Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: 9C1fCcHPOqze7T1gqndMKYNWRdSUIFOzJpa7NgKonW4=
Subject key identifier: F7:38:37:7B:C9:FD:E2:F3:47:0B:8E:71:83:31:9E:44:BF:12:7B:C7
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019D29CE401C0521200309FEAD469DF4C831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 181D
Signing time: Thu 26 Mar 2026 11:01:15 +0000
Manifest this update: Thu 26 Mar 2026 11:01:15 +0000
Manifest next update: Fri 27 Mar 2026 11:01:15 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: TMWVmxKeC6yd/xcr6JpX73ALacGpnglf7UOlqFxA1tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:40:1c:05:21:20:03:09:fe:ad:46:9d:f4:c8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Mar 26 11:01:15 2026 GMT
Not After : Mar 27 11:01:15 2026 GMT
Subject: CN=f738377bc9fde2f3470b8e7183319e44bf127bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:92:14:19:bd:50:73:d4:d3:7b:ce:af:a0:
3c:d9:2c:c7:ef:0b:ec:fc:02:73:ab:c9:0b:34:6f:
2a:ff:b5:43:55:23:1e:a8:84:1f:b0:55:1b:ad:a4:
0a:ca:9b:a1:1e:42:f4:d0:c0:79:83:22:b5:8c:de:
03:1a:dd:67:e3:5e:9c:34:fb:33:41:22:5d:85:87:
ad:32:11:b7:42:19:a1:86:44:c8:68:88:46:82:ae:
5c:27:a0:b2:07:33:e9:07:39:dd:be:64:5c:71:b7:
10:5a:93:7f:f0:46:f3:a2:5f:21:23:50:07:3b:00:
05:34:a6:72:3a:69:93:f9:af:c4:a0:ba:a7:e2:d9:
f6:4c:7d:1a:41:62:03:20:f2:1e:f8:5a:ca:a2:17:
07:36:a7:28:02:58:b1:71:cd:08:2f:74:b0:d0:18:
b4:95:cd:27:9f:df:7d:6d:56:33:94:da:99:ad:a1:
d9:bb:b4:03:f7:2b:28:76:b5:33:8e:e8:ca:21:01:
83:73:9f:17:59:3f:33:57:67:d9:16:31:f6:db:2b:
24:a5:1f:e2:b4:20:a4:fe:04:92:c1:66:8f:14:c0:
30:2e:c6:96:71:46:76:3f:08:0d:60:ea:57:cd:2c:
14:69:9a:d6:52:00:73:db:c9:e6:cb:04:fb:d3:f6:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:38:37:7B:C9:FD:E2:F3:47:0B:8E:71:83:31:9E:44:BF:12:7B:C7
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0e:1d:ee:24:72:30:09:60:53:7e:f5:10:8c:69:cd:df:77:
42:1e:8c:8f:a1:a4:be:6e:c6:ec:30:96:61:28:0f:2e:50:85:
7d:ff:5b:4d:ab:ae:7f:f4:27:1c:97:e5:df:77:64:36:ed:ce:
89:67:00:17:9e:96:ee:b9:ce:21:d2:f3:b9:ef:5f:d8:b8:cb:
a7:cd:13:6c:af:d2:b3:e3:e3:aa:c6:9d:8d:8b:5f:56:c9:e9:
fb:fd:a5:89:59:27:b6:07:27:9b:a7:6f:b1:8d:4a:78:88:34:
59:bf:5c:f4:eb:0b:fb:aa:fb:07:3d:9d:91:60:25:72:12:63:
78:95:7c:13:c3:1a:e1:01:f2:89:a8:7a:d3:69:81:8c:2f:1b:
11:f6:a9:46:15:69:08:2a:91:3d:9f:58:2e:4c:c3:6f:0b:92:
31:cc:96:1e:32:bb:84:81:2a:3f:a0:b8:04:66:a1:9a:40:5d:
44:a9:98:24:0c:99:86:77:95:96:02:16:d5:2b:04:02:9f:57:
54:8a:f9:37:7d:09:78:2d:6b:5e:de:60:37:73:0e:54:0b:75:
69:e3:31:bb:f8:c0:f1:7c:69:91:8f:23:31:6d:15:8d:9d:ec:
28:a0:21:37:6d:c4:d7:32:8f:32:7d:83:7c:1a:f8:d9:61:74:
79:3a:89:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:30 2026 by rpki-client