Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File: Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier: 81/N2AAKOj2tdAPAeCLnjJCibtZc++im5CQ/8+LghtI=
Subject key identifier: C6:A9:02:DB:B3:61:F0:58:C4:F5:85:EC:31:C7:4C:C4:D4:68:A9:13
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer: /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial: 01A03F3B4315A366CBF039DC8506C06DF6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number: 04F3
Signing time: Wed 26 Aug 2026 18:00:43 +0000
Manifest this update: Wed 26 Aug 2026 18:00:43 +0000
Manifest next update: Thu 27 Aug 2026 18:00:43 +0000
Files and hashes: 1: 9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa (hash: EKwo4lR/lHxGWjUPRhdL7zbwa8l0PAt3OjON/sSOuEs=)
2: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: eN/wSOTvVL6cD9vLSXreo/B/eVL+cluOUy2WdagfrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:43:15:a3:66:cb:f0:39:dc:85:06:c0:6d:f6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Validity
Not Before: Aug 26 18:00:43 2026 GMT
Not After : Aug 27 18:00:43 2026 GMT
Subject: CN=c6a902dbb361f058c4f585ec31c74cc4d468a913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:9c:3c:47:8a:70:74:b2:5d:00:0a:28:02:
f9:ec:1b:0b:06:16:c0:87:3a:da:0f:ad:7e:6f:d8:
db:ec:dc:37:ed:c8:c5:d5:63:91:8b:dc:5d:c2:fb:
d7:af:ac:2b:b1:4e:7a:61:c7:8e:17:32:db:42:4d:
23:7b:bb:c2:ed:25:ba:21:ab:39:ad:c9:4a:a7:6e:
69:b7:83:84:ad:da:9d:9f:bc:71:18:21:59:76:6c:
33:31:dc:1b:45:6d:dc:6f:57:97:44:ee:d7:1a:33:
a2:bb:ae:3c:12:c4:9d:27:e0:6a:49:f7:89:04:e4:
c5:35:7e:ad:ef:65:f2:b0:ca:f4:7e:f0:f5:87:bd:
a9:96:3b:ff:55:11:39:f9:4e:a7:45:14:eb:64:d7:
38:a8:f3:68:e0:e6:49:64:ff:62:d6:54:47:c5:3c:
4a:c8:17:1d:da:1f:79:6d:00:af:23:e3:d7:d5:14:
1e:ad:5a:71:5e:bc:d7:ac:58:63:5c:09:46:e9:1f:
a9:84:67:48:06:e3:bd:66:67:3e:b8:37:8a:6d:50:
a5:21:b4:b6:f7:f3:97:df:9c:b8:c3:27:b0:3a:ac:
65:b5:c3:69:2d:bd:4d:76:4a:d5:2f:73:b1:93:11:
d3:d8:1b:7b:76:ef:27:bb:4a:02:32:3f:cf:9b:fa:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A9:02:DB:B3:61:F0:58:C4:F5:85:EC:31:C7:4C:C4:D4:68:A9:13
X509v3 Authority Key Identifier:
keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8a:d8:a9:ca:29:b8:49:07:4b:f2:cd:47:d5:14:c8:bf:56:
d4:48:38:59:8c:16:82:f1:0a:4f:3f:c7:e7:b6:80:f2:9d:49:
9d:a0:02:c7:bc:c6:2b:19:8e:b9:b5:9d:b3:8e:4b:43:81:8e:
53:93:08:b5:92:d3:55:a0:ea:46:2c:09:34:4c:63:eb:59:37:
86:1b:28:cc:e3:5b:e6:3a:40:8b:19:fe:44:14:ba:34:79:cb:
2c:22:94:a8:f0:ca:be:be:81:c5:31:b1:80:65:38:28:c0:43:
db:a6:e7:ec:20:76:88:b6:57:70:cf:1d:01:9b:7f:5f:15:fe:
2b:53:2f:af:f6:c8:34:36:58:6b:a7:4e:ab:9d:4a:66:c8:c3:
a6:87:83:11:77:f9:a5:70:6c:ee:fd:71:8b:25:12:fe:b7:32:
05:6a:d3:a5:2a:01:61:87:45:bf:78:c3:9d:bb:94:10:4e:02:
b5:0e:c5:04:1b:d7:97:50:02:31:80:f3:df:dc:9c:9e:7a:84:
b9:7e:21:09:ac:b4:36:68:e2:e4:fe:64:c2:d0:fa:18:4c:a0:
ce:50:91:af:0c:ac:6a:a0:fe:77:81:e7:e0:9d:3a:8a:fb:24:
7c:fe:52:b9:6e:45:f6:ed:83:dd:f8:d8:c4:5f:3f:14:d9:e2:
94:db:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:36 2026 by rpki-client