Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: 5Kt+00Z+sD2I1LbzPz42+fQSXFrhck9WaFH9qj98mD4=
Subject key identifier: 2D:1D:39:A9:0F:5B:5B:CD:88:C5:5D:21:B8:97:67:0B:E5:92:EE:4F
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 01A06E032D8E1DF2B4343A0228903F0AAE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: 01BD
Signing time: Fri 04 Sep 2026 20:01:36 +0000
Manifest this update: Fri 04 Sep 2026 20:01:36 +0000
Manifest next update: Sat 05 Sep 2026 20:01:36 +0000
Files and hashes: 1: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: z9qfuoYkHQaGSoWf75ff5/vp2HcPADLBRJVG+UXQL5c=)
2: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (hash: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:2d:8e:1d:f2:b4:34:3a:02:28:90:3f:0a:ae:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Sep 4 20:01:36 2026 GMT
Not After : Sep 5 20:01:36 2026 GMT
Subject: CN=2d1d39a90f5b5bcd88c55d21b897670be592ee4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:a0:a5:b8:dc:a5:96:52:0f:87:97:f1:0b:
2b:23:0b:2b:23:de:4a:b4:35:c8:f8:85:9e:19:b8:
7c:d5:e9:8b:d4:e1:fa:b8:41:c1:15:17:b9:77:c1:
bd:0a:b4:1f:de:ae:9b:a1:1e:da:75:79:2b:0d:d4:
d9:b2:e0:17:bc:00:db:59:4d:ec:e1:c1:35:ff:1e:
ea:30:13:40:a5:4d:32:5d:14:a7:b9:ea:d8:bd:b0:
c4:9c:e0:ff:58:67:bf:30:93:bd:1e:92:94:83:9e:
90:82:ff:e4:c6:02:30:40:14:49:b9:90:bb:f6:d1:
9a:4c:b8:be:d0:6c:88:cc:cb:b9:74:04:39:cb:ad:
f9:4d:03:b8:e1:c4:67:c7:b4:c0:d5:07:f8:94:5a:
e1:99:88:06:e3:0e:74:b3:a9:dd:4a:01:83:56:77:
a5:62:5e:65:92:8f:1f:e6:e4:ce:1b:69:14:5e:68:
83:20:4a:5a:a9:f9:0e:24:b6:65:49:3a:19:24:1c:
0f:f8:94:22:6e:d3:e6:20:a9:1f:ed:2f:82:3e:7f:
70:ca:c0:2b:db:7c:3e:91:ac:75:23:8b:69:0d:b6:
8c:43:22:b4:f1:7a:7e:75:6b:e0:5e:68:40:39:46:
37:7b:ec:76:38:17:37:ee:56:20:cd:0a:c0:b7:93:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1D:39:A9:0F:5B:5B:CD:88:C5:5D:21:B8:97:67:0B:E5:92:EE:4F
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:28:50:18:32:1e:85:60:e5:4e:7d:0f:9c:8e:1a:d0:0e:39:
83:a9:9d:62:0c:2c:70:f1:05:b3:b1:e6:90:9c:d6:8b:67:7c:
47:66:fe:7c:51:a2:23:00:83:6f:5e:17:62:b2:aa:79:fa:84:
70:50:2a:d9:6d:0d:10:87:6f:6b:5b:3f:fc:14:5c:28:bc:c9:
4a:fe:70:af:06:ed:6d:1f:70:80:29:60:61:f8:47:da:5c:ba:
0f:05:22:fb:8b:6e:a2:45:61:b8:b0:46:ec:6d:3e:02:92:b7:
2c:4f:8b:67:17:72:18:6d:9d:92:05:93:1d:12:1b:3f:55:09:
90:00:01:e9:cf:60:89:a1:86:91:76:19:cd:0c:00:6a:ad:3a:
a2:8d:f3:7b:d3:ed:91:33:da:2a:1a:ee:a9:b6:78:85:bc:f9:
3c:c8:66:06:23:a1:86:4c:fe:68:7f:f9:28:39:9e:1e:83:00:
d0:07:e4:ba:19:a2:62:49:a2:1e:72:70:bb:f9:64:47:61:31:
cf:86:f5:dc:db:b6:49:5c:a4:16:90:86:07:5a:1e:d1:4e:25:
b8:a0:e7:aa:51:ea:fb:11:6e:67:5f:f2:cb:a6:e7:ab:ef:0b:
c9:d1:39:70:9e:c0:05:df:74:a4:1c:c5:09:12:a0:0d:c8:8f:
09:55:d6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:42:01 2026 by rpki-client