Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: JfPm0QCYAh4VEWoJ38mYjQvUjhHmY1APAoZWkG0mEf0=
Subject key identifier: 2A:FC:9C:F7:82:AF:BC:63:24:ED:16:CF:42:59:06:5C:8D:FD:86:99
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019F90C78EC94EE3B263D06F0F51AD5C6FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 0971
Signing time: Thu 23 Jul 2026 21:00:24 +0000
Manifest this update: Thu 23 Jul 2026 21:00:24 +0000
Manifest next update: Fri 24 Jul 2026 21:00:24 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: 8OpkKst4wA0+IxKsHW8LJt5+QrfFzlC4TUs2jfwCiD0=)
2: UO3efIc_XfI8seJml1F-LycT9UQ.roa (hash: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:8e:c9:4e:e3:b2:63:d0:6f:0f:51:ad:5c:6f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Jul 23 21:00:24 2026 GMT
Not After : Jul 24 21:00:24 2026 GMT
Subject: CN=2afc9cf782afbc6324ed16cf4259065c8dfd8699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:e3:d8:a6:dc:52:83:0b:d4:28:31:b8:59:
31:92:ab:c1:ab:fa:3e:a2:8f:a1:82:80:68:c3:1f:
fb:38:d0:6a:eb:89:fe:f5:65:8a:d1:ba:2c:58:6e:
67:5b:2d:f9:6f:f9:3b:0b:ac:75:56:d1:b1:b4:59:
80:53:d0:22:a8:ac:f7:9e:91:fb:cc:28:fd:32:45:
a0:62:6e:b3:5c:b8:cc:9e:d8:21:c9:44:5a:9b:5b:
c2:ab:bd:1d:ed:8b:6b:73:f5:18:d2:d1:ab:a9:54:
8d:31:20:ef:c0:5f:54:0c:ab:9d:80:c6:c3:84:67:
72:fd:01:30:e9:53:57:9c:4e:17:0d:42:2a:7f:64:
95:09:88:14:71:0a:1c:ec:97:e2:b2:b4:ad:74:a4:
ba:6e:26:dc:a3:75:c2:5f:1b:6d:7c:f0:3a:80:56:
85:40:17:29:50:c3:73:fb:52:49:41:cf:9f:08:97:
e9:34:25:36:21:3f:bc:9f:c4:a2:ad:3e:2c:99:f8:
b7:e3:10:d0:88:26:bb:20:f8:31:ea:58:4d:71:30:
bc:33:ec:53:d0:9f:bf:18:de:e7:7e:4d:30:e8:91:
37:95:1b:32:a0:7a:4a:10:3d:1c:84:3c:f0:25:d8:
bb:72:4d:05:6d:6d:31:37:25:54:ca:f6:78:37:72:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FC:9C:F7:82:AF:BC:63:24:ED:16:CF:42:59:06:5C:8D:FD:86:99
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a1:03:96:f1:bf:43:0b:01:13:89:4a:33:72:5e:ce:59:9b:
33:8f:ca:5a:58:d2:a5:ac:88:53:4b:ef:03:33:62:f9:10:32:
ed:84:54:f7:96:a6:9f:89:49:ed:33:f5:18:3f:bc:c5:87:a5:
7a:e9:12:87:4a:8e:71:99:1b:59:e0:f0:b4:a0:2a:ba:cc:13:
c5:49:ea:f9:80:d6:57:5c:fa:1b:03:94:7a:5a:d7:21:a4:81:
24:01:fa:68:6b:ae:b5:af:84:49:d9:db:fd:e9:a2:33:a9:76:
45:18:71:15:48:26:25:21:75:09:b4:ce:d4:3c:94:36:d9:7a:
5c:35:ab:bc:7e:36:94:ca:2b:0c:c5:74:fd:fd:18:af:bd:bb:
5c:92:71:f3:c2:8b:a4:ae:90:b6:1b:f0:75:f2:2b:0d:c7:27:
a6:a3:45:57:ed:d4:44:a3:04:eb:75:83:fd:39:fa:98:7c:89:
8f:bf:a9:e7:f1:c9:5b:d9:2a:b6:1e:6c:e2:e4:4f:54:98:7c:
4c:1c:4a:08:a1:c7:eb:21:31:39:3a:8b:aa:33:c3:f1:29:d9:
b1:3a:25:2b:81:e9:78:73:e2:3b:ab:7c:81:dc:2c:01:58:93:
87:33:26:9e:0f:f7:af:d2:eb:c0:b7:42:57:f1:c5:3d:67:e6:
d0:11:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:08 2026 by rpki-client