Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
File: BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft (raw, json)
Hash identifier: QCyV9wwfOfMu2QCWMu1M1/Egxj83ovna+c8ixPcJmqg=
Subject key identifier: 16:2D:63:DC:24:54:F8:B7:36:9A:FD:CC:15:8D:11:98:F3:77:B1:7C
Authority key identifier: 04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6
Certificate issuer: /CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
Certificate serial: 01A0E106CC2BC70E928C2244003A805F24EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
Manifest number: 10CC
Signing time: Sun 27 Sep 2026 04:01:53 +0000
Manifest this update: Sun 27 Sep 2026 04:01:53 +0000
Manifest next update: Mon 28 Sep 2026 04:01:53 +0000
Files and hashes: 1: BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl (hash: N8+Q8KjeHDsfSNirw5Ml+dNAOOfpspzgy5VNrH64g0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:cc:2b:c7:0e:92:8c:22:44:00:3a:80:5f:24:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
Validity
Not Before: Sep 27 04:01:53 2026 GMT
Not After : Sep 28 04:01:53 2026 GMT
Subject: CN=162d63dc2454f8b7369afdcc158d1198f377b17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:54:0a:89:95:ca:0b:0e:e6:d4:77:6c:5e:
a2:b7:82:34:0c:fc:ed:f0:52:e4:8a:e6:8e:42:99:
37:5b:49:48:13:e8:f1:be:15:a5:80:11:37:65:72:
59:c6:8c:bc:8c:c8:bc:d9:5f:ea:e2:7f:5d:78:3b:
54:8c:17:93:d4:44:14:17:9b:a7:d4:5b:52:fd:2b:
00:68:e2:78:09:56:8f:70:75:0a:54:c1:61:9c:8c:
c6:07:11:0c:ed:d3:e8:a1:b3:48:59:31:0a:ca:b5:
db:ce:35:d8:e7:49:d6:87:45:57:89:52:f9:c9:8c:
f0:5c:52:ea:1b:46:04:fb:7d:8c:6c:6d:4d:28:ae:
1e:61:45:f7:48:11:22:51:d9:09:b0:7c:aa:df:28:
ab:62:50:50:71:3c:fb:a0:89:51:c3:9d:2e:04:59:
15:fe:5a:fc:bf:c8:b9:6e:20:c3:2d:1f:a0:50:9c:
6c:53:f0:d7:a0:e9:f3:20:28:0a:ff:4b:45:ef:a4:
0e:78:82:d9:3c:4c:42:2e:60:5a:b3:23:7e:21:e6:
26:cc:a3:07:d4:2e:d7:48:a2:1a:95:13:20:db:55:
52:27:c6:63:d6:ed:1e:8e:0b:ae:6d:03:14:fe:51:
01:68:90:7a:31:70:17:e1:4e:6a:93:7f:c6:6b:4c:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2D:63:DC:24:54:F8:B7:36:9A:FD:CC:15:8D:11:98:F3:77:B1:7C
X509v3 Authority Key Identifier:
keyid:04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:50:08:32:41:3b:fb:c4:35:a6:7e:a0:26:cf:64:73:a3:90:
57:20:76:6a:9a:e5:db:3e:03:94:2b:59:e4:42:97:0e:74:0e:
d3:32:0d:8d:a9:48:c2:67:c1:67:67:3b:8a:50:29:d3:6c:e1:
84:f5:17:c5:2c:0b:73:54:ce:99:c5:72:82:b2:72:64:04:32:
8e:60:78:88:df:64:8b:67:db:34:f4:63:5f:cf:c1:93:ad:63:
4d:ca:8f:12:62:fc:f1:59:f1:dd:6e:e1:f5:80:87:f6:2f:55:
2f:a8:d6:a7:fc:9c:9c:c5:c5:de:b7:f0:8a:3b:82:22:79:ad:
e3:b7:d5:c5:76:a8:a6:34:99:c5:40:c1:e2:d7:0e:0b:14:bb:
c2:71:5a:51:5b:22:f0:97:35:2a:7f:ba:5e:b4:43:1b:83:39:
10:48:e9:8b:68:45:17:7d:8d:80:b8:71:d3:2d:c1:6e:ed:3b:
61:c9:06:fc:ac:c8:c4:c7:d2:47:b0:bd:86:8a:a0:e1:36:4c:
8e:e8:f9:42:5f:2b:7d:d3:41:11:11:51:62:de:06:3c:4e:90:
e5:70:34:d9:59:22:c2:4a:77:ea:7b:e1:a3:f2:76:53:05:0c:
3a:3d:09:11:a4:66:ae:60:ed:25:36:2c:58:db:9d:ba:ab:18:
a2:0e:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:35:25 2026 by rpki-client