Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: M+OPGrlreHjjPj0GQSk2nnQALRwkLHJellttsADUpU0=
Subject key identifier: 62:A3:61:64:8D:18:90:1D:41:F9:66:2E:9D:8A:1F:89:5F:0B:1D:A8
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 01A0DA28772D528123E206F5174C87A18EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 1A06
Signing time: Fri 25 Sep 2026 20:01:20 +0000
Manifest this update: Fri 25 Sep 2026 20:01:20 +0000
Manifest next update: Sat 26 Sep 2026 20:01:20 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: z3povPWNs+OxnPcWpcuQgaDWkfIgQ1nTWu/0yY3+YEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:77:2d:52:81:23:e2:06:f5:17:4c:87:a1:8e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Sep 25 20:01:20 2026 GMT
Not After : Sep 26 20:01:20 2026 GMT
Subject: CN=62a361648d18901d41f9662e9d8a1f895f0b1da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:81:e7:42:34:fb:f5:30:51:34:40:d7:ef:
5a:1f:65:ae:7c:04:28:47:98:88:90:8d:29:9d:c3:
41:76:59:3c:1d:8e:42:4c:41:de:47:8a:3e:b0:21:
7d:ab:f7:62:8e:88:e7:6a:bd:24:e8:eb:0b:0e:27:
3e:fe:db:65:61:dc:46:8f:7e:1d:77:cc:db:42:00:
82:be:74:a2:6f:3d:46:05:9a:43:5b:bf:8c:9c:fa:
69:67:fe:01:37:2a:fb:9d:e5:a7:1b:87:e3:07:9e:
81:0f:1d:89:7a:02:af:4f:77:85:95:d6:5c:8e:43:
6e:d1:99:11:d4:5a:f7:bf:0a:df:d5:ce:2f:c9:4b:
c8:6e:d2:4f:79:f0:15:b5:b8:f6:df:db:cc:c1:9f:
93:02:e9:47:7b:10:24:c3:8f:21:8a:10:d5:11:f0:
99:62:ff:3f:38:29:62:4b:b7:55:89:b1:8f:eb:b9:
6a:77:57:03:e2:c0:ab:a5:f0:22:9c:a0:44:65:12:
b3:af:87:00:db:70:8b:d2:48:f0:e4:5e:2c:bd:21:
d5:eb:5e:7b:c4:a2:e0:87:e6:b9:8d:ec:6a:97:8c:
83:8f:5b:bb:73:87:d4:e7:9b:5a:8e:29:ee:e2:11:
31:f5:b1:6e:c0:24:ca:e5:91:ac:76:84:bf:e0:f0:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A3:61:64:8D:18:90:1D:41:F9:66:2E:9D:8A:1F:89:5F:0B:1D:A8
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:10:ae:ea:72:79:63:64:ac:cb:28:a1:ef:46:a0:66:10:26:
71:90:7c:75:97:ca:44:14:05:8f:d8:82:21:37:07:c8:6e:0a:
9b:ab:4c:5d:86:bc:35:82:e3:4e:d5:02:37:21:4e:8f:79:37:
d8:1e:82:c0:ce:15:4c:1b:50:48:11:b4:67:3d:d3:76:58:75:
ad:20:fb:7e:51:2e:20:a1:b4:9e:65:c7:dd:40:4e:3e:86:0a:
92:8a:ba:9b:7b:8a:37:44:03:ec:8b:ea:55:6b:ac:58:50:6b:
3c:9b:13:45:67:6d:4f:cb:39:3b:3b:47:5e:39:ca:38:c5:0a:
b5:8a:77:5c:a2:1d:63:f9:23:61:5e:e7:c1:8f:41:6d:7d:54:
8b:96:46:08:36:19:5d:4e:e9:f0:0f:9d:11:cb:51:dc:c5:cc:
94:8c:cd:22:2e:38:98:87:0e:50:d1:4b:3b:c5:38:7d:25:03:
a9:4b:5c:b7:4c:7c:9c:65:6e:a3:33:7d:36:bf:9a:14:c8:12:
67:a8:61:61:48:5a:73:8e:f6:21:cc:7d:6a:bc:2e:aa:50:f0:
f8:d7:2a:16:33:e2:a4:d8:60:ff:d4:16:37:f1:e3:bb:e2:9d:
8c:0d:fc:20:5a:5c:1a:db:1f:ed:eb:cd:af:86:86:6c:b1:01:
51:e6:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:58:05 2026 by rpki-client