Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier: GIE+CTJHLIKnY584lXvTKTAGMBjVhFlW7m3wQx+H4WY=
Subject key identifier: 9B:30:46:E2:9C:D5:38:60:87:D6:D2:4C:22:03:B3:83:6B:23:03:3F
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 01A0F6E9297FC9CB14951A8441CE8BBF36FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number: 1A5F
Signing time: Thu 01 Oct 2026 10:01:10 +0000
Manifest this update: Thu 01 Oct 2026 10:01:10 +0000
Manifest next update: Fri 02 Oct 2026 10:01:10 +0000
Files and hashes: 1: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (hash: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A=)
2: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: 5iQc8Os+vKoJhnRrv4oRWG+Bbz2YX/YykN4ArgIzWZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:29:7f:c9:cb:14:95:1a:84:41:ce:8b:bf:36:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Oct 1 10:01:10 2026 GMT
Not After : Oct 2 10:01:10 2026 GMT
Subject: CN=9b3046e29cd5386087d6d24c2203b3836b23033f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:6a:37:2a:e5:61:b9:34:e9:33:0e:73:d8:
f8:1c:3a:3f:05:b0:ce:02:d3:f9:ac:f7:80:54:8d:
d1:4a:92:09:5f:12:26:1b:0d:60:ef:7d:4e:c8:95:
b0:1f:04:21:e5:3d:ea:c9:0a:a1:47:ba:b7:72:7a:
75:0d:02:3f:d1:b0:b7:17:bc:9f:b1:74:90:e5:d1:
80:20:05:f8:db:07:88:6c:a4:0e:b9:17:27:ec:03:
e3:41:cd:65:cd:7b:0a:83:de:06:13:7b:4e:c4:5d:
a1:19:45:7f:0a:12:3b:a8:41:e4:52:6a:7f:21:43:
59:96:93:b3:5c:1b:80:cd:f7:4c:96:52:7d:43:ff:
75:47:50:b1:eb:d2:ab:6e:e5:27:02:db:9f:fd:53:
d2:43:9d:c0:1e:9c:92:f9:b7:b5:74:a4:56:53:fa:
7c:82:44:0c:39:07:b3:69:75:01:b3:46:46:c6:be:
5d:77:00:d7:b0:23:08:62:2f:7d:83:d6:5c:44:a2:
83:c6:24:ef:b8:56:2a:d1:1a:86:42:49:6c:b4:e1:
04:5f:5f:f5:ef:8a:2b:8c:3d:0f:fe:1a:41:6a:ce:
d8:c9:be:86:6f:ed:b0:be:f4:9e:32:1d:ff:2b:ed:
a7:de:ad:82:58:31:60:9f:25:0a:51:d7:98:4f:c8:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:30:46:E2:9C:D5:38:60:87:D6:D2:4C:22:03:B3:83:6B:23:03:3F
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f9:0c:0a:c3:1e:93:77:fd:23:47:07:30:04:9c:9a:86:6d:
83:5c:90:3a:55:02:25:9d:a5:54:70:ac:60:85:d6:ed:f2:f7:
1c:dc:97:d6:1a:65:4d:0b:10:53:79:fa:d6:0f:3e:d3:a3:1f:
e7:de:8d:22:08:ad:34:a6:d4:f8:d0:13:f5:68:60:f9:a4:8d:
02:77:ff:06:6b:f0:3a:15:02:06:d6:a6:8f:5a:49:aa:45:db:
71:47:5e:1f:e4:f6:5c:a4:f4:50:c2:93:43:ac:ac:53:64:10:
79:62:1f:b8:4e:1e:1a:f1:1d:47:18:e6:e2:ad:50:c4:a8:5d:
c1:37:09:38:ef:6a:67:0c:14:ef:c7:4f:2b:bf:6a:89:c4:4e:
24:0a:95:b0:23:ed:29:c3:62:de:14:70:7d:0b:ab:81:ce:48:
4c:78:c8:c8:42:e4:6a:5b:ee:a5:b1:0e:4a:e3:e5:46:08:e0:
1f:f5:3c:eb:bb:9b:16:27:34:3d:c2:86:e3:4d:f2:28:06:e9:
ab:d9:1c:30:34:01:24:5f:59:89:97:94:8b:94:d5:a0:11:75:
7f:b3:f5:d7:c2:c6:33:e4:7a:3e:6c:9e:10:98:01:de:61:0b:
2f:9d:25:c7:08:a6:79:34:15:3e:ba:d7:f4:2d:3c:cf:bf:43:
da:32:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 22:30:57 2026 by rpki-client