Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft
File: BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft (raw, json)
Hash identifier: jb6lwaejoZ7TTljb68j1eTpSvnmITCPtp1BzhY5YrWk=
Subject key identifier: 7E:FF:29:D7:A1:46:B2:F9:C8:91:17:41:E7:1A:F1:69:E1:01:4C:03
Authority key identifier: 04:B3:69:61:7B:5D:F2:A5:CF:C6:E3:C9:EC:1B:70:39:DF:54:B8:C3
Certificate issuer: /CN=04b369617b5df2a5cfc6e3c9ec1b7039df54b8c3
Certificate serial: 01A0D8DF58CA11B30226FD05A4CB82DF7A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft
Manifest number: CD
Signing time: Fri 25 Sep 2026 14:01:50 +0000
Manifest this update: Fri 25 Sep 2026 14:01:50 +0000
Manifest next update: Sat 26 Sep 2026 14:01:50 +0000
Files and hashes: 1: BLNpYXtd8qXPxuPJ7BtwOd9UuMM.crl (hash: OFE4L3/UCoPPKi0s6KZ/l/GEIhYyGD0QVtfbvV+Knhk=)
2: hT9HthKgWyq8q-rVTBF9p1k9TLA.roa (hash: McToG8l4SQVqpZGlyPlZlL8W9BAUD58LKc6OEh1ORDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:58:ca:11:b3:02:26:fd:05:a4:cb:82:df:7a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b369617b5df2a5cfc6e3c9ec1b7039df54b8c3
Validity
Not Before: Sep 25 14:01:50 2026 GMT
Not After : Sep 26 14:01:50 2026 GMT
Subject: CN=7eff29d7a146b2f9c8911741e71af169e1014c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:e2:40:c8:16:a0:23:3c:c4:b6:6f:f2:07:
64:4f:e6:87:0b:73:1d:17:7a:8d:ea:ed:d0:51:f2:
3b:e3:60:57:5c:23:0e:25:e1:ce:90:80:21:41:c3:
d1:d6:ad:e5:3a:d8:88:00:c0:4c:b5:e6:26:1a:cd:
ba:c2:1e:8f:a7:fa:3d:15:87:2e:63:69:8e:a4:3b:
a7:3f:87:15:0e:30:d8:49:78:ab:6a:1c:b2:93:0b:
99:f1:90:93:7b:b8:c5:36:45:71:72:1c:ea:f5:cf:
bb:02:b2:a8:c5:47:4b:80:4b:e8:46:f8:74:48:97:
3b:e1:a7:7b:32:cb:22:7f:78:8a:75:14:51:f5:69:
16:d3:e8:63:b8:23:0f:30:4a:6a:a4:1c:63:63:96:
10:af:48:54:08:ef:b8:54:15:a3:1b:8f:4d:8b:99:
7d:f3:ce:4f:2d:92:d8:e2:10:b3:1b:89:67:1c:a1:
f0:32:09:6c:8e:83:15:da:a7:1c:60:d0:7b:f2:ab:
ee:21:5c:5f:1b:98:1f:de:72:be:45:06:0f:48:8b:
a5:11:fa:d7:e9:18:94:c4:22:a7:bd:02:9b:d2:8a:
4c:c0:74:39:f2:b4:16:6b:bb:39:11:3e:61:17:53:
6a:e7:42:b6:97:aa:ff:6e:99:84:69:cb:ae:e8:8d:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FF:29:D7:A1:46:B2:F9:C8:91:17:41:E7:1A:F1:69:E1:01:4C:03
X509v3 Authority Key Identifier:
keyid:04:B3:69:61:7B:5D:F2:A5:CF:C6:E3:C9:EC:1B:70:39:DF:54:B8:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8c:e4:fe:49:d4:ca:8d:40:34:60:fe:51:c0:6d:20:a2:e0:
e6:1e:da:a3:88:04:1f:19:99:7b:a3:82:71:0b:49:6f:a6:88:
74:86:e5:c0:70:0f:ed:8c:7d:cd:7f:76:ad:94:0c:95:ee:61:
60:34:e6:1c:f1:35:56:ec:e2:bc:94:03:2e:03:eb:8c:5c:81:
fe:75:3e:2c:eb:01:d2:95:b8:ef:a5:be:1f:b7:8e:08:d2:3e:
f5:18:e4:97:a3:ff:c3:33:4b:1e:0e:9d:5b:83:73:5c:52:19:
b4:5e:ae:ba:8b:2f:e8:fd:c1:f6:3e:7d:72:57:69:68:9d:f0:
58:3c:82:ab:c5:bd:1f:dd:e7:20:bc:65:ae:b1:a1:2d:19:d4:
43:88:5f:14:7d:49:b7:39:d2:5a:3f:9c:0d:c8:ab:14:98:30:
26:48:72:35:fb:06:13:93:d1:3a:ae:ff:6e:cf:b8:ce:56:18:
26:ec:9f:be:92:69:d1:ac:89:c8:eb:03:90:b2:85:77:44:0e:
6d:34:27:14:7f:9c:19:68:2f:f6:b8:bb:1c:dd:30:b5:3e:b4:
fe:22:74:9e:f6:a4:6a:5b:fc:db:aa:4c:b6:a0:8b:dd:33:c1:
07:ba:d8:43:2f:0e:87:79:91:15:1f:5a:df:30:99:fd:fc:05:
5d:d3:07:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY31jKEbMCJv0FpMuC33pjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YjM2OTYxN2I1ZGYyYTVjZmM2ZTNjOWVjMWI3MDM5ZGY1
NGI4YzMwHhcNMjYwOTI1MTQwMTUwWhcNMjYwOTI2MTQwMTUwWjAzMTEwLwYDVQQD
Eyg3ZWZmMjlkN2ExNDZiMmY5Yzg5MTE3NDFlNzFhZjE2OWUxMDE0YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtXiQMgWoCM8xLZv8gdkT+aHC3Md
F3qN6u3QUfI742BXXCMOJeHOkIAhQcPR1q3lOtiIAMBMteYmGs26wh6Pp/o9FYcu
Y2mOpDunP4cVDjDYSXirahyykwuZ8ZCTe7jFNkVxchzq9c+7ArKoxUdLgEvoRvh0
SJc74ad7Mssif3iKdRRR9WkW0+hjuCMPMEpqpBxjY5YQr0hUCO+4VBWjG49Ni5l9
885PLZLY4hCzG4lnHKHwMglsjoMV2qccYNB78qvuIVxfG5gf3nK+RQYPSIulEfrX
6RiUxCKnvQKb0opMwHQ58rQWa7s5ET5hF1Nq50K2l6r/bpmEacuu6I24dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7/KdehRrL5yJEXQeca8WnhAUwDMB8GA1UdIwQY
MBaAFASzaWF7XfKlz8bjyewbcDnfVLjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkxOcFlYdGQ4cVhQeHVQSjdCdHdPZDlVdU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83NzJiYWQtZWNlYS00ZmUyLWJjNTQt
NmNmOWRkNWRlODQ3LzEvQkxOcFlYdGQ4cVhQeHVQSjdCdHdPZDlVdU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83NzJiYWQtZWNlYS00ZmUyLWJjNTQtNmNmOWRkNWRlODQ3
LzEvQkxOcFlYdGQ4cVhQeHVQSjdCdHdPZDlVdU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIzk/knU
yo1ANGD+UcBtIKLg5h7ao4gEHxmZe6OCcQtJb6aIdIblwHAP7Yx9zX92rZQMle5h
YDTmHPE1VuzivJQDLgPrjFyB/nU+LOsB0pW476W+H7eOCNI+9Rjkl6P/wzNLHg6d
W4NzXFIZtF6uuosv6P3B9j59cldpaJ3wWDyCq8W9H93nILxlrrGhLRnUQ4hfFH1J
tznSWj+cDcirFJgwJkhyNfsGE5PROq7/bs+4zlYYJuyfvpJp0ayJyOsDkLKFd0QO
bTQnFH+cGWgv9ri7HN0wtT60/iJ0nvakalv826pMtqCL3TPBB7rYQy8Oh3mRFR9a
3zCZ/fwFXdMH0A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:51 2026 by rpki-client