Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: m0Cw7X+HniTVJ/mLAjtwNvPqCuSTNWZz5Dz1KQTLiqo=
Subject key identifier: 2D:0F:12:EA:29:B6:D0:9D:A3:51:38:C1:5B:BB:C6:2D:CC:8C:2A:1C
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 01A08B315EE73A23BDC8BB7A880D1225037A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 12:01:03 +0000
Manifest this update: Thu 10 Sep 2026 12:01:03 +0000
Manifest next update: Fri 11 Sep 2026 12:01:03 +0000
Files and hashes: 1: 6QL-slvQFdh5mvAbIdNlA4MoLfE.roa (hash: xCB6LBupsekAKglg6eVWd5d4GZfCpoZMakFZRmJ0HsM=)
2: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: FBVCtpjt/hvu8cev4Egz9Betfjh+tuHldqcafMhFHQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:5e:e7:3a:23:bd:c8:bb:7a:88:0d:12:25:03:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Sep 10 12:01:03 2026 GMT
Not After : Sep 11 12:01:03 2026 GMT
Subject: CN=2d0f12ea29b6d09da35138c15bbbc62dcc8c2a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:50:c7:de:0b:72:bb:da:cb:a7:6a:ac:f4:
84:5f:f7:bc:08:ea:ef:16:24:99:55:0c:d0:a3:8e:
b6:1d:50:cd:f3:6a:bd:fa:88:40:63:49:cc:f8:7a:
34:48:cd:32:1a:7f:63:bb:9e:78:cd:34:62:16:a1:
a1:08:fd:c2:0f:aa:7d:9e:63:93:69:24:73:c7:2f:
06:c5:99:cd:f2:12:3b:e6:d1:a7:95:d3:11:4a:31:
3d:43:37:0c:83:d7:10:49:8c:f9:35:0e:7c:92:34:
8e:b9:59:f1:e9:5b:ca:65:e4:fe:9a:52:04:e0:af:
17:6d:14:01:17:24:9c:84:6c:cc:da:aa:e5:e1:df:
98:66:86:55:cd:0b:6c:9b:b2:79:c6:57:38:6f:72:
cc:c0:c5:3c:fb:ea:32:79:a5:fb:b2:c4:bb:1c:e3:
9c:48:60:45:c5:7c:1f:49:da:b6:49:39:66:70:80:
e3:f6:0f:a0:01:b2:5b:b3:74:d3:68:7e:d0:df:49:
93:3a:ac:89:d6:24:40:d2:ba:00:5a:49:aa:dd:13:
f7:16:9d:42:32:bf:b8:85:54:e0:c5:5e:61:a1:5d:
23:05:11:48:7d:87:ac:71:85:d7:ba:9f:d9:af:09:
06:87:07:f4:f0:7d:8c:e0:98:3a:f2:30:70:41:d7:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0F:12:EA:29:B6:D0:9D:A3:51:38:C1:5B:BB:C6:2D:CC:8C:2A:1C
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:de:f4:f7:72:3f:68:b9:01:05:e1:95:2a:d9:b6:11:50:fa:
c4:12:d6:65:32:1d:bd:25:29:e6:37:23:27:8f:57:1d:5a:97:
f4:2d:9c:f6:47:9f:f7:6d:21:03:73:fb:44:c1:67:b3:a6:a9:
b8:ae:c9:73:7b:16:b9:66:c5:b5:21:a5:24:19:d1:f2:97:1b:
30:17:5f:4f:89:09:77:95:a9:ee:45:5c:7b:3c:5e:4d:8a:cd:
64:4a:a3:aa:ae:99:5d:04:50:83:03:91:e5:70:12:e2:60:e8:
16:2d:e0:71:68:c8:bb:18:7a:e4:37:ab:51:85:35:b2:6d:18:
be:09:4b:e5:d8:ba:1f:bb:66:de:d9:bc:9f:07:6c:9a:15:ff:
dc:2f:a3:94:94:04:6a:4b:ea:19:78:cf:b0:04:b5:ba:56:a4:
81:d7:38:98:2c:5e:07:e3:3e:10:cf:06:fa:10:9d:ee:e5:a1:
de:8b:f4:80:ea:7c:e8:cf:d5:82:f2:41:6b:19:03:eb:f2:d8:
e1:ed:17:0b:d9:78:b9:60:02:dd:ea:78:76:82:97:68:af:72:
d8:d0:d9:09:03:9f:37:f5:18:8e:74:f6:aa:6a:eb:4a:ee:ad:
77:c7:ee:7d:55:c6:99:6c:9b:10:e4:85:99:85:74:0b:a5:e2:
18:2c:bd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:54:50 2026 by rpki-client