Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
File: BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft (raw, json)
Hash identifier: wRgfvRZZk8tpf5+FDw2f/ui3nNMdCUa5sRmWufBXSgw=
Subject key identifier: B3:97:88:0E:64:02:67:1E:78:EC:1C:3E:62:40:8B:B8:82:57:81:7A
Authority key identifier: 06:53:FB:3E:56:D3:48:15:DF:AB:4A:47:2C:E4:3E:1F:05:CD:DE:F0
Certificate issuer: /CN=0653fb3e56d34815dfab4a472ce43e1f05cddef0
Certificate serial: 019E1DC73FD0092A6E13EE587BD4BB34FF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
Manifest number: 2F
Signing time: Tue 12 May 2026 20:00:57 +0000
Manifest this update: Tue 12 May 2026 20:00:57 +0000
Manifest next update: Wed 13 May 2026 20:00:57 +0000
Files and hashes: 1: BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl (hash: PIo1oRqDJvOjLfjT/mEONoiEb3Cf2JjJq21LhP1b23Y=)
2: PQIndNBPhUHcFJTYcUMrCvxz4-c.roa (hash: XR6KIi/5N9W2LcPOtGecqXCju8ze0aaqWYIJi9fNKa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:3f:d0:09:2a:6e:13:ee:58:7b:d4:bb:34:ff:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0653fb3e56d34815dfab4a472ce43e1f05cddef0
Validity
Not Before: May 12 20:00:57 2026 GMT
Not After : May 13 20:00:57 2026 GMT
Subject: CN=b397880e6402671e78ec1c3e62408bb88257817a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:74:3a:aa:13:6c:cb:78:58:61:51:45:ff:
0d:f5:9c:83:d0:da:76:77:8b:ab:11:e4:67:41:f9:
b1:75:e4:c5:ad:eb:df:50:b3:b6:9d:a6:52:d8:db:
8c:83:06:b3:0b:52:84:59:d2:83:97:30:8c:2f:c0:
27:ee:c2:11:55:0f:71:b6:76:d5:ee:90:4d:8b:93:
09:bf:f7:16:8d:b2:f8:72:39:e7:2a:ae:84:54:de:
7d:2f:27:93:ae:5e:54:12:80:82:e8:83:bd:58:b9:
b5:df:b9:8f:84:39:3e:e3:a0:fb:71:72:6a:69:60:
2f:0d:da:0f:43:59:47:d9:1f:ed:f9:7e:11:88:16:
3d:3c:b8:c8:e5:7f:72:7d:15:0f:0e:f7:3c:75:98:
24:79:78:69:44:73:c4:8a:c9:a2:0a:af:1e:42:df:
f8:9e:e9:b1:54:b1:f5:c2:d8:b9:a5:25:b5:c2:b0:
07:fe:d5:1c:3d:33:d9:a4:ef:16:2d:18:77:62:ab:
3a:2b:94:8b:9c:3b:36:1b:7b:3d:f6:9c:f2:c2:c0:
7a:4d:6e:2c:83:31:22:4d:f1:b7:04:2d:14:74:f9:
ab:94:b9:5a:b8:2d:97:b1:1b:8c:04:6b:79:9d:07:
0d:41:95:d7:75:23:d7:54:79:68:90:90:04:66:85:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:97:88:0E:64:02:67:1E:78:EC:1C:3E:62:40:8B:B8:82:57:81:7A
X509v3 Authority Key Identifier:
keyid:06:53:FB:3E:56:D3:48:15:DF:AB:4A:47:2C:E4:3E:1F:05:CD:DE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3f:ab:51:31:23:9b:8a:b0:06:18:e6:9f:d0:4b:00:49:49:
bb:ac:fb:bb:be:a2:8c:d3:ee:25:76:2c:95:2b:70:70:42:55:
0f:b0:dd:f0:d2:1d:32:d7:83:38:15:21:13:7d:d5:00:67:6b:
58:64:a4:b1:a2:1f:ea:5e:7e:92:cb:7e:e7:78:ba:73:18:b1:
b3:18:07:da:81:5f:44:bd:53:91:7b:43:a3:f4:14:76:f1:63:
dc:b4:ae:fc:49:52:38:11:6c:ef:e6:4f:3f:4a:6c:13:66:58:
0a:1e:3f:18:6e:44:ac:2c:18:f9:f9:b8:eb:e7:36:53:47:2a:
ef:27:d5:cb:28:d3:80:4f:bc:3d:b8:eb:d4:d3:0d:66:43:ff:
0b:de:ad:20:cc:77:df:72:1e:e5:43:91:9c:8b:55:81:e1:cb:
47:55:7e:f2:32:2c:f9:f8:16:71:65:14:25:d7:b3:6e:74:7a:
6b:dd:c3:e9:ff:57:fd:16:0b:d2:a7:2e:35:5b:d9:cd:93:33:
0d:62:27:81:6e:d8:bf:60:42:a3:fb:ec:ea:bf:da:a5:da:dd:
70:72:b6:49:58:77:09:63:3e:1e:83:df:21:9b:60:25:ac:66:
ac:cd:e6:9d:06:5f:28:ee:50:49:7a:78:ff:67:c7:33:34:5d:
83:d8:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:47 2026 by rpki-client