
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
File: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft (raw, json)
Hash identifier: fE1wuozCYBN1uHA/44upZZCRJHY09JevHl2YsfPCQmw=
Subject key identifier: FA:99:F3:AC:34:5E:E1:03:A7:1E:A2:53:A7:CD:F0:8B:E7:06:5E:B6
Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2
Certificate serial: 01A0CEC8046796F4BD398D2FB618F38090C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
Manifest number: 03C3
Signing time: Wed 23 Sep 2026 15:00:09 +0000
Manifest this update: Wed 23 Sep 2026 15:00:09 +0000
Manifest next update: Thu 24 Sep 2026 15:00:09 +0000
Files and hashes: 1: 7cXMcUqolF5Pk9hz94-VytCkN3g.roa (hash: t6QpqggeJZGtuJ23Q1yI38nLT1KfU+pRXoYRRRNFETU=)
2: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl (hash: +4ikq4xcUgxoKUo3bFtliZNoRfqKUNz0Xz0nH+uuqHo=)
3: XRp3KtTtDAfEDM3rwrv4Nkp2Rew.roa (hash: o7R+7Elj+Gl0UPTAPP1wQMI8V6KJzZF8gTCwiml6fUk=)
4: zkiUnt3u3gM-pY3nw2418jZ96as.roa (hash: cBWCrLkL25DqG+qiWavgwQLJKknM3yr54OTG4QErhfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:04:67:96:f4:bd:39:8d:2f:b6:18:f3:80:90:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2
Validity
Not Before: Sep 23 15:00:09 2026 GMT
Not After : Sep 24 15:00:09 2026 GMT
Subject: CN=fa99f3ac345ee103a71ea253a7cdf08be7065eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:d1:a8:77:a6:fd:7b:6f:5f:ad:00:ac:85:
14:20:d9:57:02:e0:b3:ab:bf:f2:9a:a5:7d:12:ef:
67:2b:62:a4:ed:11:27:ee:0b:f4:85:03:89:9f:d2:
4f:6e:01:ed:31:6c:2a:83:e1:18:52:7d:06:67:a0:
77:cf:bf:26:8d:fb:fb:ad:42:a9:f1:3c:5f:44:66:
26:57:d6:72:6e:b8:14:35:71:95:14:d6:23:59:e3:
16:98:78:cd:3f:6e:e8:07:27:6c:0b:13:ea:bc:6a:
f8:58:82:0a:29:21:9a:9e:f2:28:6c:c2:75:9a:2c:
bd:27:a7:ff:60:4e:6b:71:ea:ac:06:00:99:c7:25:
11:85:b2:4e:94:4d:a4:ea:57:ae:57:f0:8a:82:fb:
54:aa:ee:5f:64:6c:dc:00:f5:88:ff:15:ee:1d:21:
09:71:f0:9f:71:98:4a:9f:8a:53:6a:e7:20:bb:7b:
74:15:d0:1d:10:ad:f8:df:56:52:27:60:89:33:0c:
19:24:c9:eb:0d:84:76:ad:be:b5:81:c1:6d:95:0e:
a7:09:bc:15:3f:96:5f:b0:8c:72:f7:86:8b:a8:de:
d3:c3:40:82:a5:43:63:21:8a:cb:32:9a:35:ed:19:
bd:45:32:af:5f:1b:74:b2:3f:3f:c4:2c:84:03:15:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:99:F3:AC:34:5E:E1:03:A7:1E:A2:53:A7:CD:F0:8B:E7:06:5E:B6
X509v3 Authority Key Identifier:
keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bb:8f:b1:47:92:8f:d1:01:0c:7f:c6:0a:ac:dd:40:26:42:
df:bc:97:8f:3e:28:0f:99:af:da:51:86:4a:35:2c:9f:a3:95:
5c:6f:c3:35:41:2a:9a:00:ed:66:5e:e7:23:10:ce:84:af:46:
13:6c:8d:93:95:d0:48:06:a2:b2:6f:a3:cc:e7:42:80:06:d4:
c5:48:19:63:a5:b0:13:0c:89:41:0e:df:29:de:02:54:fd:61:
88:56:c8:0d:20:aa:01:40:e8:80:2f:29:13:4e:3d:10:38:f4:
09:e3:71:c5:55:05:ba:7c:9f:cc:43:4c:82:e0:f3:c8:a7:63:
78:9b:0b:f5:08:0d:8c:8d:91:f7:25:a9:30:3b:70:60:95:c8:
6e:17:ff:05:d6:c4:96:46:2b:63:bf:df:23:32:22:54:23:d7:
0c:fa:c1:41:5e:e4:de:ea:f1:7e:61:95:4e:4d:6e:17:75:c4:
6c:ee:ee:73:63:6c:52:20:e0:68:c5:c4:bb:80:26:8d:54:91:
dd:f6:b1:80:5b:9b:22:69:92:4c:93:54:1c:a3:67:e4:ec:14:
28:28:8f:17:26:68:7d:b5:22:55:1c:05:7c:5f:b0:16:c8:94:
3b:af:5e:bd:c7:01:58:65:cc:1a:07:30:c3:93:f3:c7:87:69:
0d:f2:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:24:09 2026 by rpki-client