Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: q2e/TycA6GkmOVFUn00oAkhUPAcyn9Dz0xqnM68Hn60=
Subject key identifier: 82:E7:D8:DE:17:C3:7F:05:CD:A8:CF:D1:6C:FE:DB:79:D1:AD:99:5C
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 019E1EDA22C82439D6D803EB93AFB34F1D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 0499
Signing time: Wed 13 May 2026 01:01:12 +0000
Manifest this update: Wed 13 May 2026 01:01:12 +0000
Manifest next update: Thu 14 May 2026 01:01:12 +0000
Files and hashes: 1: GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa (hash: +SThIA5U78DHRFgrExpVjECZowaekUZ+Kqjt9wzZQWI=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: gtv36onkpMwvyLejZQs7GQcRoiW9tEgvyp9lt+UWVfo=)
3: tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa (hash: 8XEuad3zZxDli1a1G3vIehCptWc+Hmtp2zxnb2jVTdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:22:c8:24:39:d6:d8:03:eb:93:af:b3:4f:1d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: May 13 01:01:12 2026 GMT
Not After : May 14 01:01:12 2026 GMT
Subject: CN=82e7d8de17c37f05cda8cfd16cfedb79d1ad995c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:3c:8d:91:80:b1:86:d3:9f:ea:ff:9c:12:
ee:bd:08:f8:29:d5:6f:a6:30:c2:4c:18:d2:e5:c8:
9b:f5:4d:0a:8e:10:0b:6d:a7:4b:fd:09:c8:b2:3b:
89:b9:23:79:01:72:95:49:2e:0c:e2:7d:e9:88:ad:
79:82:2a:4a:90:94:ca:09:d2:74:f7:94:94:51:fe:
31:a8:0a:07:62:2a:74:70:9a:23:48:d4:26:68:fb:
3b:57:99:ff:d3:71:74:bf:01:e5:8c:5a:8b:0f:84:
59:08:a3:66:18:47:57:8d:9d:a1:05:57:6a:cd:86:
0d:ef:22:ba:94:3b:12:30:cd:d2:fb:77:03:6e:3c:
b8:bc:15:8d:2d:83:20:19:97:16:5c:67:50:e8:21:
9d:75:70:62:48:60:48:86:1d:10:fd:f6:02:f8:2b:
04:75:e0:10:bb:c3:fc:2f:b0:dd:16:ea:6a:b7:4d:
3d:70:10:75:1c:12:8a:8a:0e:35:a6:b4:0d:6a:10:
11:b2:8b:45:49:c7:fd:3f:83:e9:a6:7d:43:08:a8:
94:1a:1b:7a:5c:fb:0d:ef:99:56:bf:5d:50:49:13:
15:7c:90:34:c0:7e:55:d4:6b:5e:03:b4:9a:2c:f8:
0c:9f:81:72:91:0d:12:fa:6a:01:0a:3b:37:6a:5b:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E7:D8:DE:17:C3:7F:05:CD:A8:CF:D1:6C:FE:DB:79:D1:AD:99:5C
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:b7:03:d7:ae:ba:9d:f4:26:2c:d6:8d:3a:b0:8e:26:b7:
1c:4b:5a:df:23:47:b4:ae:be:d2:a6:f9:bc:6a:0a:c2:23:ea:
86:99:6e:84:5e:d5:4c:7d:7b:2d:de:59:1b:63:82:58:d8:78:
d8:33:48:7f:77:a5:0c:fc:15:0a:9b:ca:50:c5:cb:a6:88:7f:
ab:dc:b9:6e:0e:15:5e:55:28:e8:fc:0f:43:d3:0d:20:90:ca:
d0:3e:14:1e:48:6d:6e:f2:a1:30:8d:3d:f1:cd:98:71:bd:af:
12:d5:f2:51:2d:ba:ea:65:1c:5c:dd:92:7f:4c:f1:4c:f7:ab:
22:1f:5a:52:1d:ec:02:1d:3a:07:ed:0f:bc:e7:e3:76:fe:06:
f7:95:6c:8d:c1:1d:ec:20:7e:10:76:75:06:2f:06:82:ed:f7:
1d:33:2b:12:f7:73:c5:5d:c9:fe:97:0a:c7:df:4f:0a:86:81:
fe:0d:e4:72:74:af:50:82:25:da:e6:aa:69:f1:db:a6:ff:e3:
5c:56:18:18:d6:04:ae:7b:e6:65:7f:98:6d:52:85:00:ce:e7:
45:70:49:15:4f:b4:7b:2d:8a:af:7f:90:72:5e:02:c5:f7:23:
d9:41:ba:81:a0:83:96:cb:9b:17:9d:70:6e:1a:c8:59:22:db:
b9:f6:5a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:52 2026 by rpki-client