
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: qPi+LArDfegc3+uo/s40xPVcNq64lc52urjwW+HVpvM=
Subject key identifier: 11:BB:64:62:94:FC:53:AB:44:B9:6E:F5:8D:86:07:7D:80:95:82:19
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 019D27A9397310696D32D648525A7862AFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 01:01:34 +0000
Manifest this update: Thu 26 Mar 2026 01:01:34 +0000
Manifest next update: Fri 27 Mar 2026 01:01:34 +0000
Files and hashes: 1: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (hash: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM=)
2: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: o4G5FCqoVXBIefuB0ciSxn84lWHpUo3mAm7IapX8Ue0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:39:73:10:69:6d:32:d6:48:52:5a:78:62:af:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Mar 26 01:01:34 2026 GMT
Not After : Mar 27 01:01:34 2026 GMT
Subject: CN=11bb646294fc53ab44b96ef58d86077d80958219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:ca:e1:82:d8:c0:b0:a3:f2:7a:54:da:a4:
17:01:d8:86:aa:09:cc:a0:ab:f4:0e:ac:26:13:94:
2f:5f:fc:3f:1b:83:95:ff:25:61:62:56:0a:6c:e8:
64:f6:5b:ff:55:d2:29:b8:d1:8b:50:fa:90:dc:48:
d5:cf:ae:be:14:79:56:a9:c2:db:ba:78:63:59:ac:
2d:f1:53:a4:00:76:df:1c:10:cb:b1:98:69:83:d1:
e4:54:db:52:57:35:27:a0:b7:6f:4b:0c:a3:75:7b:
c1:45:da:4e:83:7e:44:67:ef:6c:80:28:f7:fa:d6:
0f:cf:0a:9d:17:11:2e:a1:88:0b:42:37:b7:cb:2f:
aa:8d:3f:93:dc:06:95:d6:37:c6:68:08:09:fd:10:
61:36:21:da:e4:23:99:57:de:b5:93:ce:fd:c5:05:
01:4e:9b:ed:27:47:d2:af:47:a8:b1:65:52:e9:d2:
f6:06:0c:11:92:81:af:85:6e:13:89:b1:20:37:e9:
4d:24:2e:40:7a:c8:8d:fa:1a:cd:e8:73:11:53:f2:
a8:42:0f:bf:e5:a2:4b:0a:94:2c:a8:4d:00:4f:f9:
78:1d:d3:1f:11:00:05:93:91:1a:a3:04:ee:6f:d8:
b4:38:58:07:b7:7f:0a:dc:f0:0d:7f:77:a0:90:59:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BB:64:62:94:FC:53:AB:44:B9:6E:F5:8D:86:07:7D:80:95:82:19
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ae:ef:d9:1e:43:48:94:72:91:c2:6d:e0:31:b4:42:b9:94:
f9:13:ac:5e:37:48:08:ec:c0:b1:05:cf:08:60:8d:a1:45:31:
66:60:76:1d:ba:74:10:a8:69:43:90:17:1b:78:60:65:70:a3:
d5:d9:bc:2c:d5:dd:98:ea:8c:20:ff:1a:ca:26:1d:12:5a:9e:
50:c2:3b:8d:5f:90:8a:90:5b:63:f0:5e:47:bd:8e:d4:a4:07:
dd:fc:0d:04:eb:c4:b0:d5:ab:a0:01:1d:6b:b0:4a:eb:a5:e5:
4a:11:61:7b:79:21:a2:82:fc:66:ba:d5:d2:12:6c:10:d7:8d:
0c:7f:bd:80:ee:00:2d:30:00:92:d0:ca:86:3d:9c:f4:1d:09:
49:09:35:34:fe:a5:f4:79:b1:5f:20:15:2f:70:1f:0c:ef:a2:
cc:3e:cc:67:6c:8e:aa:88:ef:52:d7:6a:b6:57:23:23:4c:20:
2a:27:84:03:64:0f:63:42:78:10:e1:b7:8e:32:f1:d7:e1:22:
2e:1c:99:ba:1e:93:98:cc:ae:2f:d4:3c:8b:b3:b7:10:fc:83:
e9:38:0f:b8:92:a0:59:97:8e:08:8d:74:5d:fb:cc:f4:4b:d7:
d1:6e:12:ce:be:ce:0f:96:b3:0c:d3:b6:b9:86:8a:9b:a6:bf:
1c:85:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:46:51 2026 by rpki-client