Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: CxlS0UevPWcvg0hXMCL1YeUBTbc8QACaUz+ny6NVxUo=
Subject key identifier: CB:27:D8:7E:06:C1:B4:61:65:45:22:F5:8F:41:D8:76:FE:16:A8:90
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 019E1DC7011A9253B4A83F7E51033999566A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 116F
Signing time: Tue 12 May 2026 20:00:41 +0000
Manifest this update: Tue 12 May 2026 20:00:41 +0000
Manifest next update: Wed 13 May 2026 20:00:41 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: E27qoFCFnPzF21/ClaZTnngmUStm62Dzm6aRSR7VlB4=)
2: dCctAo4cF_cQVF9v9iua88jVN3g.roa (hash: NqSK6SL1qTb0fxaxxTxRSRb53epcbkxkPGl7gPfChT0=)
3: klXO-sH0E69ctlYICKM2oEhYAk0.roa (hash: 8p7Dn973TTYNLcmIRozlh88axGubR0kxdQP115KfTHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:01:1a:92:53:b4:a8:3f:7e:51:03:39:99:56:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: May 12 20:00:41 2026 GMT
Not After : May 13 20:00:41 2026 GMT
Subject: CN=cb27d87e06c1b461654522f58f41d876fe16a890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:1c:00:80:43:4d:1f:33:71:a1:e4:6a:9a:
3a:69:10:77:9a:71:e6:36:fb:41:1d:f9:eb:77:44:
25:32:f8:6a:9e:3c:2d:32:16:88:a6:7c:83:de:4c:
2f:d0:4a:c5:47:18:49:cb:e0:32:34:a7:f2:37:a4:
0a:13:52:7e:20:38:b8:ee:20:e3:a2:17:e8:23:3f:
4b:c3:77:09:ef:e2:8a:9f:83:da:f9:d4:e2:c7:31:
eb:05:c8:b7:1a:eb:d7:9e:a8:9d:fc:2b:a4:aa:45:
22:5d:76:c0:06:61:17:b9:22:40:c0:96:06:d2:56:
77:bc:49:71:75:a8:8d:50:5c:9b:f4:1a:35:da:33:
bb:4f:3b:0e:1f:7b:90:95:15:8b:09:17:4d:56:0f:
36:4b:25:2b:83:4b:62:71:be:f0:4e:53:4f:02:59:
88:b7:3d:8c:68:11:b6:f6:4f:74:a5:cb:14:43:77:
9e:a8:64:2b:d8:2c:ac:1a:56:11:41:e4:73:98:8b:
0f:9f:da:e9:a0:3c:64:d1:27:cd:f6:c5:15:9a:5d:
20:a1:36:fd:ac:ba:63:5a:88:f4:34:7e:40:ae:8c:
83:6c:0e:63:45:40:3b:f4:0e:92:b4:d3:3a:60:63:
18:7d:d1:5c:5a:81:e7:48:51:73:af:9d:ba:8c:fa:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:27:D8:7E:06:C1:B4:61:65:45:22:F5:8F:41:D8:76:FE:16:A8:90
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b1:9e:86:f3:ad:dd:df:2e:6b:1b:77:a4:08:41:0e:ce:11:
03:73:b7:a0:f8:9c:84:81:a1:d0:cf:54:0a:b2:ea:3c:67:d5:
67:05:ec:f2:44:b2:2f:de:3e:9c:57:e5:c6:5b:28:8a:05:38:
90:9a:60:ab:6b:93:2f:82:b5:b5:24:c6:35:25:83:54:e6:56:
24:12:0c:21:c5:23:8f:39:4c:d2:14:17:69:0a:f4:fa:13:fd:
4e:52:d8:eb:50:86:16:97:5f:64:9c:fa:66:7c:1e:79:92:8f:
69:72:dd:57:da:e2:31:d4:54:e0:1d:68:ab:61:bf:fc:ca:58:
2e:5b:f2:bf:59:c2:17:2e:0b:41:06:91:a8:32:3e:fc:3b:f0:
b1:bf:f2:4b:c8:69:07:ec:0b:a5:4e:95:da:67:d9:62:f6:85:
b9:d7:05:d2:8f:d5:c7:dd:cc:8c:50:2b:34:11:76:55:4f:b0:
46:52:a5:5d:e9:c5:0c:44:6b:59:f9:0e:21:b5:55:e5:cc:ed:
86:45:d2:d4:e6:01:42:af:51:83:b3:16:a4:a9:ab:36:f7:aa:
39:c2:5c:5d:da:fd:22:56:e5:65:ac:f5:d8:2b:b0:42:23:46:
82:7c:80:a4:e3:2e:05:81:41:43:5b:e7:cc:2e:a5:a9:61:fa:
f5:69:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:11 2026 by rpki-client