Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: xAuO22oEoAFLNKRUrzPPFl+DIFeO/L4t4wJYDTMklQc=
Subject key identifier: 07:F6:96:96:8D:98:66:20:4F:00:2C:60:16:DB:F4:EE:74:48:C1:61
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019D0AE8273A2EF4783AC70452C0BD668B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 180D
Signing time: Fri 20 Mar 2026 11:01:19 +0000
Manifest this update: Fri 20 Mar 2026 11:01:19 +0000
Manifest next update: Sat 21 Mar 2026 11:01:19 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: 6Hni4vwzomgoH2/Ob1Tx8F7aIUKTAR7V65yhzQZQ1RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:e8:27:3a:2e:f4:78:3a:c7:04:52:c0:bd:66:8b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Mar 20 11:01:19 2026 GMT
Not After : Mar 21 11:01:19 2026 GMT
Subject: CN=07f696968d9866204f002c6016dbf4ee7448c161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:10:23:08:5e:d2:77:aa:91:32:69:b6:83:
59:1f:47:92:86:87:0a:0c:d3:2e:67:eb:d9:59:73:
a6:c8:e8:0e:ee:1c:b0:6f:0c:ae:8e:c1:d0:41:4b:
cd:b9:36:d9:d8:ae:11:4e:b4:71:d2:76:fd:8d:31:
75:d1:2b:19:2f:bf:48:7a:41:37:da:b6:88:7a:b3:
d0:c6:bd:3a:ab:11:65:15:bc:13:8f:74:16:62:12:
13:92:3f:0c:7c:6c:29:81:cd:ef:d1:74:1a:77:65:
94:21:29:2e:35:cf:62:7e:5c:21:16:15:4a:92:79:
fb:55:02:d4:42:e0:48:78:3a:66:b0:6c:72:c9:d0:
41:77:21:37:3a:9b:0e:d3:26:9f:75:29:22:b2:e9:
81:e3:9d:43:12:c5:f8:00:73:1d:e2:2b:6a:3a:8c:
25:4d:9b:47:12:84:c6:67:19:38:17:2c:80:be:98:
e6:18:80:78:0c:5e:9d:c6:61:ac:f0:50:87:39:fe:
3a:06:8c:e3:2d:5f:dd:c0:53:bb:2b:1e:24:2f:ed:
ae:4d:82:9e:36:fb:ef:10:19:a4:f9:f8:6d:bc:cc:
13:df:07:ab:41:fe:31:20:73:c8:f2:fe:2d:48:76:
31:dc:6a:c9:c8:dd:a6:fc:d4:d1:aa:01:30:57:58:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F6:96:96:8D:98:66:20:4F:00:2C:60:16:DB:F4:EE:74:48:C1:61
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:05:4c:c3:ab:ef:d0:95:79:de:08:c6:1a:48:39:f3:8b:d1:
31:7f:7b:49:dd:8e:f2:3d:82:02:ba:f4:e9:e3:20:ba:59:be:
7a:8c:c2:ba:62:59:f9:06:84:c6:6c:5f:32:3a:2b:e0:7b:9c:
16:9e:fa:bb:43:e3:46:30:7f:ee:92:0c:4f:33:bf:91:87:7f:
6e:7b:a1:2d:26:02:e9:a4:02:32:40:02:4b:90:c8:09:b1:fe:
32:91:3f:ee:01:e6:07:a7:1d:60:a6:a4:98:88:17:81:e1:7f:
36:ec:47:aa:29:94:12:3e:1c:a2:4c:f2:ac:00:00:bc:54:cd:
ab:96:ec:a5:35:25:1a:df:1a:6e:34:fc:16:f0:3d:1a:28:94:
49:de:2c:5a:ba:e0:64:32:a3:9d:a6:91:f2:5e:52:ce:c1:39:
ab:53:59:49:89:e3:e9:e4:b4:8e:9b:e6:84:de:6c:32:5d:dc:
03:61:c4:f0:29:51:29:83:8c:89:40:dd:ba:34:41:c3:a7:be:
1c:58:4b:b0:64:ae:dc:22:0a:ae:57:ba:ba:fb:b6:08:dd:d3:
ee:05:f6:a0:56:69:06:bd:22:f7:30:20:9e:02:e4:a8:08:d5:
8d:8e:af:69:db:98:bd:20:89:3f:cf:58:cc:a2:72:1c:63:0b:
ce:ef:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 13:56:17 2026 by rpki-client