Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
File: BLHnVu2xw70vV2afWCv2qVG4P0g.mft (raw, json)
Hash identifier: +FpOK02vKw5JuH6L9UmSPn/e7YehwVov6ar3jaL0lPw=
Subject key identifier: 29:A2:7D:0B:9A:B8:A2:7A:7D:42:A7:0B:56:70:1B:2F:07:70:B2:84
Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
Certificate issuer: /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Certificate serial: 019F8F10D8D9399923C1225BF70071F26298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 13:01:13 +0000
Manifest this update: Thu 23 Jul 2026 13:01:13 +0000
Manifest next update: Fri 24 Jul 2026 13:01:13 +0000
Files and hashes: 1: BLHnVu2xw70vV2afWCv2qVG4P0g.crl (hash: hmysGxIrnRe30QWEzdLEE3rjst0vu9nG9GTqyiQmcD4=)
2: XvWth5JnRTo0n6WWkbtF-kr40Bo.roa (hash: FcXBAVVeRl2iDfImKR5vQ2YlB5INy+hid9PG+FEh1dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:d8:d9:39:99:23:c1:22:5b:f7:00:71:f2:62:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Validity
Not Before: Jul 23 13:01:13 2026 GMT
Not After : Jul 24 13:01:13 2026 GMT
Subject: CN=29a27d0b9ab8a27a7d42a70b56701b2f0770b284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:ea:57:0c:28:03:c6:e0:19:1b:b2:00:df:
ef:68:dc:a7:37:e5:78:f0:b9:63:f2:32:b9:1b:2a:
c2:d5:65:63:46:0f:17:1e:4b:a8:db:fe:26:f0:8d:
21:19:ac:c4:fb:91:31:55:08:4d:50:72:24:61:b7:
28:8d:66:89:83:8e:fa:00:f1:0b:ea:b5:b7:ee:f8:
57:ed:e4:e0:06:13:2f:10:25:69:82:ed:6d:5a:e4:
20:30:f7:13:94:2c:4d:81:df:58:8e:53:5c:e5:02:
7d:55:3e:4d:e9:5f:e6:31:fa:13:97:4b:9e:ed:8d:
9d:f5:94:70:bc:14:93:14:66:2d:fe:1a:b6:f7:53:
09:7b:b8:42:7f:4e:e8:46:54:1f:ae:f5:5c:2f:fb:
96:98:80:90:5e:e2:aa:d5:2d:f0:cc:e4:d5:b0:40:
f7:0f:7e:de:5c:51:3b:fc:b0:d2:9f:b9:eb:1f:a9:
f0:8c:2a:88:e2:ea:c6:55:0e:87:bf:81:1f:8b:af:
9c:15:1e:50:ba:c3:a6:da:02:c5:3a:99:56:41:09:
6a:55:35:86:d4:f7:3b:8b:4d:f4:a4:fe:1e:92:a1:
d2:24:77:15:36:2f:31:7f:c8:7c:f6:c7:57:e9:4d:
09:c5:4b:ef:57:cb:50:9c:f4:13:8d:fc:66:fb:92:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:7D:0B:9A:B8:A2:7A:7D:42:A7:0B:56:70:1B:2F:07:70:B2:84
X509v3 Authority Key Identifier:
keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:af:38:cd:a3:e4:b5:ef:d0:bb:d5:b2:e8:3c:ed:ee:9e:38:
bc:44:5a:12:85:04:0d:c0:d6:e7:1c:1d:83:56:f1:03:7c:dc:
5f:fb:42:36:0e:4f:67:93:0d:b1:42:d3:85:4d:fd:05:d9:2d:
32:27:6b:61:d8:29:32:3f:5c:82:4f:92:70:00:0e:5b:d6:a3:
c2:ee:63:2e:89:00:c1:18:94:bc:5a:03:94:52:dc:12:63:d2:
74:f8:a4:af:ec:ed:2a:e9:5f:9f:0b:aa:94:23:02:97:07:5b:
96:61:3d:a6:30:52:2d:15:e8:dd:07:03:4b:66:a3:44:cc:d3:
b0:bd:0d:12:22:f7:0d:89:17:b5:35:ef:35:6c:fb:30:97:6c:
7e:4f:3b:b9:95:be:a5:79:cc:29:eb:f6:da:13:65:ab:f8:cb:
b9:74:6a:c9:b4:42:8f:c4:f3:05:0d:62:65:2d:80:0f:f1:0a:
74:92:b9:b1:16:0c:50:e6:53:ec:19:36:5c:8d:aa:66:3d:22:
93:b2:e5:c4:2c:8c:33:90:85:fc:bb:78:49:76:a8:e9:94:6a:
d4:6f:d9:a4:ef:8e:79:dc:6e:2c:ec:89:d6:97:16:9b:0e:ed:
0b:30:3f:79:93:0f:db:15:30:76:13:cc:7a:0b:f2:95:60:da:
7f:e4:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:37 2026 by rpki-client