Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: oyKSaRIH5hlmVhI8CwD0ICBCzXDaPe69OTPovNwt22Y=
Subject key identifier: 31:19:80:66:04:36:F4:02:D8:D2:F2:C9:B6:9C:49:02:B4:70:17:4E
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 01A1863F80535CDB06187D2EE7C295CA6CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 1ACA
Signing time: Thu 29 Oct 2026 06:01:10 +0000
Manifest this update: Thu 29 Oct 2026 06:01:10 +0000
Manifest next update: Fri 30 Oct 2026 06:01:10 +0000
Files and hashes: 1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: WA2Aif0Mn6lfdCjqDJCrXPojqz5/S2BLA00mC6/2ehM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:3f:80:53:5c:db:06:18:7d:2e:e7:c2:95:ca:6c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Oct 29 06:01:10 2026 GMT
Not After : Oct 30 06:01:10 2026 GMT
Subject: CN=311980660436f402d8d2f2c9b69c4902b470174e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:65:bd:c5:c6:43:00:f7:92:4c:f2:15:eb:7e:
2b:70:4b:f3:fb:40:39:f7:df:06:52:01:f5:b7:f8:
e5:43:cb:32:e2:c6:8c:1e:14:7b:88:bc:f3:06:5e:
a1:6e:89:fc:8e:e3:04:0d:65:1d:2d:17:16:e4:52:
09:c9:4f:ad:42:85:b9:b4:bb:a9:2a:b3:b5:10:75:
8f:95:3b:b6:48:79:be:4b:36:86:75:4b:a0:59:99:
7f:36:fb:a6:ad:5a:82:fb:87:69:26:69:e5:19:f6:
d9:9b:77:a6:6c:68:58:e7:36:93:56:32:ac:97:40:
3b:ae:1e:00:4d:a1:cd:08:c7:83:da:b1:ba:0b:48:
95:74:7d:16:6c:90:9a:22:77:c3:49:46:ba:ad:30:
95:c3:a2:62:f3:37:a5:47:45:16:3a:62:a7:0d:37:
4b:6e:84:91:ec:ed:c7:d7:a9:44:f0:e8:de:b3:fa:
37:5b:a9:d2:85:1c:42:f9:90:1c:48:0b:89:31:e1:
6d:24:4f:2b:f8:7a:5b:db:ce:74:a3:54:3c:35:41:
62:59:0d:d9:18:26:3c:22:0f:eb:ce:8b:c9:d5:b7:
30:b9:0c:fc:ff:e0:a5:1a:f0:cc:0e:f6:8f:15:45:
23:5d:77:f1:74:4b:17:9f:e1:16:25:52:33:52:06:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:19:80:66:04:36:F4:02:D8:D2:F2:C9:B6:9C:49:02:B4:70:17:4E
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:25:92:aa:5f:d5:23:aa:85:30:e0:e9:26:98:ee:c7:be:87:
45:2e:f7:40:0f:b0:e3:2b:93:b0:52:63:59:ef:f6:4c:3b:b3:
11:03:60:a6:c2:7d:53:dd:64:71:ba:1b:05:87:38:34:e9:6d:
fe:f0:b4:a5:3f:e9:99:66:0c:f0:95:b5:5b:ae:bd:f0:ac:90:
ee:8a:13:b1:9c:a9:cc:e0:ad:7e:cb:25:e6:79:f7:0e:5a:82:
55:17:bb:59:d9:af:81:d6:0b:b6:8a:78:aa:69:d0:d8:53:c3:
93:18:f8:30:22:5a:f3:50:76:2d:aa:ef:c1:2d:05:d8:f1:b1:
ca:1d:5c:e4:66:8c:22:7f:19:f2:c1:ef:cd:04:e2:d3:e3:98:
1f:e2:9a:e7:d0:31:77:5f:f8:ae:31:17:db:a5:6a:d4:9b:91:
3f:91:6d:61:53:ff:a9:ee:d9:29:c7:e7:d4:c4:8f:96:85:0e:
83:ea:70:c3:4d:9f:38:ef:f1:74:c4:94:3a:77:12:ae:94:a5:
23:17:69:8d:f0:99:60:a0:c4:26:b3:53:c1:cb:18:31:fc:12:
45:c0:5a:96:be:6c:96:a4:a1:54:cf:ef:ed:be:ce:34:d1:87:
c7:4f:c1:90:04:fd:d6:64:37:1b:15:18:0a:cc:89:41:99:7f:
cc:1b:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:43 2026 by rpki-client