Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: JEUQmrGJRlHzTfsIlK6VT3RMvHl0DdKzsAXJPgwI9nM=
Subject key identifier: 5D:E2:87:A0:1C:8E:F4:A4:F1:52:C9:10:1F:A7:3F:F1:52:D9:16:7A
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 019F9391A8C7014D38E035DCDE3C0134737E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 055A
Signing time: Fri 24 Jul 2026 10:00:24 +0000
Manifest this update: Fri 24 Jul 2026 10:00:24 +0000
Manifest next update: Sat 25 Jul 2026 10:00:24 +0000
Files and hashes: 1: GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa (hash: +SThIA5U78DHRFgrExpVjECZowaekUZ+Kqjt9wzZQWI=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: vUI4ZkTd5P9HhEu5D64KGnBpaq5FZRnDl8/NBTGGPzY=)
3: tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa (hash: 8XEuad3zZxDli1a1G3vIehCptWc+Hmtp2zxnb2jVTdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:a8:c7:01:4d:38:e0:35:dc:de:3c:01:34:73:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Jul 24 10:00:24 2026 GMT
Not After : Jul 25 10:00:24 2026 GMT
Subject: CN=5de287a01c8ef4a4f152c9101fa73ff152d9167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0e:46:2e:78:9b:87:90:3e:23:67:25:bc:69:
e3:96:75:83:f4:fc:c7:43:ed:66:92:8b:56:15:d7:
9d:a9:26:60:d9:4e:68:4e:19:97:93:f7:f2:c0:11:
5d:3b:02:83:0c:51:e8:53:ff:2f:c8:85:de:c9:4a:
25:b4:e8:b8:a7:5b:91:9a:ba:af:f8:86:b6:7e:5e:
b6:b4:d3:87:16:33:e5:5d:e4:5d:98:70:28:e4:fa:
9c:43:3b:b1:9a:34:6d:ea:0d:a3:a7:a1:0c:9d:6b:
8b:d5:49:97:04:01:b3:04:c0:ec:9a:5a:e1:98:88:
f2:45:cb:f5:7c:d3:c4:58:e7:74:d3:fe:e8:06:31:
1b:69:84:64:1d:98:a9:81:b4:28:58:b7:d2:80:e5:
2c:d2:3e:ed:31:ce:fc:fc:b9:5e:d6:b9:e5:60:46:
8a:d5:39:d2:ba:3e:15:6a:5c:d1:a6:a5:22:b7:46:
5a:e6:b2:0b:37:81:a5:6a:9a:6e:87:61:4e:84:bd:
2e:4b:f5:bf:82:e2:4d:b4:67:a9:90:01:7c:e4:14:
3b:2b:79:c0:f1:8f:fe:ab:cd:8a:54:f3:12:e2:5f:
69:17:17:75:74:26:cc:fc:e6:89:8d:8e:e6:c8:40:
e0:c1:3c:5a:a0:49:33:a2:13:b8:bd:7e:87:a5:8b:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E2:87:A0:1C:8E:F4:A4:F1:52:C9:10:1F:A7:3F:F1:52:D9:16:7A
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:58:ae:da:9b:8e:cb:29:e0:59:55:3a:69:ce:d5:18:ca:c2:
77:70:35:f0:0f:ad:6b:eb:1d:80:6a:08:af:7f:4a:e1:10:42:
f7:52:36:fc:fb:f3:3c:b8:07:54:2b:22:01:ea:fa:11:ae:77:
82:15:99:14:80:a8:c2:ac:ec:e4:81:bc:91:bc:c9:4b:e7:4a:
2b:f3:25:4a:ae:9a:95:4b:eb:2a:57:fa:0d:ae:18:ad:9b:70:
0c:1a:fe:42:28:cf:79:5e:6b:7c:02:21:d4:9a:1d:53:ff:17:
f9:fa:9b:87:d5:bd:8d:86:92:18:d4:79:be:89:fb:87:de:eb:
43:63:ba:65:cb:1f:89:76:bd:88:ee:c4:c8:c2:29:6f:a1:51:
44:32:fc:a2:79:a6:03:fe:5f:c8:58:4a:a9:b3:94:58:b8:30:
e8:45:69:3a:1e:83:84:90:34:a6:af:c6:92:ee:ee:fb:d2:51:
2e:a4:26:f7:91:57:9a:c6:9b:5f:c6:15:a8:f8:51:64:1a:e8:
cd:97:8a:34:e9:4e:3c:eb:78:70:d3:61:7d:05:80:bd:66:96:
5d:89:6c:3c:95:9e:0a:64:7d:14:5f:ab:28:c0:94:8b:95:a8:
b9:35:de:7e:6a:d1:b0:2d:fc:ba:21:b0:99:43:4e:e8:77:64:
04:55:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:27 2026 by rpki-client