Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: iSHmDNE0Mcp94xQu0NOOEvG36AeDODTq0txUVuxHs5U=
Subject key identifier: 0C:A5:EE:10:83:65:FF:AD:29:1D:6E:FE:2B:6D:1C:E4:17:A9:F2:0E
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 019D390A4744E413E8B03E45D588998ADAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: 13
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: 6ePeykhqaQhVL-QnCvoOTxD9Ros.asa (hash: GVmazDbc6zY4gYDN2IdTWE16Nznjm0Wh9YlHlJskz1o=)
2: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: eTpaQI8zWOLGXtxuds3Jk7MWDxKwX1s0PR0WJlgO+E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:47:44:e4:13:e8:b0:3e:45:d5:88:99:8a:da:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=0ca5ee108365ffad291d6efe2b6d1ce417a9f20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:eb:b3:72:bf:8a:39:ef:fa:03:c0:e2:9b:
0a:10:46:7b:b6:38:59:46:92:da:ec:0e:ce:00:6a:
a1:f6:9b:0c:41:e5:9b:66:3c:87:b0:fb:e1:fc:76:
ca:96:76:4a:ce:c3:2d:95:1f:8f:e1:c5:e1:d2:6a:
e9:0d:d7:2b:59:ef:0d:06:6d:f8:34:e2:a5:7a:ce:
d1:b4:07:26:b0:b8:f7:d3:5e:8d:24:6e:de:3b:f3:
3b:14:83:81:23:56:ca:de:8c:5b:d2:72:37:fc:57:
0c:ce:89:cd:b4:3b:c5:3d:d4:9f:f6:1e:5b:d0:f3:
c1:9d:4d:04:a0:cc:9c:48:e4:f9:10:43:44:2a:ed:
00:55:89:61:f7:97:05:eb:f1:52:85:2d:37:54:85:
94:7f:d5:c8:b4:5f:e9:4e:02:a9:b9:07:00:b8:ae:
6c:80:e4:08:88:9b:8e:3e:89:81:e3:04:57:9c:f8:
fd:c8:ce:71:1e:7a:02:1e:ba:33:58:3a:69:65:76:
b6:9b:4f:5f:39:cd:d4:ab:d8:00:03:35:86:63:e8:
28:82:ae:0a:05:9a:9d:a0:e1:c0:48:3a:9a:ed:ff:
20:ac:df:aa:51:7e:a1:d6:fb:c6:a2:4d:0a:17:75:
0c:c4:97:d0:46:41:59:c3:d6:80:de:aa:fc:05:d7:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A5:EE:10:83:65:FF:AD:29:1D:6E:FE:2B:6D:1C:E4:17:A9:F2:0E
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:a0:5d:24:60:95:21:e8:b8:bc:e7:a1:db:b8:77:d0:86:
c4:5d:0d:b4:62:20:3b:46:49:e3:cc:71:70:d5:03:bb:c8:5e:
ad:9c:79:5a:45:c9:42:67:34:5d:c0:b0:93:dc:81:31:03:3f:
c6:19:06:61:87:3b:ae:23:65:77:52:6c:dd:4d:d4:8e:41:2a:
1a:18:41:db:20:65:de:fe:17:c8:30:da:b0:53:c3:e0:69:7b:
75:6c:f2:bd:89:8f:e3:8d:e1:1e:f3:e9:0a:52:7e:6c:98:34:
cd:21:e3:1a:e8:75:95:c3:21:9a:1d:1e:0e:62:ff:d6:0d:98:
52:7d:04:3b:bd:e3:85:87:a6:5a:2f:2f:46:bb:c8:cb:79:22:
7d:f2:8b:59:36:66:07:48:19:b6:df:cc:e2:72:e9:09:3d:53:
22:58:84:43:70:b6:f4:42:7e:87:44:72:d9:8a:6c:31:1d:ce:
9f:5c:82:23:27:ef:46:d1:4e:0a:ab:54:8a:8e:e0:8b:a7:bf:
8a:ce:84:bd:e0:d7:96:d1:30:ab:04:d3:5b:dd:07:96:2a:cf:
b8:cc:c3:81:57:03:c1:f2:1a:a0:a2:9f:d6:89:5a:ea:2c:2a:
46:60:54:3b:ca:41:91:49:5c:e4:08:26:85:b4:27:99:68:55:
62:56:75:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:12 2026 by rpki-client