Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: CIZXNsMbesyMfjE92VqSLhbwscRXKtnQSTOMg6l5cLE=
Subject key identifier: 53:99:0D:C6:9C:82:80:C7:BC:F5:89:F6:31:69:BA:F2:CB:72:EC:15
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 019D25BA5F491B9CB1AC3D6DAFCDB70C61E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 0418
Signing time: Wed 25 Mar 2026 16:01:04 +0000
Manifest this update: Wed 25 Mar 2026 16:01:04 +0000
Manifest next update: Thu 26 Mar 2026 16:01:04 +0000
Files and hashes: 1: GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa (hash: +SThIA5U78DHRFgrExpVjECZowaekUZ+Kqjt9wzZQWI=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: CdSTgCv8O6E8QFbif5Uv1Xc7jcLCyDP8jyae9ufAqNc=)
3: tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa (hash: 8XEuad3zZxDli1a1G3vIehCptWc+Hmtp2zxnb2jVTdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:5f:49:1b:9c:b1:ac:3d:6d:af:cd:b7:0c:61:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Mar 25 16:01:04 2026 GMT
Not After : Mar 26 16:01:04 2026 GMT
Subject: CN=53990dc69c8280c7bcf589f63169baf2cb72ec15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:35:06:43:89:17:d7:15:b3:0b:ee:65:87:
a8:f7:2f:a6:d3:2c:0a:5c:90:1a:5a:ad:77:db:02:
71:40:cb:84:34:cd:bb:e2:95:3d:ea:40:61:88:e5:
a0:6a:da:ad:3c:f8:df:6f:d6:7a:dc:9e:c8:fa:b9:
eb:c6:7e:23:af:5e:58:7f:5b:ec:91:8c:cf:ea:7b:
0d:d6:29:75:9e:dc:be:03:4b:97:9c:1d:41:bf:57:
5f:82:cb:c0:fc:57:f0:98:18:35:1b:78:87:79:10:
7c:0e:13:2c:30:3d:88:6f:af:05:12:02:c0:25:9f:
07:9a:f5:b5:e4:e0:cd:d2:f5:83:f2:9a:b1:f1:67:
62:13:6e:81:41:60:0e:a0:c6:af:d7:ca:07:0c:f5:
fe:ed:ef:7e:86:2d:6b:15:3b:34:d2:f4:b6:4c:9e:
77:c3:83:17:45:55:ea:a9:a3:29:62:f6:16:c0:02:
84:ab:cc:3b:a3:84:f6:fa:d1:ab:10:fa:da:c7:94:
9b:43:aa:ae:3a:1b:1f:2d:2e:f1:03:41:ee:27:e1:
45:de:0a:a0:06:95:88:96:d6:10:15:48:e6:d8:44:
b8:0a:41:a7:07:fc:41:15:02:c1:89:43:31:ff:7a:
72:17:4a:ca:5e:75:eb:e3:d4:61:b8:6a:f6:a9:cd:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:99:0D:C6:9C:82:80:C7:BC:F5:89:F6:31:69:BA:F2:CB:72:EC:15
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1c:7d:d9:59:b7:2a:66:e8:42:59:19:a8:71:87:ef:c9:a3:
d6:5b:cd:71:55:7e:3c:d1:24:94:1e:63:20:2a:b9:0f:80:68:
67:53:9d:04:ba:68:43:28:f8:c3:4d:07:83:8f:38:88:61:5f:
d9:48:90:39:ec:3f:c8:69:b7:cc:6e:22:d9:8c:4b:3d:9b:ef:
98:9e:b7:b6:e7:55:20:90:73:24:d5:a0:b8:e0:70:56:34:41:
1d:b1:bd:ae:15:91:bd:26:38:b4:41:f4:fb:12:aa:ea:66:ee:
13:b3:0e:44:8b:85:05:eb:49:ac:1d:b9:fd:81:88:52:8c:81:
fb:0f:40:fe:9c:27:29:7d:d8:53:92:36:fd:2d:82:58:63:77:
16:77:cc:3b:0a:b7:ca:1a:b7:0e:c7:60:46:c9:4b:fd:91:2e:
88:e9:69:e0:75:a6:20:fb:4f:4b:d2:19:90:0a:cd:9b:01:ed:
49:6d:49:3c:dc:67:33:ca:07:9a:65:f3:8e:e8:ef:db:77:fa:
6e:bf:09:78:70:be:e7:e8:13:46:78:b5:b5:ce:d4:c3:b1:dd:
c7:c1:64:a3:a5:2f:97:dd:44:a8:7f:6d:48:36:78:bd:a3:49:
30:77:cd:4d:e8:1b:ca:ea:f0:3d:1b:f0:cd:50:8c:1e:5c:5b:
5e:30:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:35 2026 by rpki-client