Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: bbCq4sOJos4HnP1Y2HrSSEeD5/c05rxA80pCnYq1Mqk=
Subject key identifier: 9A:F4:12:F8:60:BA:F8:6B:A9:74:01:7D:BE:E9:76:87:08:B6:D3:62
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 019F91A3D916FED56A619AB451F14AFB7379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 01:01:01 +0000
Manifest this update: Fri 24 Jul 2026 01:01:01 +0000
Manifest next update: Sat 25 Jul 2026 01:01:01 +0000
Files and hashes: 1: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (hash: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM=)
2: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: mYji/TqDhKAuaagvEpWmVz67+3O/umy4V1WaTQ2pyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:d9:16:fe:d5:6a:61:9a:b4:51:f1:4a:fb:73:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Jul 24 01:01:01 2026 GMT
Not After : Jul 25 01:01:01 2026 GMT
Subject: CN=9af412f860baf86ba974017dbee9768708b6d362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:8f:96:f7:13:de:df:8e:3e:f8:7b:e3:fb:
5b:86:b5:25:09:3f:dc:a9:2e:47:bc:b1:71:a9:5b:
37:63:f7:48:fc:73:3b:7b:92:41:24:a4:66:4c:d3:
8d:db:df:16:a4:7d:a8:e1:32:0b:7c:86:b7:8a:0e:
df:d7:83:72:a1:e2:6c:cc:a7:db:e1:14:74:91:77:
91:57:4a:be:24:c3:20:c9:42:03:9b:d5:e7:f0:02:
0b:6f:59:39:71:c9:fd:bd:66:85:6e:e1:e4:68:e4:
7b:ef:26:cf:92:3d:1a:5f:0e:42:bb:4b:54:04:94:
54:f7:27:17:96:99:87:de:a2:8e:04:b9:d8:cd:7c:
a1:d2:42:97:23:57:4b:9c:2a:5c:63:00:23:42:4a:
f8:cc:e8:3d:85:2c:0f:ce:1f:cf:16:d9:74:d5:c4:
73:67:ef:d4:e4:b4:45:d8:51:9b:c8:73:ae:d8:48:
95:ea:4b:d0:bd:a1:e4:e0:01:17:ae:44:51:d0:64:
05:e1:c5:5d:19:00:bb:6f:ec:db:9a:4b:8d:2e:dc:
ab:7e:57:f3:d9:cc:b4:ac:92:34:9e:90:ec:11:cf:
89:0b:6b:8e:f3:8f:ed:26:bf:b3:f9:50:17:51:8d:
7f:be:f3:1b:55:c6:e8:77:dc:83:e6:7e:a1:83:70:
9a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F4:12:F8:60:BA:F8:6B:A9:74:01:7D:BE:E9:76:87:08:B6:D3:62
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:a9:0a:7d:37:51:55:a0:fa:13:b6:55:13:0a:8d:fd:06:4d:
c0:71:05:e7:cd:48:d5:b5:ee:67:7b:5c:6c:f1:4f:08:08:6d:
4d:fd:e9:20:05:d1:70:d5:4c:1e:b2:fe:76:1e:31:6f:fd:4f:
09:78:41:05:c8:b2:90:8b:15:e4:71:ee:f2:2e:46:81:d9:39:
00:2b:fc:7e:53:de:00:f2:6e:13:2c:ce:33:bf:06:b9:1e:b6:
d6:3d:d7:0c:d8:02:c9:d3:23:31:87:8f:8e:c3:33:7d:8e:ed:
fc:fa:2a:8d:f8:71:d8:94:fe:d2:a8:4f:69:a0:cf:6d:32:8e:
ce:2c:8f:ab:4a:c4:76:96:8d:b3:db:48:e1:41:8a:af:bf:79:
01:69:eb:15:fb:e7:bb:60:54:78:b6:2a:6e:2c:ce:9e:56:f6:
f3:19:50:c2:6d:ce:7e:da:73:03:ea:e5:a5:c9:bb:5f:bd:50:
61:81:18:ed:3e:66:db:21:37:83:44:2e:9f:5c:33:84:fc:53:
15:60:21:c0:19:2a:2e:62:5b:e5:61:3c:6a:59:da:c0:e1:3e:
55:08:11:11:4f:01:d8:bb:6a:a1:15:50:23:5e:82:69:97:0a:
2f:f1:c3:6e:be:76:05:4b:08:a1:c5:33:7e:86:8e:25:c8:cc:
06:bc:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:35 2026 by rpki-client