Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: kYfWc3XwwQB18nX64m5M2p0jAfLExxIB3/W1dgkP2Io=
Subject key identifier: 51:8E:01:BB:C7:4B:E0:1E:98:8D:FB:95:C0:54:42:9B:B0:FA:2F:7C
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 019FA372E37FACA89E56F594F8CDB10ACFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 12:00:43 +0000
Manifest this update: Mon 27 Jul 2026 12:00:43 +0000
Manifest next update: Tue 28 Jul 2026 12:00:43 +0000
Files and hashes: 1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: +0SycKiHgDs00EV3CBtTlajT+bQjkkU0X7M67adXG6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:e3:7f:ac:a8:9e:56:f5:94:f8:cd:b1:0a:cf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Jul 27 12:00:43 2026 GMT
Not After : Jul 28 12:00:43 2026 GMT
Subject: CN=518e01bbc74be01e988dfb95c054429bb0fa2f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:73:db:f1:51:13:a3:36:7e:78:a3:d1:39:
c6:01:92:f1:cb:63:d0:20:d5:75:18:16:cd:ec:db:
f4:6b:5c:a4:74:11:7a:ac:21:aa:91:d0:6a:94:66:
f0:6d:ee:c8:c2:fa:50:dd:db:f6:e3:15:58:87:04:
33:c0:e1:b8:13:16:92:ad:21:58:49:f5:f3:19:97:
81:f1:d4:47:2b:02:b1:07:c0:a5:e1:0c:78:7e:29:
76:97:a5:f5:31:a0:9e:a5:c7:e8:39:1c:63:e9:61:
5b:32:a2:42:09:d8:0e:29:7e:72:30:2d:90:92:b6:
74:0d:74:23:58:be:ef:41:a1:d1:8b:35:19:bd:df:
14:4f:75:ce:fc:b0:81:aa:86:59:98:c0:8b:d8:3f:
f3:57:db:4c:ee:d6:ee:9c:93:48:ae:4e:65:7f:bf:
fd:d3:71:ed:6d:e9:9b:1e:0c:b0:49:69:57:0e:71:
3d:6f:f5:97:3a:ec:5b:46:28:c0:1d:4a:38:f0:fc:
1c:5b:2b:c5:41:00:3c:cd:40:70:9f:a4:8a:a0:ff:
6a:ec:69:c2:d1:40:db:28:bd:a9:49:01:14:2c:65:
c0:50:12:f1:71:cc:fb:f9:b9:01:6a:b3:cb:0e:42:
13:6e:5c:46:0e:6a:3d:7e:a4:98:eb:16:72:b6:fb:
ed:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:01:BB:C7:4B:E0:1E:98:8D:FB:95:C0:54:42:9B:B0:FA:2F:7C
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:5b:43:01:75:66:67:50:28:bf:ed:f7:e2:d4:ca:bf:ec:f2:
1a:75:26:e6:fa:41:b3:a8:39:57:ec:78:ea:ba:4c:ec:c5:38:
8f:ca:dc:7b:10:c6:70:de:b3:77:ca:80:b0:24:8a:21:a0:fc:
5e:75:14:44:59:e5:67:0c:35:d1:11:22:a3:85:4c:45:e5:40:
7d:ee:ed:1c:74:d1:78:a3:b8:b1:5c:98:f2:c1:3c:61:01:14:
8f:29:ae:60:d7:61:96:b5:19:af:d0:f4:80:d7:8f:e8:1f:5b:
80:f1:8e:b9:64:6b:2e:47:43:76:8d:ed:13:b2:61:a1:02:6f:
d7:e0:05:9e:f4:73:02:34:82:5f:03:bd:b5:a1:0e:3b:e7:3c:
c6:42:b1:2b:39:d3:c9:fe:cf:94:28:07:82:ed:d4:16:93:c7:
9a:35:b7:2e:6e:00:21:ea:2c:47:9a:8e:79:7b:f4:5c:bc:03:
a9:7f:95:68:39:d0:0b:62:3f:bb:82:f5:ad:3f:6c:75:2b:24:
51:7b:05:c4:2c:a3:0e:8e:1e:33:ca:6d:87:53:a9:bc:64:eb:
70:23:aa:7a:a3:eb:1b:26:ca:3c:ca:41:14:87:b4:98:c3:47:
a5:e4:ac:ca:62:68:30:7a:cc:ac:45:5c:48:32:54:3a:1e:0e:
a9:65:8b:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jcuN/rKieVvWU+M2xCs/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzNhZmQ0MWVhMDEyZmIyODAzYzcyNzQ1MjNjOGVjM2Yy
NjEzMTEwHhcNMjYwNzI3MTIwMDQzWhcNMjYwNzI4MTIwMDQzWjAzMTEwLwYDVQQD
Eyg1MThlMDFiYmM3NGJlMDFlOTg4ZGZiOTVjMDU0NDI5YmIwZmEyZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCpz2/FRE6M2fnij0TnGAZLxy2PQ
INV1GBbN7Nv0a1ykdBF6rCGqkdBqlGbwbe7IwvpQ3dv24xVYhwQzwOG4ExaSrSFY
SfXzGZeB8dRHKwKxB8Cl4Qx4fil2l6X1MaCepcfoORxj6WFbMqJCCdgOKX5yMC2Q
krZ0DXQjWL7vQaHRizUZvd8UT3XO/LCBqoZZmMCL2D/zV9tM7tbunJNIrk5lf7/9
03HtbembHgywSWlXDnE9b/WXOuxbRijAHUo48PwcWyvFQQA8zUBwn6SKoP9q7GnC
0UDbKL2pSQEULGXAUBLxccz7+bkBarPLDkITblxGDmo9fqSY6xZytvvtsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGOAbvHS+AemI37lcBUQpuw+i98MB8GA1UdIwQY
MBaAFG8zr9QeoBL7KAPHJ0UjyOw/JhMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTIt
YjM1ODA5OTRhM2IxLzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZWFmN2YtYWIwMC00MmIyLTljZTItYjM1ODA5OTRhM2Ix
LzEvYnpPdjFCNmdFdnNvQThjblJTUEk3RDhtRXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVtDAXVm
Z1Aov+334tTKv+zyGnUm5vpBs6g5V+x46rpM7MU4j8rcexDGcN6zd8qAsCSKIaD8
XnUURFnlZww10REio4VMReVAfe7tHHTReKO4sVyY8sE8YQEUjymuYNdhlrUZr9D0
gNeP6B9bgPGOuWRrLkdDdo3tE7JhoQJv1+AFnvRzAjSCXwO9taEOO+c8xkKxKznT
yf7PlCgHgu3UFpPHmjW3Lm4AIeosR5qOeXv0XLwDqX+VaDnQC2I/u4L1rT9sdSsk
UXsFxCyjDo4eM8pth1OpvGTrcCOqeqPrGybKPMpBFIe0mMNHpeSsymJoMHrMrEVc
SDJUOh4OqWWLuA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:10:44 2026 by rpki-client