16 +0000
Manifest next update: Mon 30 Mar 2026 06:01:16 +0000
Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=)
2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: OV58ppe7OqAAD/xEuvemvmTnBm752UCOW16WmJ0v3vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ac:fd:1c:7f:79:91:df:ca:9c:6c:8e:b8:75:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Mar 29 06:01:16 2026 GMT
Not After : Mar 30 06:01:16 2026 GMT
Subject: CN=ec21e20c7e504e1404abf674c091d351cbbb0d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:7a:8d:41:1f:46:e1:19:a2:96:d9:ff:3a:
d9:bf:93:7f:0c:69:4d:aa:1d:b1:ac:72:9d:58:9c:
be:d3:a3:97:58:38:0e:0a:84:15:fd:67:45:6f:3a:
fb:5a:fa:5d:67:32:50:28:7e:4d:ef:1e:c1:d5:3d:
49:b2:d6:8c:bf:0e:bc:df:ee:98:f2:ef:90:43:d3:
51:24:63:36:6e:67:c9:49:90:95:02:95:8f:f1:c6:
0f:6e:0a:60:b4:d3:91:46:66:eb:e9:44:aa:0f:77:
89:f7:f1:ca:02:f8:97:1d:34:04:18:f1:a4:56:28:
e7:48:61:2d:7e:2d:6f:4b:26:9d:48:9d:91:50:1e:
e2:a6:c7:79:da:5c:87:6d:2f:53:23:14:ad:10:87:
d5:9f:35:e8:f4:cd:32:72:93:72:ee:60:00:f8:75:
42:08:99:8d:1b:44:e5:b8:14:67:d6:c3:c4:df:d6:
1f:23:9b:9a:5a:8f:bf:37:57:4f:97:8f:bc:e9:93:
41:2d:b6:80:99:ad:4d:a3:b2:e6:29:8f:ac:53:93:
c9:af:7d:19:c9:ff:9a:c3:ac:ed:da:fd:1f:60:50:
c2:aa:93:c7:5c:f6:70:37:6a:ec:2b:4e:e1:e5:dd:
25:ec:c0:db:78:66:b7:7a:a0:de:ad:2d:3c:4e:28:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:E2:0C:7E:50:4E:14:04:AB:F6:74:C0:91:D3:51:CB:BB:0D:9A
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:36:a0:92:14:af:a6:37:8e:90:8b:20:ac:1d:11:22:87:67:
20:ab:a9:5d:6e:a7:5a:19:01:5b:12:03:0e:4b:a0:62:4b:5d:
e8:ea:e1:36:6e:a4:29:40:94:1b:4e:46:e5:d5:76:c4:f5:b6:
1c:4c:ab:cd:e2:1f:18:31:07:98:e8:1c:27:ef:e7:3c:d6:f6:
b2:09:06:45:f2:3c:ea:e5:e4:49:83:dc:7f:83:c1:aa:ff:a5:
c8:1f:40:61:ed:98:85:09:45:c9:df:de:40:26:81:1a:f3:9a:
d3:f8:7e:ec:53:c1:8e:73:1a:48:76:c2:04:03:aa:fb:57:ae:
9d:1c:4c:dc:92:b4:18:34:da:e7:a7:e1:a0:6b:d8:ea:18:18:
02:41:b0:93:89:2a:05:89:5c:e0:ea:38:61:0f:f9:1c:ff:7f:
ea:54:04:83:85:d1:94:1c:4a:fc:e7:f2:e7:18:22:28:c4:41:
02:af:77:c4:0d:5a:34:49:dd:42:3d:20:ee:37:48:7f:d0:ae:
b0:91:20:cf:2f:42:cf:00:c6:77:9d:b5:89:fe:d2:6e:44:ac:
23:ee:d7:7c:fb:d6:bf:ba:91:9e:13:7e:ec:4e:8f:fe:0e:2d:
1a:37:52:ec:16:c5:96:26:fc:3d:29:7a:f0:ec:b3:f7:c2:50:
bf:fb:85:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:31 2026 by rpki-client