Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: B6WIHg6WXq/4T6lD2K9NhvuOZk/faSQ2hil+JRdEQm4=
Subject key identifier: 68:8B:7E:3E:5E:E4:CA:58:06:A1:85:68:39:CD:36:1D:9D:86:71:7E
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019D27DFDA8046CD12D98E63E3AEA0C49706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 181C
Signing time: Thu 26 Mar 2026 02:01:14 +0000
Manifest this update: Thu 26 Mar 2026 02:01:14 +0000
Manifest next update: Fri 27 Mar 2026 02:01:14 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: bJ6tkCiF6U0NO2UIa2JKajxV3acuxSTRW87+0Rkl/Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:da:80:46:cd:12:d9:8e:63:e3:ae:a0:c4:97:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Mar 26 02:01:14 2026 GMT
Not After : Mar 27 02:01:14 2026 GMT
Subject: CN=688b7e3e5ee4ca5806a1856839cd361d9d86717e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:33:a8:50:61:31:ea:86:94:12:b0:76:b1:
a3:93:d8:0e:e8:b1:d2:74:ac:1d:ef:32:f9:89:48:
d8:ef:d9:21:a3:e3:3e:15:f3:13:df:f7:03:17:e9:
6a:1b:e8:a6:a3:28:94:7e:a1:c7:0c:0e:84:5d:d9:
36:d4:bb:fb:9d:6a:c2:fc:9b:2f:ae:ce:8e:84:7e:
37:7e:76:28:df:27:01:48:dd:75:c1:01:90:27:2b:
03:47:52:d9:10:cd:49:2c:74:7b:53:70:80:cb:79:
aa:49:5f:b2:51:f2:67:85:ee:8e:1e:12:fb:ec:90:
a1:0b:0a:4f:16:f5:20:de:05:6f:c1:97:0e:e4:87:
5a:dd:30:b8:9b:e4:d6:29:7c:0f:6f:9b:39:e8:23:
c5:33:c6:bf:2f:06:2f:7b:79:7b:40:a9:35:2f:de:
2c:94:5a:6f:84:99:21:c5:51:9f:40:54:11:e8:a5:
de:28:01:12:d1:1b:59:7c:91:45:51:e7:e7:6b:c4:
f0:a9:48:45:90:f1:9f:69:3b:a9:4d:77:a6:a7:17:
1a:51:ad:88:7c:55:43:ea:f6:ea:e4:f2:30:83:97:
83:c0:f3:e5:8d:63:1d:e1:f4:30:87:14:78:2b:41:
2d:d1:cf:4b:01:38:61:20:72:ff:67:b8:75:95:21:
c2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:7E:3E:5E:E4:CA:58:06:A1:85:68:39:CD:36:1D:9D:86:71:7E
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c9:fd:d3:4c:c4:f7:d7:48:14:d8:1d:b1:05:29:0b:22:61:
9c:37:51:22:f1:88:d2:90:35:10:94:7c:ea:49:58:04:6c:30:
ee:78:8c:36:74:ec:dc:20:92:5c:d7:88:b1:bd:5b:83:a7:ae:
51:d9:90:76:6e:29:75:ff:31:54:df:f2:23:a1:7b:94:65:1b:
e5:56:5a:b4:09:37:2a:9d:98:d4:11:67:dc:4a:f3:fd:6b:19:
68:e1:18:d4:0d:a0:fd:3f:21:ad:19:55:5a:ac:f4:5c:78:6c:
e1:00:61:f7:ac:84:a9:e5:b8:5d:b3:08:1d:90:c2:02:d9:52:
e5:4d:91:3e:dd:71:9d:8c:69:66:df:31:8e:33:c9:f5:ff:97:
fa:a6:fe:49:a6:0c:46:40:c2:3f:15:77:fc:89:5c:1a:a5:99:
c7:8e:23:a9:db:eb:d4:5e:76:d0:84:aa:56:49:36:79:c6:41:
45:09:7b:97:ee:7c:82:ea:b5:ce:ec:e3:47:4e:16:6a:11:3d:
cd:69:3b:9d:2a:cd:3e:f1:7c:10:ee:d3:ef:37:cf:92:2c:ff:
a6:9b:5a:10:dd:a2:1c:d7:24:9a:04:25:d3:31:a5:b0:97:3b:
38:0c:11:42:f6:e4:97:0d:a0:6a:8e:ca:5b:8c:bf:53:28:64:
d3:ac:69:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n39qARs0S2Y5j466gxJcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MTZlNTNiMzJjYWE3NjE5MDZmMGZjZGVhMjc1YjcyMGUx
NzQyYzgwHhcNMjYwMzI2MDIwMTE0WhcNMjYwMzI3MDIwMTE0WjAzMTEwLwYDVQQD
Eyg2ODhiN2UzZTVlZTRjYTU4MDZhMTg1NjgzOWNkMzYxZDlkODY3MTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CQzqFBhMeqGlBKwdrGjk9gO6LHS
dKwd7zL5iUjY79kho+M+FfMT3/cDF+lqG+imoyiUfqHHDA6EXdk21Lv7nWrC/Jsv
rs6OhH43fnYo3ycBSN11wQGQJysDR1LZEM1JLHR7U3CAy3mqSV+yUfJnhe6OHhL7
7JChCwpPFvUg3gVvwZcO5Ida3TC4m+TWKXwPb5s56CPFM8a/LwYve3l7QKk1L94s
lFpvhJkhxVGfQFQR6KXeKAES0RtZfJFFUefna8TwqUhFkPGfaTupTXempxcaUa2I
fFVD6vbq5PIwg5eDwPPljWMd4fQwhxR4K0Et0c9LAThhIHL/Z7h1lSHCmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiLfj5e5MpYBqGFaDnNNh2dhnF+MB8GA1UdIwQY
MBaAFEUW5TsyyqdhkG8PzeonW3IOF0LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2Yt
YmEwMmM5NjBiOGY0LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2YtYmEwMmM5NjBiOGY0
LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcn900zE
99dIFNgdsQUpCyJhnDdRIvGI0pA1EJR86klYBGww7niMNnTs3CCSXNeIsb1bg6eu
UdmQdm4pdf8xVN/yI6F7lGUb5VZatAk3Kp2Y1BFn3Erz/WsZaOEY1A2g/T8hrRlV
Wqz0XHhs4QBh96yEqeW4XbMIHZDCAtlS5U2RPt1xnYxpZt8xjjPJ9f+X+qb+SaYM
RkDCPxV3/IlcGqWZx44jqdvr1F520ISqVkk2ecZBRQl7l+58guq1zuzjR04WahE9
zWk7nSrNPvF8EO7T7zfPkiz/pptaEN2iHNckmgQl0zGlsJc7OAwRQvbklw2gao7K
W4y/Uyhk06xp8Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:45 2026 by rpki-client