Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: FbIXhPiukzTkPvf10yMhDhUUEhQfzbpGZChqVKnHMDU=
Subject key identifier: 63:ED:96:83:7D:A3:C2:3B:69:37:B9:2B:32:FE:ED:20:0E:FC:E8:C2
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 019F8644EA6D4C5AEF38E8AE6EEA7F956217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: 0145
Signing time: Tue 21 Jul 2026 20:01:31 +0000
Manifest this update: Tue 21 Jul 2026 20:01:31 +0000
Manifest next update: Wed 22 Jul 2026 20:01:31 +0000
Files and hashes: 1: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: nJ51OTdUCsuCC5Gp9rrJ/8DmU0zsWgkN6u7HXB0BDCc=)
2: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (hash: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:ea:6d:4c:5a:ef:38:e8:ae:6e:ea:7f:95:62:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Jul 21 20:01:31 2026 GMT
Not After : Jul 22 20:01:31 2026 GMT
Subject: CN=63ed96837da3c23b6937b92b32feed200efce8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:f0:bc:88:34:5d:b8:88:30:90:ce:e0:a7:
88:93:f6:5e:8e:68:b2:f2:3e:a6:a8:bf:c0:29:ce:
4d:7d:cf:34:1f:b2:c5:b7:d7:50:ec:04:92:f9:f5:
5a:30:d2:e3:e8:e4:3a:2a:80:5f:7d:e2:1a:1f:6c:
c5:1f:89:97:b7:e1:68:11:2d:d3:32:ce:80:f7:26:
0d:0d:87:1c:d8:d1:46:ee:bf:7c:76:dc:e1:97:cc:
64:0d:cf:79:91:4e:d2:5a:b9:e3:63:15:4d:ef:38:
8b:6f:53:ee:c9:85:24:36:be:7e:8f:3d:e9:fb:c4:
ab:c4:e9:ce:2f:e3:b6:5e:2f:f3:ae:56:2d:ab:ce:
61:0e:b8:e5:4e:37:d6:0a:7b:f2:62:60:23:d0:51:
97:f9:ef:db:e8:49:5c:86:ca:2c:c4:59:02:7e:e5:
c2:66:94:e6:50:38:4a:9d:ae:e1:c1:52:75:2b:13:
bd:f0:50:2f:96:14:55:5b:53:83:1e:a4:24:0f:f2:
e2:41:f7:eb:7c:b7:2f:be:f1:85:7a:de:b8:1d:45:
e6:23:df:9f:7c:b0:42:2f:bf:0d:08:38:ca:42:ad:
d9:5c:4b:e5:dd:f9:48:70:25:c5:6e:bf:2e:55:61:
37:2d:43:ae:85:aa:18:18:6e:01:68:c7:57:8c:81:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:ED:96:83:7D:A3:C2:3B:69:37:B9:2B:32:FE:ED:20:0E:FC:E8:C2
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2f:38:fe:dd:74:09:d0:ae:13:c2:6b:10:46:0f:9a:45:df:
46:fe:d8:33:ed:63:64:e4:19:f6:c5:04:63:b4:5f:8c:5f:04:
f6:e7:eb:85:34:f4:a3:1d:c6:32:9d:09:81:9a:b2:23:4b:87:
2f:fe:6e:59:f5:9c:88:30:40:4c:3d:f8:b2:c7:68:e4:9c:d6:
e9:65:23:86:bd:21:80:0e:60:b6:9c:24:34:06:bf:f6:9d:60:
6c:3f:00:99:0e:0d:e5:4b:65:e6:a3:9c:3d:56:08:b7:2e:9b:
64:27:0f:2e:72:84:63:ec:4b:ef:16:9e:21:43:8f:f6:70:f9:
02:c2:3d:04:49:5e:d4:c4:ad:7f:3d:4b:c6:ea:17:ea:db:0a:
53:92:cc:a4:27:aa:ac:d4:b5:c9:7c:91:96:6e:cb:fe:a1:6c:
b3:fc:d2:81:57:c1:ba:33:41:c5:9d:29:b1:72:28:ce:31:e7:
ae:37:53:9b:e0:23:ab:7e:6a:7c:ec:17:b9:5d:3b:57:90:2c:
28:77:9a:96:9d:9c:7e:e2:bb:f1:da:04:4c:e3:8d:a2:8b:a3:
9e:42:da:cf:27:c9:a6:76:ec:3a:37:ef:96:37:b7:5e:96:78:
74:e7:e6:eb:ae:aa:0e:c3:c8:a8:de:72:b2:3b:a4:30:93:3e:
0f:f6:5b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:35:57 2026 by rpki-client