Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
File: x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json)
Hash identifier: KAF5X519TnkbXpvqNuJart9w0hXYsDbeunV5RKvgOGc=
Subject key identifier: B7:1E:BB:74:F6:93:61:6D:03:CC:6D:10:F1:5D:7F:E5:59:3F:26:21
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 019D273B416955EFBE362007045A5C5AF125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
Manifest number: 1128
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: Qt6UBSy6AyGq63QOVL4RXffcTic.roa (hash: DrxVhbMxa0VyjrLuDeUMjs53zIXiEcOYuKYWoHkcfHw=)
2: ap-XVBzw4zZPatC0RYn5qlV_mrQ.roa (hash: +C964lY3jvSC9YXuZCdEHQIGMY6YBYM0/bQTHHxKS1E=)
3: lJDrnLvMDgHk_fzThFsf8Cm6mX0.roa (hash: w3x9Am6AgVtB0uwWUskomuBF/D7slx352RaRjUM5kz4=)
4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: cHIwZ38eN89ielZQNX+xIAKGDyKudDv2vGxqhUVIsnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:41:69:55:ef:be:36:20:07:04:5a:5c:5a:f1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=b71ebb74f693616d03cc6d10f15d7fe5593f2621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:8d:b8:de:2f:e5:a5:65:ab:9a:3f:41:14:
aa:ba:aa:66:48:d5:43:b7:cb:0f:5e:fb:1b:21:8e:
c5:7d:30:52:0e:a5:43:e7:e6:07:2f:48:db:2c:7b:
23:21:90:7d:62:c3:6f:81:67:eb:55:12:7e:e6:69:
c6:a1:7d:da:00:91:37:1d:9d:8c:1b:12:66:29:c6:
00:39:ff:c7:70:c3:e5:9a:62:26:fb:92:40:18:cb:
26:de:de:69:fc:5a:4a:69:bf:b4:96:e0:13:cd:80:
ad:b3:46:a6:f6:47:f6:39:32:65:6f:cd:74:e5:a6:
b3:0a:0d:b8:20:11:70:2e:e3:64:ee:87:da:8e:a7:
8c:ee:a4:ac:67:d9:7d:38:c7:e6:0e:8f:35:2b:25:
e9:5b:a8:22:cf:a9:a5:4f:48:63:17:fd:95:dd:92:
c8:eb:d2:a1:b3:84:f7:59:02:f1:80:53:d5:dd:4e:
ea:da:be:9e:82:82:05:68:14:4c:d6:bb:88:35:30:
1f:17:3f:9e:ad:96:ab:d5:bb:e9:13:e1:76:8c:c7:
0f:e0:f2:8d:74:a9:30:4d:9b:09:77:ab:e4:2f:d3:
63:22:4d:50:2a:93:2f:88:07:ee:ec:c1:d5:f9:5c:
b7:ba:a1:4d:ba:5f:48:03:48:42:72:7b:4e:15:4f:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:BB:74:F6:93:61:6D:03:CC:6D:10:F1:5D:7F:E5:59:3F:26:21
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f5:a9:64:fb:bd:91:c3:0b:e6:b4:cd:81:8e:77:f7:f0:32:
8b:be:03:40:01:ad:60:5b:4e:df:c7:43:6b:57:c4:b8:f1:a2:
54:f9:e2:1b:d7:2c:52:80:3c:2d:a4:97:f4:61:38:d6:e7:67:
3e:17:3e:05:8a:d1:b3:b2:b7:65:62:df:59:47:41:71:63:2a:
ec:0f:42:45:01:e8:7b:bd:47:8d:3f:3f:cc:9b:2f:cb:c5:d8:
55:36:89:ae:ec:c7:24:0c:58:4e:8e:bb:f7:5c:e4:ff:01:1e:
b1:95:46:83:23:ee:9a:2c:39:37:f5:76:e7:d6:03:13:b3:a4:
4d:1f:dc:02:42:79:5a:b9:0a:45:c3:4a:91:08:8a:f8:97:7e:
f2:72:54:e1:c1:f3:6b:58:d9:e6:4f:18:5b:fb:bd:41:16:12:
0f:f4:b8:ac:81:8a:08:23:c1:55:15:8c:70:31:a8:3e:4d:23:
4d:52:90:95:5b:24:5b:81:c1:4c:18:0d:02:d5:3a:93:e3:bb:
5c:0e:95:d8:34:06:9a:4f:03:67:05:cd:89:8f:7e:f8:f3:8e:
b0:99:a1:8c:b1:de:24:a7:37:b9:1a:2c:b0:82:5e:96:0e:c4:
a8:b1:8b:04:a7:5c:3e:48:ec:07:30:f4:e0:a1:21:9e:38:25:
da:ed:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:12 2026 by rpki-client