Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
File: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft (raw, json)
Hash identifier: CJy88IqRqQR4Z5lSAa6PAgFwlDt5k7rAhXaLIQRgoSk=
Subject key identifier: 9D:2E:AB:16:0B:95:28:56:DC:4B:FE:A7:BA:E2:9B:38:9E:D8:29:19
Authority key identifier: 6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
Certificate issuer: /CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Certificate serial: 01A0F832C58DAFB9AB8E76BF0F6858551D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
Manifest number: 080D
Signing time: Thu 01 Oct 2026 16:01:11 +0000
Manifest this update: Thu 01 Oct 2026 16:01:11 +0000
Manifest next update: Fri 02 Oct 2026 16:01:11 +0000
Files and hashes: 1: Je_y8wxQvqCgs-B_X_JDDy6e4N4.roa (hash: EsZORo0khgTEum2xHY+MdLQ0jyUTYVdE3AQ38NpK21M=)
2: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl (hash: 5K6N/foWVFyDuZrTCuujvOo6UMdSYtiePLPsyRCFC+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:32:c5:8d:af:b9:ab:8e:76:bf:0f:68:58:55:1d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Validity
Not Before: Oct 1 16:01:11 2026 GMT
Not After : Oct 2 16:01:11 2026 GMT
Subject: CN=9d2eab160b952856dc4bfea7bae29b389ed82919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:50:8d:d8:92:2a:c7:01:07:9a:ff:4a:00:
65:d4:17:c7:44:a8:32:2a:42:33:a7:11:59:6e:3d:
f6:3f:6e:c5:ee:d4:a6:3d:d2:18:94:12:14:5b:ae:
e7:f0:60:df:09:cd:c7:ce:bc:10:d1:f7:30:d5:b4:
da:96:7f:86:81:7c:9d:70:36:bd:61:d1:9d:80:cb:
d7:0e:91:ac:47:85:d9:6f:8c:8b:c1:36:1a:99:2e:
28:ad:ea:63:66:fc:61:c6:89:f2:9d:0c:03:90:0c:
e6:37:1a:06:26:99:9b:bd:45:90:98:fe:12:1f:26:
01:a4:f2:9b:b9:7a:f6:36:5e:24:8d:f4:7b:c1:e6:
5c:8b:35:00:c4:c4:d7:e1:68:27:83:32:a2:bb:f8:
96:9a:20:e1:11:6f:f1:0e:aa:08:1d:e2:0b:d4:f4:
cb:3c:70:23:31:aa:27:67:89:77:c6:4c:58:5e:fa:
14:c5:d5:8a:71:18:e0:2d:3f:7d:60:fd:a1:d7:d9:
57:49:a5:4a:5b:2e:f2:5d:2b:c6:c5:22:c3:97:8b:
fe:7d:4c:36:af:d2:69:04:49:a4:75:b7:65:d9:b6:
dc:7f:43:31:4b:3d:e1:32:af:19:fb:5c:19:7a:98:
80:e9:f9:9d:8e:f2:42:c8:ea:7a:db:71:cd:6d:24:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2E:AB:16:0B:95:28:56:DC:4B:FE:A7:BA:E2:9B:38:9E:D8:29:19
X509v3 Authority Key Identifier:
keyid:6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a2:61:98:55:61:4f:ea:b7:01:48:6a:6d:52:4c:8f:96:22:
02:7a:b9:bc:05:90:11:32:a8:4b:95:8e:71:f9:93:21:bf:1e:
eb:8f:6c:d5:db:50:5c:e8:2b:de:5b:c4:99:55:66:8f:c6:de:
60:77:1f:9c:fe:79:b2:83:96:3e:af:95:15:e4:6d:45:66:d6:
1c:94:68:9d:ae:1c:f0:21:4f:bf:69:32:e0:52:a3:3a:1c:b9:
72:83:35:ae:f8:98:ee:4a:c3:3f:89:0c:93:bb:43:b0:2c:41:
b4:df:67:92:75:72:77:ad:7c:73:69:15:7b:6e:16:3d:85:1b:
27:94:2f:d9:7b:f7:35:d3:87:02:f6:ff:93:29:f5:1f:90:51:
26:4e:55:74:4e:df:d9:41:6f:b2:00:40:7f:9b:9d:28:ac:a6:
29:ab:df:fb:31:03:ea:3f:f2:74:70:44:aa:66:b3:4f:3d:b1:
a2:25:1a:2f:95:0d:05:1e:3a:9f:da:a9:13:ea:85:b6:6e:89:
f0:42:e3:44:cd:e2:9d:67:68:00:ea:b1:e2:1c:e7:8a:3a:e9:
98:5c:42:a1:0c:1f:5a:10:18:6c:ca:11:48:d9:59:42:c7:a5:
ec:8d:82:e8:5d:c7:a8:94:67:02:31:6e:dc:71:57:1d:10:af:
a2:43:63:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 12:24:53 2026 by rpki-client