Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: fO+kBK8V6dRepYe3Qsq6ea02vBXyIbzFsLUwm2n6pgI=
Subject key identifier: 39:05:40:44:64:24:4B:46:C5:62:C1:FD:BB:A3:D1:C5:AC:21:1F:AA
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 019D25BAD87D00F5A8F6343A68A2CC62D367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: 09
Signing time: Wed 25 Mar 2026 16:01:35 +0000
Manifest this update: Wed 25 Mar 2026 16:01:35 +0000
Manifest next update: Thu 26 Mar 2026 16:01:35 +0000
Files and hashes: 1: 6ePeykhqaQhVL-QnCvoOTxD9Ros.asa (hash: GVmazDbc6zY4gYDN2IdTWE16Nznjm0Wh9YlHlJskz1o=)
2: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: /Gtd9Bd3WuSa/Fzjjll2Pmi8QHL7xskfnUoLmTk/XCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d8:7d:00:f5:a8:f6:34:3a:68:a2:cc:62:d3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Mar 25 16:01:35 2026 GMT
Not After : Mar 26 16:01:35 2026 GMT
Subject: CN=3905404464244b46c562c1fdbba3d1c5ac211faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:49:c5:36:24:4f:2f:67:58:30:85:bd:6f:86:
e7:23:34:a5:d4:78:39:8c:c2:48:ee:05:2b:f3:43:
19:a8:f9:00:17:ee:85:05:ea:57:5e:36:73:b3:a0:
65:90:d3:c7:91:af:79:5f:49:89:b2:cb:b9:b9:f7:
cd:df:d3:0a:2c:95:66:eb:3b:ff:b4:92:cc:5d:db:
2e:d8:ee:bc:7f:f7:a6:8a:7c:41:24:1c:28:55:b2:
dd:44:42:f1:1b:50:9c:10:60:fa:f3:40:51:99:1c:
ea:1a:c6:15:65:99:8a:87:9e:b3:40:16:24:18:0e:
b6:ce:62:ad:e7:5d:98:a3:31:0b:bd:ba:c3:81:21:
31:fc:9e:53:11:8c:32:4d:f4:b1:39:63:73:b4:85:
2e:2d:f0:a8:27:eb:39:97:45:fc:14:49:28:e0:19:
07:e2:15:c9:3d:8f:bd:7c:3b:af:b9:0b:c8:2d:c3:
4d:2e:68:53:d1:17:0e:ab:06:31:f1:0a:4b:1f:2b:
a8:dc:ae:30:07:e2:13:2b:2a:57:af:e6:d9:07:4a:
0c:c1:2a:00:db:7b:fe:af:18:ef:c3:f2:7f:62:e9:
ee:b0:e8:ec:84:a1:6c:fb:1e:94:81:d6:21:c9:5d:
69:8c:0d:02:14:09:1b:74:cf:57:dc:a6:1f:9b:5e:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:40:44:64:24:4B:46:C5:62:C1:FD:BB:A3:D1:C5:AC:21:1F:AA
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4c:47:9e:d7:66:2e:50:48:86:cb:c7:1c:e3:cd:ff:99:fc:
4f:1c:dd:89:b5:d6:87:ab:79:e5:f5:e6:87:59:03:1d:52:3e:
f8:03:aa:c9:89:92:b5:af:94:91:08:ef:1d:a8:e6:76:ef:13:
c0:bf:ae:f4:64:af:a8:a6:59:36:2d:8e:bb:fe:51:6a:0b:15:
1d:ef:03:ac:1a:72:07:52:f7:37:91:05:8c:cb:39:7e:6b:97:
14:f6:4c:14:57:35:ec:78:06:19:dc:7f:f8:ac:7e:5a:93:4d:
41:16:b0:15:99:71:1f:da:97:90:dc:4c:70:43:14:f4:62:57:
f4:27:da:f3:56:6e:56:a8:68:bd:03:c6:56:d4:f5:7c:35:e7:
92:14:85:76:4f:d1:a2:c8:f8:e3:78:f8:11:9c:a0:a4:d9:cf:
33:a7:2d:10:4c:ea:d5:cd:28:a6:20:08:8e:56:9c:e6:af:e1:
e6:ab:83:2f:0f:f3:c0:12:34:fd:06:80:74:49:f9:a2:9e:2b:
91:7a:ee:ba:2e:d9:64:d7:b3:c1:4b:84:9c:29:be:80:3f:55:
a0:84:bb:bd:44:84:05:da:ab:60:f9:77:11:76:ed:88:d7:8c:
8a:d9:c3:51:ca:e2:80:03:ec:a0:ea:3d:c2:3e:c1:ec:25:84:
ad:cb:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:04 2026 by rpki-client