Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: Yt+eFDKqb9i1RBNOgu7gx0xnJ4F31dQYde5uPSH36C4=
Subject key identifier: 70:3B:F3:09:EB:30:24:03:16:A6:16:65:31:65:A7:33:80:EB:3C:7C
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 01A0D15BB23EBD17E8B3E1E47FE2F12FDBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 0A17
Signing time: Thu 24 Sep 2026 03:00:42 +0000
Manifest this update: Thu 24 Sep 2026 03:00:42 +0000
Manifest next update: Fri 25 Sep 2026 03:00:42 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: zeiES1VTe5r1oLycfD+YP9aCFuxWujP5m3q4+Q6m6gg=)
2: UO3efIc_XfI8seJml1F-LycT9UQ.roa (hash: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:b2:3e:bd:17:e8:b3:e1:e4:7f:e2:f1:2f:db:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Sep 24 03:00:42 2026 GMT
Not After : Sep 25 03:00:42 2026 GMT
Subject: CN=703bf309eb30240316a616653165a73380eb3c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:c2:4f:10:4b:43:b2:2c:36:74:41:19:bd:
23:10:71:fe:76:20:de:c0:cc:16:6a:6d:63:84:8d:
4d:04:0c:a7:40:3d:8a:6d:c9:3b:1f:54:8b:f5:f2:
6c:c2:d4:aa:76:82:4c:88:70:b3:0d:ef:a4:c5:c1:
94:27:a2:0b:48:eb:04:a9:8c:31:f5:09:34:79:a1:
34:59:d9:56:c3:2f:de:a9:94:d1:7f:3b:d0:bf:dd:
78:de:a6:50:53:b5:33:f3:b5:46:0e:d3:7d:6d:c2:
58:74:6c:77:a4:50:bd:36:57:4f:8c:e2:28:ab:aa:
a0:44:9b:02:af:56:21:b9:70:b3:a6:28:0b:eb:d5:
54:f9:10:4e:22:f1:3f:a0:fe:62:07:37:b4:35:9e:
00:81:bd:11:ef:51:e0:20:c2:1f:d7:8e:0e:b8:ab:
52:21:4f:81:fe:c7:60:11:59:0a:c9:96:a9:d2:6c:
11:e0:ec:98:8d:b5:9c:60:f4:aa:5a:a2:8c:98:44:
3d:92:39:f5:15:e4:67:fc:93:89:5b:61:cf:e3:66:
8f:f8:7d:32:94:fc:b9:4b:58:f8:5b:f8:10:c5:29:
bf:b9:8d:3f:c1:cc:07:da:5a:e9:9d:f9:6a:f2:dd:
16:5c:22:65:01:dc:aa:29:60:18:00:c3:b5:6a:45:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:F3:09:EB:30:24:03:16:A6:16:65:31:65:A7:33:80:EB:3C:7C
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d8:fd:1d:b6:e4:d0:fe:91:7c:93:bd:09:da:a5:6f:81:09:
b9:e4:9a:46:b2:88:70:82:a7:1a:7b:54:14:a0:73:84:e0:04:
e9:20:19:41:7c:4e:cb:2b:d7:58:4d:06:5e:e3:62:b1:2b:de:
13:50:67:46:ab:db:fd:49:f1:d3:2c:17:42:a6:16:d9:fd:04:
3d:1a:a3:62:3b:f1:b0:03:23:0e:f1:d5:8b:90:b9:85:17:f0:
05:f6:bd:12:00:78:74:e6:c5:0c:8f:37:6d:47:79:17:74:1d:
56:97:d7:06:e4:23:af:fe:34:66:d3:9f:14:16:45:60:b0:74:
a8:3f:24:4a:9b:97:a3:3a:21:fc:27:ac:90:0a:62:ad:d5:9b:
35:02:e5:75:c4:90:b8:75:3d:f9:9d:80:8e:f4:08:4e:d0:00:
3c:2b:66:94:ad:6c:ad:ff:9e:16:fb:2a:9e:fb:32:22:5c:01:
8a:9a:80:10:f6:ee:3c:27:09:c7:e5:24:90:aa:db:63:64:d0:
b8:79:d3:5e:ba:b3:42:4c:a1:f4:f4:1d:da:20:1f:91:a0:35:
26:76:c5:84:f9:c1:0e:c0:f9:b6:01:0f:4d:f3:44:12:c5:5f:
cc:35:0e:18:85:b4:d1:d5:15:a0:5e:ac:d2:90:f7:10:3e:f0:
d4:b5:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:33:08 2026 by rpki-client