Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: qAe4Cx3muTrUL879GLfzTdtTh3TfOPYBaC6ImvRRtRU=
Subject key identifier: 4A:E3:90:C6:FC:06:42:B8:9B:40:91:C3:FC:1C:28:FD:A9:CA:30:D1
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 019D2696300120E4A92167F3DB4A0003928D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 10EF
Signing time: Wed 25 Mar 2026 20:01:09 +0000
Manifest this update: Wed 25 Mar 2026 20:01:09 +0000
Manifest next update: Thu 26 Mar 2026 20:01:09 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: V+xIpBa6a3YhSR/8KJADCyH4lQbCu67PUM46z2KVScg=)
2: dCctAo4cF_cQVF9v9iua88jVN3g.roa (hash: NqSK6SL1qTb0fxaxxTxRSRb53epcbkxkPGl7gPfChT0=)
3: klXO-sH0E69ctlYICKM2oEhYAk0.roa (hash: 8p7Dn973TTYNLcmIRozlh88axGubR0kxdQP115KfTHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:30:01:20:e4:a9:21:67:f3:db:4a:00:03:92:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Mar 25 20:01:09 2026 GMT
Not After : Mar 26 20:01:09 2026 GMT
Subject: CN=4ae390c6fc0642b89b4091c3fc1c28fda9ca30d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:0c:a1:c7:a8:35:87:38:bb:f6:da:60:05:
ed:24:79:d0:6e:cf:3b:0b:06:78:93:e3:00:50:32:
37:99:14:4c:8a:05:8f:d1:00:6c:65:4b:94:a2:bc:
18:35:8b:e5:51:2e:f9:56:34:44:92:7a:50:2b:7c:
43:53:b4:36:7b:35:e6:b7:63:43:80:e1:21:27:be:
6d:b1:6d:dd:d6:13:64:1e:c8:9c:ce:91:65:c4:6e:
09:02:0e:de:84:e6:31:19:da:24:2f:7b:16:ce:d6:
0b:0c:5e:e8:6b:3e:63:f2:26:90:1d:63:83:74:a7:
d8:4a:9b:db:04:96:9f:b7:27:81:7d:b1:73:85:17:
8e:03:92:8c:21:11:df:5f:d2:ac:4c:7d:cb:43:0c:
03:3d:65:bf:cb:43:ca:84:34:c2:2e:ee:14:22:17:
80:04:74:17:be:7f:b7:ac:f4:a0:82:6e:d3:cf:7b:
11:73:1f:75:5a:c4:51:7c:e6:17:6f:58:bd:ab:8a:
bf:8d:5e:82:41:3c:8d:b4:cf:85:89:25:dd:fa:2f:
ed:8f:d9:50:cc:bb:44:7c:ed:7e:3e:88:39:2f:29:
05:5a:d9:41:76:a8:6f:01:49:5b:27:f9:e4:f8:08:
c1:ca:c9:10:eb:b9:3c:26:64:13:13:d1:9d:bf:12:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E3:90:C6:FC:06:42:B8:9B:40:91:C3:FC:1C:28:FD:A9:CA:30:D1
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:01:f6:12:4c:4f:fd:e2:cb:a8:cc:3b:18:0e:e6:36:9c:9a:
18:73:2f:66:13:92:0e:30:eb:d6:12:f0:1e:5f:ff:64:84:31:
f5:f8:6b:0f:5d:8d:fd:93:e5:a4:52:76:2c:2f:4f:00:ba:07:
e8:c7:bf:35:9b:1b:75:f9:20:7c:41:99:cc:58:1c:bc:89:da:
89:f0:5d:e0:02:7a:69:e1:46:9d:f5:8c:8f:9d:30:a9:5e:f0:
b6:9c:94:d6:3a:65:88:54:cf:49:60:e2:92:5e:c2:d3:1e:46:
28:38:cf:85:4d:87:71:85:07:c5:07:b3:60:3e:f7:e3:49:47:
d8:9a:00:31:a7:5f:b0:6c:a3:22:13:42:5b:83:c1:15:68:9c:
8e:6f:00:f3:4f:40:fd:28:26:7d:e1:b2:f4:e6:71:4f:77:40:
1a:d2:02:72:30:1c:cc:0d:19:2d:d2:8c:ba:46:6e:0f:bf:5f:
56:58:45:86:0f:13:72:56:0f:99:b9:45:44:d0:1c:1f:0c:f3:
49:99:1e:c0:a6:5a:d7:36:22:e7:2d:f7:03:9d:cf:dd:c1:e9:
f2:da:8d:77:d1:2f:58:61:f8:51:41:b4:1b:c5:82:6a:e8:1a:
e5:a6:2b:f7:c6:c6:40:44:b2:61:b7:a9:a0:c2:07:d3:a7:d6:
57:8a:49:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:37 2026 by rpki-client