Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: rQ+B+1d8hLopuEkoOGNwKFRGWVCsgHkBn0SGNArX5rI=
Subject key identifier: 74:08:71:9A:42:05:76:4A:81:47:8B:B4:8B:49:92:A5:85:74:62:0C
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 019E1D2359C96E6E15482F672CBB6C9BD309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: 8A
Signing time: Tue 12 May 2026 17:01:56 +0000
Manifest this update: Tue 12 May 2026 17:01:56 +0000
Manifest next update: Wed 13 May 2026 17:01:56 +0000
Files and hashes: 1: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: vOGgJMs+HIWlLWYc8ilHZBpjzvDqMT5wN+fsLl4CLTo=)
2: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (hash: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:59:c9:6e:6e:15:48:2f:67:2c:bb:6c:9b:d3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: May 12 17:01:56 2026 GMT
Not After : May 13 17:01:56 2026 GMT
Subject: CN=7408719a4205764a81478bb48b4992a58574620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:cd:7c:9b:80:76:94:97:7d:c1:58:be:e1:
16:ea:c4:cf:10:ab:35:20:43:c7:33:5f:66:16:66:
b1:a1:23:3e:7b:f9:13:fe:19:ba:6f:0b:0d:36:95:
61:2f:b5:b3:21:c2:0d:de:ff:24:d0:69:ee:85:f8:
c8:a8:1b:1f:c1:86:12:00:2a:4b:78:91:ca:e9:5c:
35:00:21:c5:c1:f6:2f:88:20:04:a5:05:f0:a2:ef:
89:5e:10:6a:c5:2f:b3:f8:cf:f5:54:d2:8a:27:1f:
a3:b0:30:b8:45:d4:4f:60:41:a2:19:b7:c8:72:af:
3f:dc:c1:30:0b:13:eb:62:75:59:28:00:34:b4:8a:
81:78:c0:87:1d:87:b8:98:da:00:3c:12:95:b6:20:
33:0d:3a:76:bf:72:9b:92:98:3a:c6:ad:47:10:97:
e1:f4:54:1a:f6:97:1a:7e:c1:ea:9e:c9:ce:a9:fd:
44:10:db:7c:5d:e5:be:62:7f:e9:4b:31:dd:83:ba:
a6:e3:ee:10:91:8e:0d:93:30:4f:e1:a0:36:31:ea:
9d:f3:a7:07:7c:4a:b7:a1:8e:73:8b:3a:9a:44:17:
80:45:71:d3:be:93:4c:a4:00:44:d6:c3:3f:78:03:
8a:ab:a2:ec:84:ca:68:51:95:0e:5b:5c:b1:14:cd:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:08:71:9A:42:05:76:4A:81:47:8B:B4:8B:49:92:A5:85:74:62:0C
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:19:d9:2d:dc:3f:38:f0:3f:c6:db:cd:bd:81:5b:f8:6e:8f:
aa:3c:31:02:b2:55:32:0b:9a:8a:b1:df:ca:9f:b8:c6:38:b4:
60:d9:c0:dd:18:cf:24:78:5c:1f:bf:20:e2:0c:21:a1:52:77:
66:bf:1c:08:12:0f:66:e4:5e:03:cd:fa:44:2c:bd:5a:f1:28:
93:57:da:39:76:8e:23:5b:2e:11:dc:b5:7e:99:b2:d3:50:bf:
76:70:73:d2:37:8c:14:e3:9c:b3:ec:d7:d7:0f:95:b8:3e:52:
3b:e9:1f:b3:e1:66:56:1e:bc:04:03:fd:c6:3f:7a:98:4b:1d:
b9:cc:13:71:01:5a:cc:7a:d0:dd:d0:c0:5d:9b:b2:6b:ff:61:
a6:80:ea:b7:a8:1f:e8:1c:7e:66:fb:55:c5:3c:89:78:21:67:
d7:77:53:7e:72:83:2d:25:1b:14:60:77:3c:a9:89:ea:47:f3:
cb:ed:96:47:cc:74:a1:53:24:4d:1c:b5:95:dd:41:86:05:3a:
ae:36:ad:98:69:1b:8d:1f:5b:71:66:91:f9:ab:a8:27:f7:70:
b5:76:bb:d3:1a:79:83:eb:0f:a3:f2:91:81:34:65:f7:ce:50:
c4:ec:bb:b7:e2:01:bb:f7:04:30:d9:bb:ae:56:f8:f4:ae:bb:
43:29:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:08 2026 by rpki-client