Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: 6zhkVAg8leIeGMjLXRFhRXnUxdsfDHet4BjYkR4dLNs=
Subject key identifier: A8:87:9F:CC:91:EF:95:81:F4:0E:CA:3E:42:AD:4E:C0:9F:43:90:67
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 019E314E785DD74B5061ACF1240BD64E6139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0CFD
Signing time: Sat 16 May 2026 15:01:26 +0000
Manifest this update: Sat 16 May 2026 15:01:26 +0000
Manifest next update: Sun 17 May 2026 15:01:26 +0000
Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=)
2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: 1ElX5F4jpa+X9PtcHpNplXYQyGyiH36cQxQfguHBxo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:78:5d:d7:4b:50:61:ac:f1:24:0b:d6:4e:61:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: May 16 15:01:26 2026 GMT
Not After : May 17 15:01:26 2026 GMT
Subject: CN=a8879fcc91ef9581f40eca3e42ad4ec09f439067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:2f:48:a5:24:fc:bd:d8:f4:f1:09:cd:8d:
a3:c4:10:0f:5d:80:7d:55:ba:f8:37:28:1e:d5:b7:
f7:a0:ea:df:c6:77:66:77:63:2b:eb:65:3f:53:18:
a0:fd:f7:46:cf:0d:49:34:bf:07:a9:2f:79:f2:77:
f4:6e:0f:9a:0e:00:a5:13:37:a9:27:51:a5:a8:a3:
58:dd:fa:b3:6f:7f:bf:e4:a0:49:51:11:f2:e6:1d:
4f:87:d9:76:ed:61:36:c5:b9:04:18:a8:08:b4:54:
00:e5:5e:bf:cb:04:bc:67:21:99:59:0c:7f:c0:75:
61:1f:ad:80:f0:c1:5b:95:91:19:f3:e1:64:89:f4:
17:63:f7:11:ae:7c:5e:5a:ed:1b:e0:2d:d3:7f:53:
93:e9:5c:64:39:e0:ea:cc:c2:0a:f0:29:a4:76:12:
80:8d:00:8c:28:4d:6c:68:73:c8:f6:87:63:18:f1:
7c:c6:1b:eb:14:a3:66:ca:e4:45:59:e8:91:f9:47:
a0:55:0a:16:7d:e0:c6:ba:cd:c7:d1:91:2a:ec:1e:
e4:60:fb:7f:ac:d4:a0:13:88:a3:8f:0b:9f:23:99:
bd:0d:05:be:80:f4:17:f9:23:eb:57:73:3e:34:b5:
06:7f:ad:c1:e8:1c:48:3a:b1:5e:54:22:98:d1:4a:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:87:9F:CC:91:EF:95:81:F4:0E:CA:3E:42:AD:4E:C0:9F:43:90:67
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:54:98:44:4c:23:4a:47:e4:e5:55:96:f1:bd:6e:77:c2:a3:
e6:a2:5f:5b:1b:1d:96:d1:84:0c:52:c1:1d:16:fb:26:d5:ce:
2e:0c:88:fb:d5:da:12:b6:97:c7:4c:15:a8:eb:16:fb:6a:d0:
0f:08:77:ac:dc:9c:58:13:12:21:66:6d:0f:ef:f7:ed:0d:ad:
4f:4c:1f:6a:3c:d9:1a:5d:64:65:81:f9:3b:6d:a1:79:22:7c:
70:9c:0b:30:8b:03:6e:b5:6e:52:a5:1f:0d:c6:ee:2f:77:a6:
f1:04:1e:88:f4:ad:9e:88:7f:6a:4d:80:c8:21:6f:b1:01:4a:
51:ce:d2:fb:e9:58:dd:fa:5a:33:73:5c:e0:a0:4f:08:cc:b6:
c0:70:1f:ab:71:10:88:2a:6f:0f:38:5e:50:dd:bf:13:78:94:
84:a4:8a:0f:75:39:5d:0a:99:65:e2:b6:c4:93:10:bf:38:25:
6d:3c:27:77:c3:43:ab:40:7b:58:88:b1:18:01:7f:cd:f6:5b:
bf:2f:28:bc:b6:46:8a:e3:32:81:37:b0:51:9f:68:8c:f5:06:
fe:c4:5a:7f:34:57:09:3c:d9:74:2a:7d:b6:ee:fe:4f:95:ac:
36:de:f6:43:c1:9d:1b:45:d3:a4:22:c3:f9:49:48:72:f1:dd:
14:0a:fa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:03 2026 by rpki-client