Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: hubeNSvH92uzWNKlxDu0pN2b1cFP4xxy1GsHrfNmDbE=
Subject key identifier: 6E:2C:D3:EF:43:D7:B5:A2:2E:BA:94:90:64:F9:42:14:C2:9F:DB:B4
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019D27A8C903D256BB5D21E5797096AF266A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 162D
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: a7sCuiuu7dNZe2uz2d9x0wj7xzV9EnfBtXfSDrEsV8I=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c9:03:d2:56:bb:5d:21:e5:79:70:96:af:26:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=6e2cd3ef43d7b5a22eba949064f94214c29fdbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:22:5c:44:5f:58:87:68:39:ca:c6:d1:e1:8d:
b5:f0:eb:5a:a6:91:23:0a:0f:ed:b2:d3:06:e5:e9:
ed:89:19:ae:ca:7c:8d:fd:67:1e:aa:5d:3b:c5:23:
89:a9:2b:e3:bd:e4:4e:e4:b6:7d:bf:b0:2f:0b:e2:
26:d5:a8:e4:ce:83:61:bd:d9:10:66:42:53:8e:e0:
22:7b:e9:06:2b:08:fe:04:90:72:b8:2a:d5:45:c8:
3b:28:8a:cc:9e:e9:c7:60:63:00:5a:a3:d6:f8:80:
76:2e:17:5c:08:01:e7:1c:d4:64:26:9b:1a:b1:de:
0b:0d:6d:c7:17:38:a3:22:7c:dd:24:f6:f9:06:11:
09:7e:a1:45:87:6f:e4:f2:30:ac:66:9d:9f:11:7d:
28:3f:89:95:67:3a:d9:99:c4:8d:ff:59:9d:dc:ed:
83:c4:f3:b2:0b:d9:bf:9a:87:36:c8:8c:bf:ee:69:
36:6a:cb:28:b5:01:f2:84:c6:d5:0a:fc:4d:61:ec:
25:9b:9d:fe:8c:33:f4:4e:68:03:ac:bc:f3:c8:1b:
9b:24:d2:87:40:70:e6:44:26:19:86:6c:dd:2f:7e:
de:3b:63:e5:23:8a:a3:a5:b1:36:ec:f5:a5:f9:38:
cc:40:a8:7a:39:16:98:26:3c:c0:11:33:ae:86:ae:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2C:D3:EF:43:D7:B5:A2:2E:BA:94:90:64:F9:42:14:C2:9F:DB:B4
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:50:62:d0:9d:dd:b1:c5:71:29:66:01:20:17:eb:e0:06:b4:
f6:26:3c:bf:53:5f:79:ff:e9:8a:3d:26:8d:e7:d2:9e:27:a2:
a3:0d:d8:0e:12:4b:c0:db:fe:3c:9d:c8:ad:25:40:2e:ea:38:
18:48:ba:ec:1a:30:5e:43:76:02:d3:86:cf:25:36:98:40:f4:
01:78:e4:9e:fa:2a:7c:e9:20:3e:90:a0:fa:11:6d:9b:80:e8:
72:56:a9:65:28:bb:aa:d1:0a:1f:f9:98:8b:6b:67:99:87:64:
e3:8e:0f:11:4b:c3:86:14:6c:40:1c:e1:ab:d7:ca:9b:2a:d8:
93:07:ae:b5:dc:d6:c7:b1:47:89:54:c6:76:90:da:c5:0e:c4:
42:be:c7:4c:2d:04:62:a8:dd:c4:31:cf:07:60:68:2c:de:b2:
4e:44:c9:ff:8f:5a:51:6d:f5:eb:33:5f:57:91:82:0d:4f:c7:
92:af:bd:52:c5:ba:41:7e:04:c5:a3:6b:04:5a:6a:15:2f:3d:
84:47:f5:11:72:df:20:63:52:4e:3b:06:58:cd:70:62:9a:2e:
8f:eb:cb:d0:71:58:0c:f6:7c:56:69:46:57:a0:52:90:fe:1b:
7d:d6:bd:b7:e0:e5:e8:05:4a:ea:6d:07:dc:da:b6:b6:c2:da:
90:07:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:48 2026 by rpki-client