Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: pgH06QyCpamkLUiPZs1IWO5I8kg6vfYLyVP77N0UE+U=
Subject key identifier: F8:8F:3C:5C:5D:1A:8D:52:6A:FA:EC:81:59:9D:D8:07:59:90:46:73
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019F93C96C0615027E01604AB3D502532CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 195D
Signing time: Fri 24 Jul 2026 11:01:18 +0000
Manifest this update: Fri 24 Jul 2026 11:01:18 +0000
Manifest next update: Sat 25 Jul 2026 11:01:18 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: VO7tCZWW5YQAMhIXaxcTCTGjp/y7m1SqRkS2NN4MHZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:6c:06:15:02:7e:01:60:4a:b3:d5:02:53:2c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Jul 24 11:01:18 2026 GMT
Not After : Jul 25 11:01:18 2026 GMT
Subject: CN=f88f3c5c5d1a8d526afaec81599dd80759904673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:f7:1c:44:5d:97:fe:7d:5a:99:65:ea:be:
3f:a0:ea:da:f0:bf:4a:37:99:8a:38:0e:c8:3f:2a:
87:a2:9c:2f:93:83:fa:b4:ae:f3:58:09:3c:45:d3:
48:c2:04:63:54:7e:73:4e:39:5b:1d:57:e0:93:50:
88:df:43:71:8f:42:04:b2:2b:59:89:d9:fa:bb:48:
23:8c:82:5f:63:fa:ef:cc:04:04:96:69:90:ec:ed:
9e:2a:7c:38:c5:e0:5a:14:0c:c7:ac:a4:76:8e:f0:
dd:cd:7d:bb:f9:0d:f8:85:a0:9c:1a:d3:c3:43:52:
e2:2d:4e:23:3d:b5:9b:f7:71:9c:2c:07:4d:59:9a:
3a:ab:88:4d:da:85:9e:2d:aa:20:4f:fd:39:4e:64:
7f:0e:1f:36:cd:53:93:b4:1e:44:e9:86:3e:ce:3d:
ec:9d:d9:7e:47:cc:56:2d:68:08:35:66:f1:20:87:
04:9a:ab:78:50:e0:f7:89:0e:42:89:96:43:d2:f7:
c9:68:88:46:42:a8:88:66:a0:74:42:2e:f7:c6:ce:
2a:20:39:c6:09:54:7c:d3:38:18:d9:4b:49:90:61:
fc:27:de:88:dc:38:63:65:d6:0c:a0:3f:60:01:cc:
1c:2b:71:b1:96:d8:97:5b:f2:e4:64:2c:59:8f:0f:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:3C:5C:5D:1A:8D:52:6A:FA:EC:81:59:9D:D8:07:59:90:46:73
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b7:2c:2b:a4:e9:65:88:5c:9b:c5:40:27:14:9e:7f:c5:99:
25:a4:3b:23:c6:69:4f:39:70:5b:61:ba:27:ad:c8:bd:88:e2:
36:68:19:e6:46:da:78:48:fe:c4:4f:82:f3:05:fd:93:1f:a2:
b3:5d:98:aa:da:fa:9c:13:de:99:9f:19:29:94:6f:aa:41:23:
e0:7f:2f:fa:05:ff:d8:f9:7d:94:9a:03:78:4c:36:f9:15:0b:
ba:c6:83:0b:2d:5a:92:4f:15:79:b8:51:1e:4d:53:89:1f:ac:
99:8d:5f:33:7b:3d:19:6c:96:c4:18:ce:4b:d3:18:42:13:48:
9e:b5:5b:a3:fe:30:b6:56:90:cb:ce:35:ec:e0:55:10:61:71:
e4:2a:8e:c3:c4:5c:11:36:c9:ce:10:65:e3:a9:9f:c9:24:74:
92:41:43:1a:dc:bf:fa:b0:e9:5d:8d:11:f4:dd:c1:7e:62:b9:
77:54:93:ee:73:db:1e:28:03:ec:67:70:21:29:d2:e2:34:5a:
88:58:a5:a8:51:fb:e7:60:1b:25:95:10:9d:ed:b8:94:a6:4a:
71:34:8f:15:44:65:e3:c6:3c:05:ff:2c:28:83:11:5c:87:06:
94:cf:e5:0a:cc:14:78:d8:e4:53:7f:7a:36:ee:55:ec:12:5e:
56:db:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:38 2026 by rpki-client