Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: cqcLuYGKLbnumnMhb4IaJIt3ft5p+US98qhBopjjCLY=
Subject key identifier: 5C:5D:CD:E2:0D:34:F4:A9:79:02:88:01:D4:ED:83:0C:D2:25:1E:43
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 01A0C96B34317A874A8ECC73C2F1EBB0E5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 08F9
Signing time: Tue 22 Sep 2026 14:00:41 +0000
Manifest this update: Tue 22 Sep 2026 14:00:41 +0000
Manifest next update: Wed 23 Sep 2026 14:00:41 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: Z8TzyfX9cQv0X5a40++AYt7CgY0c98GeD75L8LpaZHU=)
2: XiOLVjMMRIXjDwamXxHQaw_QW5M.asa (hash: j0uAz4SCp4axiJ6lvLbL24SoF2CItfFxlFx3BSZUkLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:34:31:7a:87:4a:8e:cc:73:c2:f1:eb:b0:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Sep 22 14:00:41 2026 GMT
Not After : Sep 23 14:00:41 2026 GMT
Subject: CN=5c5dcde20d34f4a979028801d4ed830cd2251e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:87:6e:54:7f:b5:39:fc:73:8e:1f:68:b5:b4:
d8:0e:e7:5a:85:12:85:58:e9:52:01:15:0e:1a:63:
32:f9:05:35:a2:7e:9c:cc:cc:2d:d3:2d:4f:10:df:
84:61:67:7b:8a:c2:3a:88:31:d3:aa:fa:b6:bf:f9:
77:bf:56:ff:e5:75:45:5a:b5:d4:fe:f6:8e:a8:78:
00:98:46:50:c4:68:2b:3f:1f:75:8a:b2:b3:18:9f:
7f:c6:9e:3d:9a:94:fe:a7:08:1f:30:1f:6b:c7:81:
60:3c:2c:27:c6:73:c5:14:34:51:17:be:c0:8d:2c:
c3:63:39:c6:3a:42:8f:68:81:a3:58:6c:e6:74:63:
74:6c:fb:d9:66:45:71:2f:e4:c0:9e:5f:1c:8e:9a:
9e:c4:99:35:70:f9:04:b2:51:26:ed:47:cc:a5:92:
2f:79:5b:e3:57:2e:43:9c:95:e5:69:eb:88:7d:84:
2a:8e:68:03:95:06:8d:96:b5:b7:08:3b:e7:bb:1b:
ea:b5:78:28:1a:1b:13:2f:b7:0e:11:9d:92:2e:e0:
a1:96:58:88:ce:14:df:70:3d:2d:b6:0a:ce:e8:bf:
48:7b:0e:68:c2:27:9b:cf:72:39:fd:38:04:61:30:
18:82:59:74:1d:f8:90:e0:59:e1:08:b4:6b:b8:14:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5D:CD:E2:0D:34:F4:A9:79:02:88:01:D4:ED:83:0C:D2:25:1E:43
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5a:d8:fa:96:47:b4:90:dd:d0:8d:93:47:35:a2:b3:87:c1:
04:0c:b7:17:5f:2f:59:f6:8b:7b:34:65:c0:98:10:57:28:30:
16:ed:34:a4:fd:c0:62:b3:c1:ef:42:51:85:80:b8:c0:b4:5c:
d4:bf:cb:89:3f:7e:8c:7e:98:e2:2d:d4:a3:b0:6c:c3:ef:f6:
55:77:32:99:0e:34:bb:21:20:22:02:33:34:d5:45:f7:44:30:
38:3c:c5:24:56:b2:2a:00:6e:d4:25:99:e8:b8:81:6c:a1:19:
47:60:85:ea:53:0f:e1:c6:3a:e1:d3:2f:09:54:7f:37:dc:11:
a5:c2:eb:cb:53:60:3d:c4:1e:32:8e:a8:4a:4c:79:80:e9:be:
08:8b:a9:91:9c:02:b4:58:1b:c9:8e:8c:26:12:01:39:e7:7e:
05:0f:73:92:95:66:62:a0:40:9a:d2:5a:f1:9b:56:99:86:d1:
90:d5:b2:96:31:89:dc:82:8a:b5:ee:99:93:c6:6c:e4:0f:c8:
e4:9e:22:d9:29:64:3d:a7:1e:ea:ff:eb:a3:8e:c4:72:d8:3e:
e5:14:ab:00:19:96:97:7c:71:91:11:c4:2a:6f:99:af:c4:d0:
8d:e8:e5:6c:a6:b0:38:65:61:20:3e:2d:1b:6f:8b:9a:1f:16:
90:e0:05:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:15:27 2026 by rpki-client