Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: FjLKmWcPlDroyDZuiatwKajX8HcE0nVuA6oBbNNGAxI=
Subject key identifier: D6:2A:7B:4B:A8:A1:E4:08:21:10:FE:D0:15:5E:D5:09:27:7D:0A:22
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 019D2771CC1992F79D6129707E2FB8EF1FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 17BD
Signing time: Thu 26 Mar 2026 00:01:02 +0000
Manifest this update: Thu 26 Mar 2026 00:01:02 +0000
Manifest next update: Fri 27 Mar 2026 00:01:02 +0000
Files and hashes: 1: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: gCRIfJieBakLoWFEjc123ubyoV3bZaAZwSrFm0zj2Sw=)
2: dfPlqF5Bgqr59PJATwAemysagHg.roa (hash: we4+dkipExQhf3pWjEb2Oj5eVIkZ4cWsxikVfB+DTTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cc:19:92:f7:9d:61:29:70:7e:2f:b8:ef:1f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Mar 26 00:01:02 2026 GMT
Not After : Mar 27 00:01:02 2026 GMT
Subject: CN=d62a7b4ba8a1e4082110fed0155ed509277d0a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:f5:cf:c0:43:dd:34:88:05:bc:ba:fa:3a:
f7:48:44:c4:34:ad:08:a7:22:ce:a1:61:97:cd:5a:
30:d2:96:52:95:8c:f0:4c:4b:f7:50:d4:70:f6:31:
6e:08:53:94:9b:72:63:ed:d1:e8:79:66:eb:9d:31:
8a:68:d1:ea:7e:e8:8e:38:2a:58:d9:a0:4f:f3:c2:
7b:36:7b:44:d2:92:1e:f8:c3:f8:f5:e9:a4:da:a3:
8b:f4:b9:ab:25:d2:7e:96:2a:37:cd:a8:fa:d9:0a:
84:cb:5c:8b:9d:27:61:68:f3:5c:aa:63:36:65:19:
13:a2:cb:73:f2:fa:b6:c9:b7:b2:24:00:de:90:64:
65:09:f7:e2:b2:3b:06:68:1d:0a:3f:d9:fd:98:4b:
fd:1f:1b:bd:4c:82:c0:3f:9b:e5:ed:3d:47:53:7a:
02:8b:ab:b5:52:c5:1c:ba:31:0d:1d:3d:91:c5:a0:
ea:91:cd:64:b1:1b:32:28:ad:c8:fe:1b:b3:90:7b:
eb:aa:e4:f7:0b:0a:53:72:15:c8:25:3d:fd:d7:52:
61:ba:da:c4:e6:66:2b:4d:07:9f:74:59:66:2e:0e:
a1:17:f8:a3:c0:b0:af:bf:33:2b:39:8e:04:46:0b:
d9:36:46:5e:b9:d3:7e:e3:fc:80:24:1c:7f:8e:07:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2A:7B:4B:A8:A1:E4:08:21:10:FE:D0:15:5E:D5:09:27:7D:0A:22
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4f:93:d4:79:87:1b:d1:85:57:45:7f:32:0e:c7:88:fc:79:
f2:54:4b:a0:b8:19:3e:73:aa:17:11:7c:d1:f4:ba:f3:51:74:
3b:f9:34:a0:e6:b2:f0:26:c8:c3:3a:1c:30:22:55:08:b0:a2:
51:96:21:3c:34:08:28:3b:92:d4:39:8f:af:f1:43:71:67:5b:
45:f2:03:3e:73:d5:65:39:ce:b7:c8:40:9c:b0:fe:64:84:ff:
44:f9:cb:60:63:29:f2:69:a8:ec:36:34:a7:4e:3b:98:7e:f9:
a6:16:ff:7e:a7:f6:74:9c:53:63:07:67:9f:21:0a:21:c7:11:
83:22:3f:b9:2d:67:43:47:09:d4:01:d7:db:02:c5:e7:61:18:
57:e8:0a:8c:43:3b:3c:cd:ee:13:51:81:b1:52:04:16:b2:ed:
80:f5:43:f4:d8:3a:67:eb:c8:75:aa:12:09:6b:e0:25:1b:d0:
f9:a3:85:02:7a:e1:2c:13:dd:02:9b:f4:9d:8c:09:7b:be:3d:
37:50:3b:14:aa:9a:68:24:1f:dc:e9:56:3f:bc:47:5e:c3:3d:
da:1b:8a:9f:07:c0:45:4f:2a:7f:24:42:a2:2f:0c:f3:e8:e5:
91:be:f8:3b:26:03:47:7a:d6:a6:3d:e2:07:cf:b1:a9:38:de:
ef:a8:1d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:39 2026 by rpki-client