Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: 6CA7kwgfWikKeshSHrM9bk6sZEOm5A/1j/HtQ73s6Rc=
Subject key identifier: E1:27:A9:D0:FE:B4:FC:DB:2E:26:EC:3F:10:FC:63:48:0E:B7:F3:04
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 019F8EA238E092B78DDE888B8C6DAC7C70B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 0856
Signing time: Thu 23 Jul 2026 11:00:23 +0000
Manifest this update: Thu 23 Jul 2026 11:00:23 +0000
Manifest next update: Fri 24 Jul 2026 11:00:23 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: OPY62onlrRZuEJ1XY6QHc6EHiVv4VQPnjubZYbbfjuc=)
2: XiOLVjMMRIXjDwamXxHQaw_QW5M.asa (hash: j0uAz4SCp4axiJ6lvLbL24SoF2CItfFxlFx3BSZUkLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:38:e0:92:b7:8d:de:88:8b:8c:6d:ac:7c:70:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Jul 23 11:00:23 2026 GMT
Not After : Jul 24 11:00:23 2026 GMT
Subject: CN=e127a9d0feb4fcdb2e26ec3f10fc63480eb7f304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:31:1e:66:06:ef:24:fa:c8:59:b1:56:0c:
4b:94:d5:f1:3a:9f:02:f6:9f:16:cb:4a:d3:f7:f3:
7b:af:8d:e5:78:db:93:86:78:22:c3:03:ec:47:a3:
aa:13:88:f7:01:eb:b4:65:81:6f:56:e9:27:96:72:
77:d2:b1:a9:29:5d:f7:a0:19:38:e4:0d:0a:2e:e3:
e7:ec:51:34:e0:be:22:3a:58:41:b5:06:72:bb:c3:
eb:87:a5:ce:f8:fa:31:76:89:fd:40:01:cf:4e:5c:
0e:75:4d:5e:b2:37:86:00:68:15:58:e1:b9:f6:50:
5d:d3:05:0c:97:6d:f3:1b:ab:21:3e:2d:76:41:4e:
ad:95:05:a9:c6:03:7c:85:30:ef:4a:b6:f4:61:b9:
4a:07:ad:ac:a7:13:48:8d:63:ae:3b:ba:71:ab:6a:
7a:da:d0:67:2b:ea:a8:02:44:2e:17:85:c8:4d:bf:
ad:46:dd:0f:4f:61:c8:cc:81:70:1a:96:6f:e8:f6:
00:c5:09:70:6c:fa:dd:8d:dc:78:22:6d:ec:f2:ba:
63:46:12:7b:00:83:85:10:c7:01:d8:61:87:ab:a3:
82:ff:a1:32:c0:f6:e5:1a:82:ed:9a:42:e9:a1:1e:
3d:68:a9:01:58:dc:6f:f9:71:26:e1:04:44:a1:b2:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:27:A9:D0:FE:B4:FC:DB:2E:26:EC:3F:10:FC:63:48:0E:B7:F3:04
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d7:fa:12:29:fe:6c:f8:7c:ed:43:62:6a:15:44:fb:eb:ad:
7e:32:96:de:35:fd:60:f7:26:3e:ae:34:de:9d:9c:c1:ac:26:
e2:43:1a:1e:13:f5:a4:dd:53:b4:73:c8:5a:81:91:05:b6:3b:
06:45:ec:e2:1a:1e:97:cc:27:4a:16:f1:59:88:c6:94:b0:a7:
58:fe:ee:e2:14:67:1c:65:1c:0d:46:88:1d:21:5e:61:d6:17:
1a:d8:7a:93:2c:c9:71:65:e7:34:35:3e:4f:30:f0:da:09:e7:
60:ff:ce:8c:af:29:2b:29:4c:15:11:cc:97:d6:56:94:0d:a3:
48:64:47:67:62:da:bd:d6:dc:64:d0:16:5f:f1:a6:07:c4:f8:
62:e3:a9:8d:e0:53:10:e4:75:8c:83:2f:ea:bb:27:fd:5e:b8:
18:18:8a:cb:1d:c2:37:cc:fd:db:a3:84:56:be:0d:71:4a:18:
9b:50:23:17:f4:ec:05:2b:0e:21:75:61:b2:9b:28:d3:5e:2b:
85:e4:52:ac:fa:ff:95:5e:bc:85:6d:36:70:f2:71:57:5a:f4:
20:f4:69:10:f1:6f:b5:7b:a2:a9:7c:80:fd:c8:d7:69:29:04:
cf:b4:68:e7:3e:aa:e7:2f:c1:b4:8d:49:b5:ff:bd:2c:3e:39:
87:85:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:40 2026 by rpki-client