Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: 1uArHpyUmmqmYb2J9fRs5fKssLloYh64yL+Jfpa9lRA=
Subject key identifier: 01:32:5B:4D:6D:8D:3A:08:19:06:DE:5D:D7:E8:B2:4B:27:24:35:18
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 01A0D64C3C0FD29366CC6E435C93986D1721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: 01F3
Signing time: Fri 25 Sep 2026 02:01:55 +0000
Manifest this update: Fri 25 Sep 2026 02:01:55 +0000
Manifest next update: Sat 26 Sep 2026 02:01:55 +0000
Files and hashes: 1: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: ioMAC8VH6kjMWRm6KPzoJp20RO4W8tiJ5KFrC4z+y3A=)
2: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (hash: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:3c:0f:d2:93:66:cc:6e:43:5c:93:98:6d:17:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Sep 25 02:01:55 2026 GMT
Not After : Sep 26 02:01:55 2026 GMT
Subject: CN=01325b4d6d8d3a081906de5dd7e8b24b27243518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:86:51:5a:5c:6c:0f:7e:ab:4d:e9:95:a4:
59:e4:2c:69:32:81:32:20:f9:dd:e3:9c:f5:13:85:
23:65:31:5a:cc:d9:ab:08:26:3a:45:50:53:5d:ca:
8e:7e:db:7f:32:84:30:67:1b:26:f5:14:17:46:e8:
79:d2:e4:08:27:7b:a4:da:e8:8d:b8:95:5c:a0:f9:
8f:e4:64:1b:c2:cd:01:bb:10:cd:15:7a:32:5c:73:
f6:d5:1b:f6:12:5b:88:d8:eb:55:97:86:f5:7a:85:
0f:3f:4c:2e:d0:72:dc:a0:f6:bf:e7:cb:10:17:15:
bb:b9:85:8e:aa:ad:c4:e0:d7:98:87:3e:de:88:b3:
90:fa:2d:e2:a6:dc:52:0f:9b:9d:d9:cb:c0:90:dd:
48:8f:05:92:56:d0:37:2e:82:72:11:bb:6d:5c:2c:
7d:ec:57:02:b4:62:82:e6:8d:92:4a:6d:ee:c7:d2:
ab:79:df:29:c0:06:36:5f:66:6d:7a:b2:0a:f6:3a:
2b:16:e7:b5:73:33:a2:ca:57:1b:76:f8:af:63:71:
06:57:a0:e6:90:7e:32:4c:8a:47:d8:81:28:89:b9:
31:d2:88:51:bf:38:75:25:b5:0d:27:fa:c4:75:78:
cd:95:fb:c6:7d:53:f9:97:91:87:c1:ff:56:4a:a0:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:32:5B:4D:6D:8D:3A:08:19:06:DE:5D:D7:E8:B2:4B:27:24:35:18
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1f:7e:cb:a9:15:3c:e9:d4:a7:25:73:3e:67:d7:69:53:18:
07:89:38:80:26:26:5b:fe:32:a2:50:09:38:aa:1a:11:cb:3d:
3f:22:59:8d:cb:da:b7:0a:c6:1b:6d:5e:3d:6c:5e:05:91:79:
b4:b6:c3:1b:d6:7f:f5:84:a8:d0:ac:6b:11:01:c0:3a:ef:3f:
01:f1:76:87:6c:ed:ed:98:60:64:f9:44:fb:03:99:0e:93:6e:
27:e7:93:40:65:89:7e:d3:de:4b:8c:8b:b5:fe:31:6c:0a:b6:
d0:1d:09:fb:8b:71:21:23:1c:e8:7d:22:ca:48:9b:73:0f:58:
87:ae:b5:3c:71:92:eb:07:7d:a3:96:64:cc:4b:fe:7e:cd:5e:
c9:d6:a0:1d:72:e9:f1:b4:94:db:c5:fd:d8:8e:8b:06:9b:03:
17:88:8b:02:d7:2c:1e:d1:8f:4c:19:bf:a4:88:7c:0c:76:0a:
81:ad:a5:4b:72:be:34:cc:2c:c5:c3:3a:cc:12:ad:54:fb:04:
b7:e4:72:35:8e:a0:22:28:65:ab:89:b1:fa:e5:ba:18:9e:e9:
27:53:0f:40:cf:2c:4e:84:40:95:6e:a6:6b:6f:45:0c:65:04:
bc:9a:c1:92:6d:10:39:90:3d:75:d8:94:69:ea:19:9a:73:78:
50:1f:be:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:23:13 2026 by rpki-client