Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: 8UiLKnkm3QP+/tIep0fTnWmmDTpCj914N2LwN2WPXrk=
Subject key identifier: A3:4A:84:DC:51:66:C1:05:1B:E2:EA:8D:C9:E4:E4:D3:16:68:E1:22
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 01A1A8CBA804BD7C84B26936D4B1B8CC2C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: 0260
Signing time: Wed 04 Nov 2026 23:01:21 +0000
Manifest this update: Wed 04 Nov 2026 23:01:21 +0000
Manifest next update: Thu 05 Nov 2026 23:01:21 +0000
Files and hashes: 1: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: NGsmeAi7b0voVPy8Wt/R/StAgD/ScwQL9cET0e0M00M=)
2: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (hash: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:cb:a8:04:bd:7c:84:b2:69:36:d4:b1:b8:cc:2c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Nov 4 23:01:21 2026 GMT
Not After : Nov 5 23:01:21 2026 GMT
Subject: CN=a34a84dc5166c1051be2ea8dc9e4e4d31668e122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:1e:48:2f:c4:ec:38:62:f5:1e:b4:bb:1a:
f3:3e:c3:18:ad:9e:1f:43:8e:a2:ab:3f:a3:55:17:
38:6a:ad:b5:0c:a4:3f:8d:73:d8:56:66:bd:b7:17:
1c:ef:51:a3:6b:2d:af:0c:be:07:77:7f:97:d8:3f:
0d:f1:5b:9d:fc:97:97:38:72:d2:21:2e:93:f5:a2:
2f:cc:11:3e:90:65:28:ae:d3:ee:bb:49:d2:ea:d9:
46:cf:a8:70:a2:2d:9c:cd:34:70:20:e2:a0:b7:a0:
b8:27:e7:33:2c:7a:c1:6b:9f:3d:a7:e0:e2:9c:2f:
68:c5:df:f2:b7:c2:09:99:0b:97:50:04:4d:55:f8:
a5:21:e0:30:c4:4e:84:18:05:b5:b4:74:8b:02:49:
5d:22:14:52:78:d6:57:44:22:d1:5f:2c:83:bc:e9:
cf:ee:7b:44:2a:b2:c9:8c:fa:4a:3a:77:25:33:ad:
ef:25:d3:f1:15:60:45:af:99:df:05:0d:79:1e:4d:
a8:af:96:57:42:98:2f:d1:bb:c9:af:3c:59:96:56:
70:fd:4c:9e:e3:80:78:ab:fe:c6:71:53:c9:4e:9d:
db:7f:b5:13:85:82:50:10:c9:ad:f7:3a:37:40:12:
b6:f6:fa:c9:9a:2f:96:21:fc:4f:1f:27:07:3c:e2:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:84:DC:51:66:C1:05:1B:E2:EA:8D:C9:E4:E4:D3:16:68:E1:22
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cf:fc:80:23:5f:6a:0d:20:2e:2f:1e:54:fa:b4:6e:f0:27:
d1:b7:7c:ff:21:03:ab:35:61:bc:4b:8c:f2:03:f2:80:87:f8:
64:2e:ed:ea:5d:25:a9:ac:55:d4:02:0c:77:cb:0d:2a:c3:1d:
5e:37:ba:d7:de:9e:2a:6c:58:89:63:47:b4:e5:02:a3:77:fa:
f3:08:f9:ea:f7:cb:1e:3b:bd:3b:ac:63:2b:9e:ae:fd:58:d4:
5b:4c:b0:a5:85:bb:cb:21:8d:cc:60:11:4e:98:64:02:da:8b:
db:e2:d1:c3:ae:e7:b7:15:1d:89:d3:1f:30:a0:fc:5d:d2:d6:
7e:17:f6:8b:3b:8b:15:f0:3e:7b:56:0d:b2:d5:34:bb:ec:40:
11:14:e8:19:2e:1f:a3:85:36:7a:66:82:7b:1f:74:a0:bd:7a:
58:0b:89:89:a5:b4:bf:99:ea:fa:8d:d9:4f:d7:fe:8c:fc:c6:
4a:0d:03:bd:15:6c:fb:ac:51:fa:fa:67:b2:d4:3d:06:e6:63:
da:de:49:f1:6f:f2:31:62:e9:9e:26:56:97:e9:e2:9d:36:f7:
30:a5:85:2f:07:89:ab:96:74:0e:c4:9f:5b:4f:ff:ce:29:de:
00:66:ed:ac:37:41:94:a0:00:55:d4:00:0b:91:93:ce:7c:3c:
33:89:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:43:13 2026 by rpki-client