Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
File: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft (raw, json)
Hash identifier: HheEmWW00lSTpmfzrQFG8sEHm6xnHc/gtGr0Yvt2fGA=
Subject key identifier: D9:6A:D0:DF:59:16:2A:71:39:9C:9A:11:E5:E9:EB:47:9A:1D:20:9F
Authority key identifier: 6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
Certificate issuer: /CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Certificate serial: 019F92ED1FBCDEC4B3B82806C73D828BDCB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
Manifest number: 0754
Signing time: Fri 24 Jul 2026 07:00:41 +0000
Manifest this update: Fri 24 Jul 2026 07:00:41 +0000
Manifest next update: Sat 25 Jul 2026 07:00:41 +0000
Files and hashes: 1: Je_y8wxQvqCgs-B_X_JDDy6e4N4.roa (hash: EsZORo0khgTEum2xHY+MdLQ0jyUTYVdE3AQ38NpK21M=)
2: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl (hash: lF994UCoCyLOndQ8plt6UqwsaoX2AOOxuUTWFHGC9f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:1f:bc:de:c4:b3:b8:28:06:c7:3d:82:8b:dc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Validity
Not Before: Jul 24 07:00:41 2026 GMT
Not After : Jul 25 07:00:41 2026 GMT
Subject: CN=d96ad0df59162a71399c9a11e5e9eb479a1d209f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:72:a2:00:3e:da:d9:27:f1:b3:cf:63:a8:
7d:ef:69:ea:8f:1b:19:f1:3d:05:b5:f2:c7:41:8f:
e8:1d:3e:7e:4a:b5:56:49:69:02:a2:ea:18:ac:f0:
6d:49:c2:2c:89:98:ba:f1:1a:b2:7b:db:2e:b5:cc:
e5:75:f5:5d:b1:53:8b:4b:af:06:71:ec:c7:16:b5:
c2:d0:3f:24:4b:c4:44:77:8f:92:8e:e2:f7:06:18:
e9:74:e9:4a:7c:b0:09:a0:46:57:05:e6:bc:38:fc:
9f:96:c4:71:de:58:c6:9a:38:83:4c:43:c2:d7:68:
af:57:59:0a:71:25:f3:de:87:83:eb:05:ee:83:84:
67:91:2d:9d:c5:81:ad:c7:b2:17:2f:78:54:70:6a:
95:04:e4:6f:1f:14:da:3d:9a:67:e2:28:41:18:8b:
38:13:a7:bf:c2:70:e6:28:56:ce:b8:01:d9:27:fc:
57:b7:9f:87:bc:22:d5:b3:54:55:9b:b9:82:23:f3:
60:a6:73:be:9c:60:d8:26:e5:1f:35:e5:83:0e:9f:
2c:f3:3f:3c:34:de:f8:78:17:66:1a:86:a6:b1:9c:
ad:fe:dc:24:f2:42:5c:87:a1:3f:fc:d1:8c:ab:e2:
b3:5c:f2:92:08:f2:09:94:12:bd:74:3e:45:7c:b9:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6A:D0:DF:59:16:2A:71:39:9C:9A:11:E5:E9:EB:47:9A:1D:20:9F
X509v3 Authority Key Identifier:
keyid:6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:d2:19:8e:fa:58:bf:33:95:ea:b6:eb:fe:8f:65:ee:db:
72:33:8a:0f:fa:59:74:ea:4e:52:a6:21:a4:fa:16:d6:5c:9f:
f9:9a:e1:b9:46:8c:26:fd:14:63:ab:11:90:fe:8a:de:1e:04:
b4:0c:71:9a:e0:59:dc:9e:e4:0c:be:22:db:a2:12:e9:3a:28:
2f:be:b2:e7:44:30:29:96:d5:e5:f8:d3:71:7a:38:c1:39:f9:
97:aa:21:53:47:2c:68:c3:5c:41:9c:21:f8:7f:41:3c:fc:fc:
1b:9f:eb:c4:aa:a5:39:9d:23:5a:85:2e:2a:43:0d:ae:d7:df:
b2:b8:16:88:ed:90:9b:4c:59:7e:d2:2f:94:78:e1:f7:9a:61:
ed:5d:a0:a9:8e:9c:e1:03:8b:d6:02:32:b6:e8:db:b6:c3:20:
5e:6c:27:8a:b6:0f:1e:6d:ab:dd:26:1a:33:8d:cc:14:bf:3d:
f3:73:2e:55:22:ad:d1:85:f4:d6:92:ea:5a:68:66:09:98:8d:
f1:29:c6:d9:77:a1:97:8d:54:dd:fa:9c:51:90:f4:f2:5a:8d:
85:85:cd:e2:14:ed:72:f4:c9:3a:58:a0:f3:01:24:c7:14:97:
6f:7a:b0:23:2d:39:c1:99:05:33:9c:ad:a2:58:1f:be:c5:92:
a8:7e:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:52 2026 by rpki-client