Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File: Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier: CeXoi2+JWniouf8neZErRDNFCs/utUYuNGQPYvSmmiA=
Subject key identifier: 67:7F:31:9E:B5:25:C9:5E:31:EB:E5:D9:B8:FD:1C:10:52:CE:A3:7D
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer: /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial: 019F423F2646C2F150E4001A1FE50ECC1D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number: 0470
Signing time: Wed 08 Jul 2026 15:01:02 +0000
Manifest this update: Wed 08 Jul 2026 15:01:02 +0000
Manifest next update: Thu 09 Jul 2026 15:01:02 +0000
Files and hashes: 1: 9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa (hash: EKwo4lR/lHxGWjUPRhdL7zbwa8l0PAt3OjON/sSOuEs=)
2: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: xk7VZ6Sb/Pv3XiT6Qf64YC0VFvRqC4QDuyVl7QEdOJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:3f:26:46:c2:f1:50:e4:00:1a:1f:e5:0e:cc:1d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Validity
Not Before: Jul 8 15:01:02 2026 GMT
Not After : Jul 9 15:01:02 2026 GMT
Subject: CN=677f319eb525c95e31ebe5d9b8fd1c1052cea37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:1b:f1:43:24:c1:0f:0f:56:41:2d:5c:8b:
30:da:6b:33:d3:de:e6:28:2f:79:13:a8:45:34:4b:
c5:b0:f8:99:4d:e0:5b:df:c2:d5:3f:a1:fe:b5:d9:
74:98:2a:c3:39:74:09:cd:61:34:23:ba:e1:97:5d:
c2:02:04:12:26:d2:e8:50:98:6f:f4:9b:8c:24:aa:
f0:c0:a8:91:a3:fd:ff:75:45:d8:f7:9b:fe:fd:fa:
93:3b:17:c8:c8:5a:40:fa:1a:04:67:87:42:1d:79:
ec:d3:fd:9a:0d:a9:30:12:66:af:0e:52:a2:38:2d:
66:58:6b:05:15:fd:27:86:ea:94:3d:5e:ff:37:22:
eb:ec:c6:83:a8:c6:49:08:cf:36:c1:05:a0:d8:92:
21:83:2e:79:d4:45:df:6a:fa:86:0b:89:09:76:35:
97:ce:e6:c7:d0:bb:76:8e:1a:31:d4:fa:2f:5a:c0:
88:31:64:4e:ba:39:85:03:fe:fb:62:e4:82:ec:06:
62:45:46:12:40:1e:1d:55:b3:0b:da:21:23:33:29:
0a:10:8b:27:a1:be:bd:49:87:4a:80:a4:4f:ff:cc:
a2:d3:75:1a:41:1c:3d:83:58:fb:a1:48:02:5d:60:
8b:8d:08:86:f9:5b:60:0b:b1:ad:73:ae:56:42:b6:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:31:9E:B5:25:C9:5E:31:EB:E5:D9:B8:FD:1C:10:52:CE:A3:7D
X509v3 Authority Key Identifier:
keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:19:9a:13:1d:35:7f:5a:d6:48:de:1a:bd:59:45:93:4a:54:
d2:a6:fb:02:39:7d:98:0f:88:97:37:1f:43:3d:9d:fb:a0:5a:
b1:c5:9a:02:86:b9:e5:0a:41:76:bf:d8:40:f4:70:5d:69:f1:
d0:1e:99:3c:33:0f:de:37:a5:d4:5f:46:ee:f5:5c:45:b7:01:
2b:4e:25:fa:c0:fc:43:2c:90:d4:f4:8c:81:fc:06:4d:76:d8:
ea:81:bb:38:8c:ed:31:ee:61:11:98:3d:ed:9f:98:79:fa:f8:
51:24:67:e2:61:96:3a:75:13:91:58:b8:ab:46:1a:62:e7:b0:
55:4f:05:09:4e:e3:e6:1b:d4:84:3c:02:a5:d2:cf:c5:9b:14:
ee:c2:c9:06:e6:89:48:f5:91:f8:10:84:d0:cc:da:97:3e:59:
41:65:28:1a:ca:94:14:b4:d7:8e:79:ab:bc:32:b3:09:64:36:
6f:fa:57:f3:ff:16:d0:b9:92:91:a3:46:9b:68:48:20:31:55:
5c:fa:29:a2:08:91:b9:29:74:d3:f0:b9:97:e0:ab:2a:40:0f:
6f:f6:ce:44:e9:b8:42:85:e6:4b:16:99:6d:3c:5d:d4:b4:ff:
99:0d:49:a8:f6:03:a7:2e:92:5e:9f:52:28:ea:a7:54:c7:a1:
6d:49:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:57:23 2026 by rpki-client