Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: 3TTDuMH8LAv1WH8kXFTYZ5vCedFGVa1xRPnII+1EF0Q=
Subject key identifier: 01:59:A0:D7:BF:C0:86:BB:95:23:E8:3A:2D:DB:DD:47:28:B5:E9:F9
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 019F9090AFDFD16EC5295D3B9040D6AB60D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 122F
Signing time: Thu 23 Jul 2026 20:00:28 +0000
Manifest this update: Thu 23 Jul 2026 20:00:28 +0000
Manifest next update: Fri 24 Jul 2026 20:00:28 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: d3fn+VPo/UZUfW5dK31jcS994u7Y2H2Gtj2osx8P8tA=)
2: dCctAo4cF_cQVF9v9iua88jVN3g.roa (hash: NqSK6SL1qTb0fxaxxTxRSRb53epcbkxkPGl7gPfChT0=)
3: klXO-sH0E69ctlYICKM2oEhYAk0.roa (hash: 8p7Dn973TTYNLcmIRozlh88axGubR0kxdQP115KfTHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:af:df:d1:6e:c5:29:5d:3b:90:40:d6:ab:60:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Jul 23 20:00:28 2026 GMT
Not After : Jul 24 20:00:28 2026 GMT
Subject: CN=0159a0d7bfc086bb9523e83a2ddbdd4728b5e9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:32:6f:c7:0a:06:53:c6:90:b3:f8:7b:27:
47:6b:d0:4d:bf:df:33:b3:0e:b8:69:82:b7:db:ae:
50:0c:13:5d:3e:74:c9:4f:87:a0:3c:2f:2f:ed:67:
b9:cd:11:fe:c1:a1:68:bd:e4:8c:9d:56:01:68:54:
ca:1f:dd:2d:89:45:36:46:93:b4:37:f0:83:24:27:
09:f2:35:0d:75:62:70:88:2e:0e:fc:09:b3:e5:3d:
1a:79:60:18:0c:fa:81:12:81:92:f3:d7:87:fd:fa:
ff:45:fc:35:a1:90:07:97:dc:1c:23:cd:a4:12:87:
71:95:85:bf:bd:11:4a:a4:e0:83:fa:62:01:e3:88:
71:1c:f5:a5:11:2f:f2:ca:9a:bd:a3:16:fb:84:90:
46:70:63:89:03:35:a9:ae:35:47:26:74:cd:b9:4a:
64:cf:63:0f:0f:14:e6:de:12:9c:ad:1b:d5:22:05:
ea:c4:49:a6:c9:d8:34:9d:50:17:3f:b4:47:50:7e:
76:57:1e:6f:d6:58:68:98:0d:f8:5a:d2:9d:0a:9c:
4e:6a:4d:86:66:ff:50:64:fe:20:c0:4e:4e:1f:20:
c2:e4:6c:6e:6d:da:9c:7d:2c:7c:98:0b:a4:53:da:
6e:67:36:c5:fb:6c:7b:b4:f6:bc:ae:25:2b:b8:27:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:59:A0:D7:BF:C0:86:BB:95:23:E8:3A:2D:DB:DD:47:28:B5:E9:F9
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fa:42:9c:f3:c0:2e:7e:df:6c:f4:d7:8a:76:cb:d3:13:d1:
34:41:1b:33:b4:1b:c1:38:58:1e:90:d2:a8:4f:43:2a:82:3c:
a2:e1:c7:1c:1a:9c:32:fd:ad:d6:e9:f4:50:45:ed:da:01:bf:
c1:cd:df:4f:60:a6:b6:2b:0a:86:bc:6e:de:89:14:4f:57:ce:
f5:28:35:81:ac:81:15:f7:64:9b:5b:f3:91:5d:78:bb:2a:b8:
aa:59:26:c4:b1:c6:8a:ca:0a:40:fc:fd:a1:b1:be:47:74:63:
24:47:83:9a:4f:65:c7:8a:cb:15:7b:1d:fa:4f:2e:f8:45:30:
97:95:ba:f4:76:07:2f:c5:8d:2f:54:51:8d:81:1f:d5:f2:21:
3d:02:c5:21:c0:cd:80:6d:97:ab:e4:27:86:b7:cd:35:8f:43:
af:8a:b6:48:db:3e:35:f1:99:43:24:97:e1:6b:50:b1:45:f2:
78:67:5d:31:a0:d3:b4:c6:8f:5d:67:45:6a:9e:06:80:c4:0f:
72:48:62:e3:b6:b4:87:f0:5c:fb:47:3f:d2:75:9d:1f:41:63:
b6:aa:e7:a7:2f:bb:05:a3:b9:70:ba:16:7b:70:93:43:38:99:
e6:2d:9c:1f:18:88:61:f3:4f:6f:c2:c2:7b:3d:47:88:bd:f7:
92:37:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:46 2026 by rpki-client