Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: gZZNzKZKDphaPGATKKtk7eyjrHDwwvm6TQEV+Fz3NVE=
Subject key identifier: 22:B9:A1:EB:3B:6C:67:35:9C:E5:74:21:D1:0A:B3:BC:C8:94:D0:3F
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 019E1EA2CD8994215BC225E376D4BE068491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 16EB
Signing time: Wed 13 May 2026 00:00:46 +0000
Manifest this update: Wed 13 May 2026 00:00:46 +0000
Manifest next update: Thu 14 May 2026 00:00:46 +0000
Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: PS+euxQKqtQ9WPFvbWVJRRZGTRo8rmATuaNIordKldY=)
2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:cd:89:94:21:5b:c2:25:e3:76:d4:be:06:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: May 13 00:00:46 2026 GMT
Not After : May 14 00:00:46 2026 GMT
Subject: CN=22b9a1eb3b6c67359ce57421d10ab3bcc894d03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:4d:cc:fd:1e:24:e7:4f:26:53:08:73:53:
71:fd:0f:19:80:1f:20:38:40:01:fe:03:e2:9e:4f:
3f:16:43:46:9a:06:87:ff:6a:88:44:80:aa:24:4c:
1e:0d:29:77:4d:d1:57:13:57:c1:62:12:e8:74:c8:
bd:15:cb:5f:5a:de:fa:29:55:c6:49:6b:f8:9a:6b:
6d:59:65:b8:24:57:b2:b5:ac:9a:2f:53:02:04:3d:
99:15:d1:32:d9:f4:48:3d:41:e0:18:ce:87:64:68:
1a:24:c2:40:2d:35:82:b0:7a:2e:8f:65:df:44:05:
1d:24:ab:d1:22:3b:6b:6f:63:d9:87:e1:00:46:6f:
8b:80:0c:69:66:a6:29:d0:73:0a:4f:8b:20:6a:72:
84:35:1d:50:e7:6e:86:90:39:58:2e:e9:bc:f7:91:
1b:fb:c2:cb:2a:d3:cd:d6:c8:fa:38:1e:b1:bb:a1:
58:2e:18:85:d0:2e:1a:d3:9c:74:91:16:9c:80:4f:
26:3a:1d:f3:b4:8f:d3:17:c9:e9:a9:e7:90:78:fb:
e0:d0:e8:15:ab:b3:b4:e7:71:1c:06:3c:6e:d2:83:
f9:95:b0:66:ed:17:cd:f0:60:31:01:cd:a2:82:a5:
82:6e:53:04:72:d0:b0:cb:26:b5:87:22:94:5d:a0:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:A1:EB:3B:6C:67:35:9C:E5:74:21:D1:0A:B3:BC:C8:94:D0:3F
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:aa:fe:07:0e:de:c3:cb:fe:ec:88:87:92:8e:f9:50:e1:61:
c7:76:0a:f1:33:6d:c7:34:14:58:29:9f:69:87:89:cd:e4:a4:
8d:1e:3b:3a:ca:1d:37:00:bd:c3:d5:ed:a5:35:20:1e:0a:a6:
5e:29:88:d0:4e:0c:23:72:23:13:63:a3:a9:15:7b:6b:7e:66:
87:97:75:0f:58:cf:86:0a:19:1e:f1:63:9a:de:73:df:85:2a:
57:77:f0:61:ee:c2:47:30:77:08:a6:ad:6c:5f:29:cd:b0:af:
7d:68:1d:a2:f8:93:10:25:69:ae:82:e2:8e:21:de:ac:5c:cc:
b6:c5:0b:5a:20:82:02:d0:4f:4c:6d:ec:08:90:87:1c:bc:a1:
51:69:1b:93:15:14:89:de:9b:81:05:5c:50:e8:3a:30:50:aa:
e8:dd:6b:d4:63:10:3e:d4:88:cb:86:df:e9:34:d4:fb:47:f1:
52:f8:bc:ba:2c:28:fc:89:bc:b5:74:1e:d1:41:c5:c5:55:44:
37:4c:37:5e:74:60:af:5a:e7:30:91:f2:7c:c8:70:42:4e:26:
c8:2f:44:0e:94:ec:cb:7e:e8:c4:96:7e:32:ce:c0:eb:f0:8c:
99:40:1b:28:d8:00:d4:fd:d6:21:3d:10:f6:3d:70:38:45:68:
0f:6c:df:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:19 2026 by rpki-client