Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: W46ijquZDPbkEqgmPbx9qJyzSsl9nLw4nAGEyvDU1rg=
Subject key identifier: 4A:A2:C8:E9:AE:1F:42:14:EF:82:16:46:65:F8:09:9A:F7:5C:D1:4F
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019E1EDA6BDF19B1B2C55C7E5E4012F01DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 16AD
Signing time: Wed 13 May 2026 01:01:31 +0000
Manifest this update: Wed 13 May 2026 01:01:31 +0000
Manifest next update: Thu 14 May 2026 01:01:31 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: 5+GFloqsbSuJkQmBXB2eDgW+DFPWT0F4P88PhABI2NM=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:6b:df:19:b1:b2:c5:5c:7e:5e:40:12:f0:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: May 13 01:01:31 2026 GMT
Not After : May 14 01:01:31 2026 GMT
Subject: CN=4aa2c8e9ae1f4214ef82164665f8099af75cd14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:a7:c6:8b:08:d4:3e:7c:50:c7:61:66:de:
a4:ae:11:5b:f0:0e:f9:6c:3f:45:8c:f3:f4:b0:c7:
39:24:59:87:b3:3a:e6:51:8e:7e:c4:34:44:d8:06:
04:b2:a1:c5:ad:d1:f4:04:e7:32:f1:1f:1b:cc:f3:
95:77:21:8a:7f:66:8d:53:6f:83:60:1a:b2:be:df:
b2:59:fb:f5:e9:af:61:e7:39:16:4d:0c:56:a7:54:
e3:68:71:25:88:f9:f0:e1:c0:b1:d3:e9:77:f1:9c:
59:8f:d1:89:7c:02:b7:36:6e:e8:01:ca:45:71:8e:
f9:eb:68:f1:85:f7:68:3e:db:aa:c2:2c:61:5f:fe:
3f:42:1a:fd:df:59:ac:f7:f2:f9:d8:0b:97:4c:d5:
54:4b:3f:00:47:42:4a:62:9b:d5:a1:9b:b0:24:b2:
00:2a:bf:36:cd:7c:eb:32:41:2a:7c:1b:c8:b8:08:
13:40:11:a5:ed:1d:90:a4:5e:6b:d4:fb:46:b1:7a:
29:dc:dd:ef:2b:c0:57:46:29:16:e3:3f:ce:fe:bb:
c2:d5:6f:ef:82:de:a0:f0:fe:cd:2a:22:ea:89:f3:
8b:b8:ad:7c:e1:85:a4:9e:51:5e:ee:31:2c:ce:70:
6e:f2:74:18:36:b6:13:3c:92:8d:49:63:a2:a1:3c:
91:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A2:C8:E9:AE:1F:42:14:EF:82:16:46:65:F8:09:9A:F7:5C:D1:4F
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:28:fb:03:33:5b:fb:80:6e:95:a1:85:80:cd:73:24:99:4e:
37:d8:4c:c9:f4:dd:ea:8f:99:05:48:bb:6a:6d:24:dd:a7:8f:
03:42:8c:33:28:42:db:97:bb:32:f4:93:12:d0:f3:b5:ac:3f:
b0:29:ab:f0:b4:06:92:4f:38:c9:50:0a:19:ca:86:12:e4:aa:
91:8a:3b:45:d6:9f:cb:7c:e2:9c:ab:99:02:87:d9:70:14:96:
5a:95:4b:fd:ca:9b:43:1a:be:3b:27:37:0f:f6:e9:ee:1c:1e:
4d:0e:3a:32:ce:e6:57:27:68:b5:6a:c6:8b:ea:b6:d8:03:d3:
cf:d9:28:d9:f2:ac:d7:05:23:0a:e7:24:a9:c8:b7:51:aa:a2:
e1:81:c6:c8:1b:67:32:c3:c0:18:e9:0c:1e:26:4b:bd:b3:73:
3e:16:f3:6b:08:1a:11:26:7a:1f:b1:bc:6d:22:78:59:f7:62:
c4:2d:4e:b8:22:9d:9c:96:d5:e2:77:33:1b:ec:da:07:9c:8b:
e3:3a:41:4c:fc:92:29:79:c5:26:be:50:6b:80:42:b7:1e:8d:
cf:b7:d7:7b:62:6b:e3:f4:c8:4f:e1:80:a7:df:ac:de:e2:43:
7d:fb:28:48:02:a0:68:d6:1a:3c:37:f5:84:fa:cb:f9:58:d0:
96:a6:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:35 2026 by rpki-client