Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: 5iXjlvJQDms42BwiGTwW5wEKs2+RC+VkB0ozoNkwoCU=
Subject key identifier: CB:6F:69:58:FD:26:4B:4F:AD:1A:EF:AF:1C:2C:FC:50:E5:B0:8B:04
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 019F8FEC7C179A5B2C7F360694AB389CEC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: 014A
Signing time: Thu 23 Jul 2026 17:01:07 +0000
Manifest this update: Thu 23 Jul 2026 17:01:07 +0000
Manifest next update: Fri 24 Jul 2026 17:01:07 +0000
Files and hashes: 1: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: F/PqLWIF6/ByF6z+ZEOVMMyxwlt125gbA6ijVsMbgeo=)
2: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (hash: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:7c:17:9a:5b:2c:7f:36:06:94:ab:38:9c:ec:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Jul 23 17:01:07 2026 GMT
Not After : Jul 24 17:01:07 2026 GMT
Subject: CN=cb6f6958fd264b4fad1aefaf1c2cfc50e5b08b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d7:44:33:2b:40:91:b6:94:54:c0:b0:fd:8e:
d9:79:9f:32:46:8d:f2:cf:bc:a3:c3:1d:e1:b1:55:
0a:ca:d3:d7:e4:c8:ac:a4:aa:45:0b:1e:19:88:d1:
6e:3c:e1:44:f5:89:09:b5:9c:00:57:7b:49:fa:0f:
ea:42:46:ae:22:e1:6f:aa:29:f1:c0:2f:f5:80:91:
5b:98:12:a3:26:fe:7b:72:a6:f3:7d:76:0c:70:1e:
50:30:7e:dd:34:1a:a1:6d:ce:db:53:e1:b0:05:b1:
e8:41:64:c6:d6:45:3e:6e:60:ff:1e:7c:91:fb:d6:
40:b9:13:41:ae:77:e8:be:38:36:69:c1:7c:b4:13:
b4:cc:ab:33:ed:6f:18:16:36:de:65:38:94:bb:83:
1c:8d:24:02:43:7b:d9:ce:ed:50:f5:55:a0:49:46:
ca:f7:03:01:81:f9:2b:94:5f:f2:17:7b:a0:db:f1:
c1:89:4a:84:79:ea:2a:79:4e:f2:51:bf:f4:bf:e2:
44:f8:31:02:5a:cf:dd:e7:8b:0e:3e:53:f4:36:1f:
b9:8a:16:9b:83:69:8b:98:2c:ff:69:5c:a4:6f:94:
0a:9c:21:95:61:6c:63:fe:7a:14:cb:c0:05:22:e2:
83:46:52:9b:c5:de:8d:2a:3d:dd:1d:83:a5:d4:b4:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6F:69:58:FD:26:4B:4F:AD:1A:EF:AF:1C:2C:FC:50:E5:B0:8B:04
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ba:96:a2:03:05:a8:d8:bc:46:51:c5:91:79:54:b1:ae:fc:
22:f0:13:56:7e:fb:f9:74:28:9a:44:7c:a0:7c:fe:7e:52:46:
49:30:4f:fd:b6:b1:8f:0e:07:fa:1e:97:8e:34:e6:4f:de:15:
f6:9f:5c:be:d1:11:d3:ee:ff:3d:07:1e:c8:24:e1:d0:2d:51:
1e:f7:47:c0:db:0c:a4:29:7c:1b:aa:2a:65:b2:60:f5:3f:ba:
da:f8:89:f9:67:47:60:ab:18:e3:99:09:04:0e:97:45:ab:d0:
42:d2:e3:b9:ac:50:07:b7:46:17:24:43:7c:36:24:2d:e3:36:
4a:2b:81:cb:82:f7:b3:48:2e:4c:8b:ab:28:b3:a8:d1:d6:b5:
98:ef:8d:e3:d9:cd:93:23:c8:64:0c:63:8d:47:55:24:0c:2e:
f9:97:d1:ba:37:33:f2:cf:e4:87:34:6d:44:dd:0b:92:c9:d8:
a2:b0:12:4c:c8:78:75:b6:36:12:24:5e:28:32:c5:0b:14:c4:
86:10:6c:3c:10:1e:c0:ac:e4:cd:43:28:99:67:bc:ff:8c:c7:
55:38:44:d7:ae:4a:7b:2a:d9:eb:0f:8d:31:7c:7b:8b:98:3c:
c1:00:ce:51:3c:5d:88:6a:80:9c:90:48:7d:15:19:36:0e:04:
7a:41:f4:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7HwXmlssfzYGlKs4nOwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NTYxYzM4MjFlMzkxYWFhNDkxM2RiMWQ4YWE5MmJmMjIz
MjUxMmYwHhcNMjYwNzIzMTcwMTA3WhcNMjYwNzI0MTcwMTA3WjAzMTEwLwYDVQQD
EyhjYjZmNjk1OGZkMjY0YjRmYWQxYWVmYWYxYzJjZmM1MGU1YjA4YjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39dEMytAkbaUVMCw/Y7ZeZ8yRo3y
z7yjwx3hsVUKytPX5MispKpFCx4ZiNFuPOFE9YkJtZwAV3tJ+g/qQkauIuFvqinx
wC/1gJFbmBKjJv57cqbzfXYMcB5QMH7dNBqhbc7bU+GwBbHoQWTG1kU+bmD/HnyR
+9ZAuRNBrnfovjg2acF8tBO0zKsz7W8YFjbeZTiUu4McjSQCQ3vZzu1Q9VWgSUbK
9wMBgfkrlF/yF3ug2/HBiUqEeeoqeU7yUb/0v+JE+DECWs/d54sOPlP0Nh+5ihab
g2mLmCz/aVykb5QKnCGVYWxj/noUy8AFIuKDRlKbxd6NKj3dHYOl1LQjXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtvaVj9JktPrRrvrxws/FDlsIsEMB8GA1UdIwQY
MBaAFAZWHDgh45GqpJE9sdiqkr8iMlEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmxZY09DSGprYXFra1QyeDJLcVN2eUl5VVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zOTYxNjctYjY3MC00ZTM3LTg3ZGUt
NWJmNTk3Y2NmM2FjLzEvQmxZY09DSGprYXFra1QyeDJLcVN2eUl5VVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zOTYxNjctYjY3MC00ZTM3LTg3ZGUtNWJmNTk3Y2NmM2Fj
LzEvQmxZY09DSGprYXFra1QyeDJLcVN2eUl5VVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbqWogMF
qNi8RlHFkXlUsa78IvATVn77+XQomkR8oHz+flJGSTBP/baxjw4H+h6XjjTmT94V
9p9cvtER0+7/PQceyCTh0C1RHvdHwNsMpCl8G6oqZbJg9T+62viJ+WdHYKsY45kJ
BA6XRavQQtLjuaxQB7dGFyRDfDYkLeM2SiuBy4L3s0guTIurKLOo0da1mO+N49nN
kyPIZAxjjUdVJAwu+ZfRujcz8s/khzRtRN0LksnYorASTMh4dbY2EiReKDLFCxTE
hhBsPBAewKzkzUMomWe8/4zHVThE165KeyrZ6w+NMXx7i5g8wQDOUTxdiGqAnJBI
fRUZNg4EekH0Uw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:44 2026 by rpki-client