Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: ouPrsQCDCL2SBu5Aib5J39/qNgaZFAQuWNzfQSR9VI8=
Subject key identifier: D0:6C:49:0E:1D:F0:56:AA:CE:86:7D:4B:7C:92:34:A6:E7:82:43:64
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 019E9AA91A6BAEC522D00531E5C2DFA6045F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: CB
Signing time: Sat 06 Jun 2026 02:00:33 +0000
Manifest this update: Sat 06 Jun 2026 02:00:33 +0000
Manifest next update: Sun 07 Jun 2026 02:00:33 +0000
Files and hashes: 1: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: 48NbU4MLrwFCATMHUK7jKosVQoQTQ7KzImDmikwc3/E=)
2: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (hash: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:a9:1a:6b:ae:c5:22:d0:05:31:e5:c2:df:a6:04:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Jun 6 02:00:33 2026 GMT
Not After : Jun 7 02:00:33 2026 GMT
Subject: CN=d06c490e1df056aace867d4b7c9234a6e7824364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:cf:d5:d3:bd:2d:ae:93:0d:64:fa:d4:c7:
81:ad:0d:0b:d4:33:cb:10:e3:a9:b9:e7:4e:22:bd:
ae:98:cd:37:5d:ec:c3:a3:dd:e1:0e:57:8f:2a:ed:
fd:f4:f2:f1:c3:b5:12:70:86:1b:48:02:ec:ac:ff:
d2:77:01:8d:60:a3:9a:d5:c6:03:e4:d2:c6:1a:58:
63:ba:fc:95:98:80:69:64:e5:dc:aa:24:29:a1:7c:
37:36:9b:13:9f:1f:7c:3e:9d:c8:d3:d7:f5:5f:65:
11:62:0c:19:2e:18:94:3f:19:7d:ff:6f:dc:86:bd:
26:c9:f9:17:e3:89:92:f2:99:2a:aa:c1:45:e7:9d:
bf:0e:b9:25:8c:6e:cf:35:4b:e1:e4:18:3d:d2:b1:
c2:93:57:02:c8:d9:5e:c1:63:47:9d:d9:ef:1d:11:
47:cf:62:32:5b:d8:1e:4f:fc:d5:61:d9:c9:ff:bd:
cc:3c:aa:5d:53:ce:c0:bd:97:1c:60:44:59:9e:14:
11:31:69:3f:41:f6:13:02:d5:50:c6:cd:56:a9:34:
08:e1:59:23:a6:2c:00:73:e3:5b:71:54:57:84:07:
37:0c:2f:41:6f:f2:04:f5:51:27:b3:7c:0f:fd:54:
10:b8:4e:24:97:cf:93:c6:c6:67:34:07:9c:79:ef:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:49:0E:1D:F0:56:AA:CE:86:7D:4B:7C:92:34:A6:E7:82:43:64
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:be:79:07:fa:55:83:29:95:13:15:77:c2:3a:3e:34:5f:16:
7c:c7:55:fd:ff:b3:20:62:79:41:40:43:8c:61:22:5f:fb:f4:
a3:56:90:f5:1f:1b:8f:05:23:1b:5c:b3:27:fd:56:4b:c4:95:
ea:e1:38:49:01:46:d2:61:9d:07:12:31:38:c0:1b:fd:00:bc:
01:99:e9:15:9e:ad:a2:97:f4:50:44:97:33:be:4f:83:87:6e:
8a:37:2f:b5:9d:03:42:6e:22:c5:ac:07:df:5d:bd:70:ae:68:
a4:23:90:d8:a0:25:0b:9b:df:4f:8c:43:8c:eb:b4:1b:f0:6b:
ba:00:37:e6:67:f1:74:96:b4:a7:35:ef:0e:46:6e:67:45:4b:
a0:81:f0:23:89:49:67:6f:17:59:61:5d:99:63:a1:d5:dd:34:
a1:40:85:50:4f:c7:06:1b:c0:39:44:d8:6c:ee:9a:f5:35:ad:
ff:74:2b:52:f6:8a:73:8a:ff:7c:89:54:9d:2d:14:6b:41:e9:
c4:19:43:b8:c6:ff:a9:a4:41:97:5c:45:72:2a:e3:d6:27:d9:
41:67:52:9f:5f:56:2f:92:bb:a8:e4:75:1d:99:ad:4c:d2:2e:
1a:94:a8:1a:87:69:ba:93:23:2e:61:02:90:ec:0b:7b:ff:f0:
ad:c1:33:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:20:39 2026 by rpki-client