Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
File: BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft (raw, json)
Hash identifier: EfLNB7lqh8wSiWdgnx4v5FR+c5aisk3+IKtq+PctQYY=
Subject key identifier: 3A:C3:DD:72:87:53:D0:6F:11:E8:F0:43:69:10:8B:8E:C4:9E:C6:21
Authority key identifier: 06:53:FB:3E:56:D3:48:15:DF:AB:4A:47:2C:E4:3E:1F:05:CD:DE:F0
Certificate issuer: /CN=0653fb3e56d34815dfab4a472ce43e1f05cddef0
Certificate serial: 019F909119AB426DB1AD800E8F7863C9AE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
Manifest number: EF
Signing time: Thu 23 Jul 2026 20:00:56 +0000
Manifest this update: Thu 23 Jul 2026 20:00:56 +0000
Manifest next update: Fri 24 Jul 2026 20:00:56 +0000
Files and hashes: 1: BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl (hash: PcqF7/VkGlAr2Qi5SE+qPMSxYTLAurUwYrHeay2VYdw=)
2: PQIndNBPhUHcFJTYcUMrCvxz4-c.roa (hash: XR6KIi/5N9W2LcPOtGecqXCju8ze0aaqWYIJi9fNKa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:19:ab:42:6d:b1:ad:80:0e:8f:78:63:c9:ae:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0653fb3e56d34815dfab4a472ce43e1f05cddef0
Validity
Not Before: Jul 23 20:00:56 2026 GMT
Not After : Jul 24 20:00:56 2026 GMT
Subject: CN=3ac3dd728753d06f11e8f04369108b8ec49ec621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:d7:00:11:a4:fe:c7:10:69:e4:e3:18:47:
4b:bc:83:bc:77:6f:2a:06:c8:37:2b:30:e8:4e:05:
b0:b9:f1:09:01:f1:72:51:bc:83:bd:79:26:aa:8c:
0e:32:34:16:ae:36:c3:ba:24:36:0b:ce:4a:37:31:
ed:a5:7a:af:05:47:bd:96:11:07:a6:cd:66:33:c6:
dd:5f:26:3a:07:3a:6e:b6:0f:9e:e1:16:06:09:15:
89:bb:21:bd:08:49:51:61:9e:c2:e7:44:19:ea:15:
9f:05:f7:c1:ff:8a:db:10:ac:7f:17:da:a6:fe:d7:
2a:5c:97:21:33:89:d0:94:df:34:5d:a7:13:0e:38:
54:0f:4f:59:57:e0:89:c5:3c:88:78:14:88:84:39:
bf:26:74:72:e5:06:d1:38:d4:95:48:d7:20:b8:71:
60:72:9d:bc:2c:b9:97:e3:c7:c7:6d:fd:a9:56:04:
58:e1:59:69:45:a5:09:1c:24:63:ae:a4:c5:65:4e:
c2:0f:1a:d9:fe:20:82:82:d3:3b:42:21:60:70:47:
49:3a:4e:20:6d:e8:b4:4e:99:fe:6f:cb:00:70:06:
a3:cd:79:3d:7b:f1:55:4c:c1:bd:5d:23:51:d6:24:
39:a6:d6:4c:ab:48:98:f9:8c:be:f7:3e:c3:94:fa:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C3:DD:72:87:53:D0:6F:11:E8:F0:43:69:10:8B:8E:C4:9E:C6:21
X509v3 Authority Key Identifier:
keyid:06:53:FB:3E:56:D3:48:15:DF:AB:4A:47:2C:E4:3E:1F:05:CD:DE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:85:63:d2:08:26:12:f9:fb:c3:c3:69:dd:ea:d0:34:ba:f7:
fc:1e:0d:01:fc:b6:3b:81:7b:80:0e:48:72:76:5b:89:27:96:
fa:ef:54:2a:2e:89:05:1e:5b:aa:99:e0:48:84:e5:9a:61:2a:
d0:12:f1:42:cd:dc:cb:ce:f1:23:c2:eb:2a:94:aa:30:b1:1b:
1e:0e:1a:61:54:7c:77:7f:c9:e3:30:82:fb:30:ee:11:c5:03:
26:27:9d:62:aa:b0:37:fa:24:02:3f:54:96:26:4e:bd:ca:2b:
c9:dc:99:65:b2:03:73:03:15:95:57:fb:70:91:24:a9:64:23:
b1:de:2b:f2:d4:43:34:02:16:ce:40:67:05:10:d5:fc:e7:b1:
7a:7f:82:4d:45:cc:e9:4d:28:42:17:f8:8d:9a:17:2d:8f:6e:
13:2a:e0:c9:ad:2c:37:64:dc:63:af:7e:93:2c:5d:a7:e5:c4:
b4:4b:ea:e1:bb:29:29:10:ea:3a:eb:5c:47:24:c4:c6:a8:0e:
1a:77:73:33:2d:55:3c:4a:cc:7f:db:66:de:e9:0c:d9:db:64:
a3:bb:dd:5d:62:48:c3:32:76:18:a5:d6:1c:a1:1f:fc:32:60:
c4:2c:0e:5b:02:b4:97:f7:05:d5:ed:d2:83:3b:54:65:e8:b1:
c3:0a:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:38 2026 by rpki-client