Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: qjIOh0ZC45eLTX0VI4zlp+/rmD+y/BPII6KPRJqJ6tc=
Subject key identifier: D9:0F:1E:B4:19:E6:8E:90:BE:93:D0:C7:37:BB:E6:AA:8D:1B:65:27
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 01A0D23786FA24B4BD88EC4EC15A943914CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 1813
Signing time: Thu 24 Sep 2026 07:00:49 +0000
Manifest this update: Thu 24 Sep 2026 07:00:49 +0000
Manifest next update: Fri 25 Sep 2026 07:00:49 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: AQG2TbygUCmrnmVSp04ZrlyyoegianRp7HEAWflkSVg=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:86:fa:24:b4:bd:88:ec:4e:c1:5a:94:39:14:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Sep 24 07:00:49 2026 GMT
Not After : Sep 25 07:00:49 2026 GMT
Subject: CN=d90f1eb419e68e90be93d0c737bbe6aa8d1b6527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:18:28:a4:10:62:a5:a3:ca:5d:c9:70:06:
28:eb:ea:e0:14:01:eb:1c:6d:e8:a2:b5:ec:34:8b:
e4:bc:60:d0:d1:77:8e:fc:34:a2:c1:aa:eb:96:d2:
57:01:c8:54:fb:38:92:e3:c2:69:58:6c:8b:4f:25:
2c:4c:6e:ae:9c:3c:a2:22:85:8b:fd:2d:e3:ff:08:
72:4d:64:86:96:6d:94:1d:72:25:24:7c:72:35:f9:
13:85:fd:62:42:18:6b:78:ae:c3:f6:71:07:01:dd:
a6:d2:31:76:6b:d9:f8:47:ba:52:17:c3:1b:43:6a:
0e:58:d4:80:dd:91:a6:99:43:2e:68:06:84:48:0b:
fa:48:f4:68:39:40:a9:17:4d:72:bb:02:70:82:47:
74:bd:3f:9f:29:dc:28:47:a7:d9:f0:3b:50:03:ab:
28:ed:53:b4:91:07:05:2c:5e:5a:8f:af:6b:0f:df:
68:46:24:4e:24:ed:52:85:33:20:ca:fb:3d:07:1d:
47:bc:9b:b4:45:0e:f8:f0:40:ca:28:5f:74:96:19:
f3:bb:eb:c8:72:1d:c4:05:3c:95:94:b0:83:13:81:
5c:c2:bf:58:9a:eb:91:52:f9:73:ff:bb:a2:6d:bd:
7a:ab:55:e7:2f:de:99:96:4b:59:d9:59:cc:b2:54:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:1E:B4:19:E6:8E:90:BE:93:D0:C7:37:BB:E6:AA:8D:1B:65:27
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f5:0e:a7:c0:ac:ef:7f:be:10:43:3d:e3:2d:dd:50:e0:40:
09:9a:dc:70:0d:14:ec:ed:94:76:27:aa:cd:dc:d9:6b:0f:6c:
0c:5d:c4:ce:36:7b:d8:f5:f5:40:d1:37:65:8e:29:d8:63:0a:
ba:af:fd:0c:aa:c8:48:12:4c:1f:62:b2:20:20:ee:e6:d3:31:
b6:fc:4d:c4:08:fe:9d:5f:bf:21:e8:5f:d1:8e:97:9f:0e:8b:
20:43:56:66:73:2b:0f:7b:9d:e2:4f:d3:89:0e:4e:44:0e:d4:
58:1a:88:85:03:79:0c:a8:3c:ae:11:71:03:81:f1:6d:2f:b6:
77:0b:f3:e7:25:e2:48:ba:23:68:fd:c0:28:74:1c:6c:e0:0e:
21:c5:d0:1e:b8:0f:f0:c5:5e:e1:a9:4e:d5:c7:e9:c3:c6:88:
25:a8:92:94:77:67:2a:bb:29:76:60:8a:28:7d:d5:2a:f4:bf:
f5:25:97:1d:7d:ea:e3:e8:84:63:d9:30:41:34:b1:52:02:71:
de:6f:aa:3c:7a:27:71:bc:29:f6:cd:7f:62:eb:26:a0:b3:0c:
b6:7b:83:5e:4a:85:38:d2:e8:95:e9:c0:64:7b:8d:f1:23:35:
8d:fe:4e:4f:7d:c7:44:1f:d0:14:74:91:4a:a4:8e:72:cd:0c:
a3:e1:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:38:56 2026 by rpki-client