Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: jy5Zt+lB5S7/pbHjr9/wN7r9BQgdHW0+Qqr2zApNG9Y=
Subject key identifier: 63:77:22:E9:56:AD:FF:2B:F8:4B:AC:16:3C:03:4B:0E:17:BD:43:FE
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019D28BB53669FC7C9F9F829FFB801B6E535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 0832
Signing time: Thu 26 Mar 2026 06:00:58 +0000
Manifest this update: Thu 26 Mar 2026 06:00:58 +0000
Manifest next update: Fri 27 Mar 2026 06:00:58 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: ZuwW0TOy5Ott12mpTm4suJkb0hwqgwFcU0fZf7su/JM=)
2: UO3efIc_XfI8seJml1F-LycT9UQ.roa (hash: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:53:66:9f:c7:c9:f9:f8:29:ff:b8:01:b6:e5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Mar 26 06:00:58 2026 GMT
Not After : Mar 27 06:00:58 2026 GMT
Subject: CN=637722e956adff2bf84bac163c034b0e17bd43fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d7:84:e1:da:b6:34:1b:60:2a:55:e8:53:e9:
5e:5e:7f:bf:c1:bd:a2:4a:ba:e8:14:ad:6d:16:9f:
b4:bd:59:ed:8a:64:56:b8:dc:d9:64:c8:cc:e1:6a:
f7:33:30:16:e7:1c:bd:ba:1d:51:1b:5e:79:10:63:
88:53:2f:07:a6:31:b7:32:a3:fe:45:6c:7d:29:09:
67:c6:4a:15:fc:4e:f5:14:33:99:a5:d9:82:52:ae:
5f:2c:74:de:e6:ef:92:88:6a:aa:5e:3e:74:32:72:
9f:4c:ed:3c:68:f1:78:ee:67:4f:e7:bd:e3:4c:7d:
3d:53:4d:ca:c2:fb:93:e5:a8:0a:7b:e9:4b:25:d2:
af:48:3f:e3:d3:50:cb:5f:de:ad:c1:4a:87:5b:d5:
fd:60:80:e3:db:c7:dc:db:42:6c:f3:50:a0:5a:6d:
62:45:b7:57:e7:c4:91:12:71:28:04:5e:3a:f4:31:
13:b0:74:58:44:7d:04:93:6e:e6:71:09:3f:49:bd:
cf:49:84:3a:eb:9e:3f:42:f4:24:ec:45:97:f2:62:
ba:eb:6e:c6:fa:9c:4d:b1:0d:65:d6:0b:d0:2a:10:
53:48:c7:45:47:8b:81:ab:45:a8:73:d2:db:b5:fd:
a9:56:bb:36:6d:4e:e8:91:05:b9:d8:7b:be:2f:e4:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:77:22:E9:56:AD:FF:2B:F8:4B:AC:16:3C:03:4B:0E:17:BD:43:FE
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:73:11:79:a2:b8:39:42:cc:bb:80:5d:eb:be:5a:1d:32:e5:
4c:61:86:71:03:a7:d3:9a:e9:65:38:53:75:8b:91:c4:03:6f:
45:ee:59:19:6c:59:0e:17:f0:c5:d8:05:99:f3:da:69:30:a5:
3b:7a:5e:5e:fc:cb:4a:42:47:ca:01:45:40:9f:ec:61:c6:cf:
c8:6a:7d:e5:c3:2c:4e:cc:b6:af:a4:21:a1:d5:ac:a5:3c:98:
66:03:f6:82:42:b6:96:99:da:09:f8:ea:e5:b9:bd:d0:a2:4f:
fb:75:bb:0c:13:d5:28:c5:1a:d7:d6:e7:e8:c7:d0:ae:9b:c5:
f7:9e:a9:6d:d0:91:70:91:1e:15:55:27:77:43:27:da:bc:29:
d8:88:3c:e3:bb:9f:bf:2a:27:04:d6:1f:2e:fa:0d:91:3d:69:
fb:19:9e:43:b4:46:9b:bf:f5:e9:bb:d7:61:d8:25:dc:f3:35:
68:7e:2b:3b:a2:fd:6f:b4:24:9d:8b:31:1e:4e:3b:e4:b8:70:
0f:a9:a9:1c:9b:00:3c:44:1c:74:f0:5b:80:3d:c3:20:3b:e7:
80:51:f7:c8:0e:8b:96:d4:9e:2a:a8:cd:29:fa:01:ff:88:0a:
be:c1:7b:08:e2:57:09:ab:b7:5a:76:53:46:0e:13:a9:46:21:
71:53:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:19 2026 by rpki-client