Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier: 5kM0eo1f22LNt5BxbmGqnRS6A2Q1tkWoowh5ZHMfdqE=
Subject key identifier: 1D:F3:90:38:12:46:A6:F8:B7:B1:E5:E4:99:CB:4F:C4:24:CD:3F:53
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 019D38665FB0A5CE3176ABCA09BBFD6122D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: zb0dyg6S2H4a5qKxUgBzU6SdEV3yYgNTX6WW3H/lzXI=)
2: yko62gQUpDznk6pbTXdM7BFWgrg.roa (hash: 4X0+42FTN6ZFQiCpU0LUUz9jtfGgyphhCU+pgUNgAQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5f:b0:a5:ce:31:76:ab:ca:09:bb:fd:61:22:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=1df390381246a6f8b7b1e5e499cb4fc424cd3f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:5b:02:36:c8:37:00:fa:f2:7c:55:e0:1e:
cd:85:67:4b:ab:a9:97:ba:09:38:c2:e3:19:9a:6b:
bc:20:10:2d:b4:d1:4d:42:07:40:66:b8:17:e5:d9:
93:23:13:ec:4d:7e:76:1a:df:a0:dd:d3:80:47:e8:
5b:38:31:18:ee:f1:d8:67:30:c8:35:86:09:c8:e4:
62:d1:20:9e:19:23:77:51:af:25:47:70:5a:61:7b:
68:8a:7c:74:6c:e0:80:cd:7e:01:42:af:0c:f4:5b:
84:97:65:13:2a:01:a7:6f:87:ad:25:de:cf:ca:f0:
4e:d9:47:a4:3e:80:c2:0e:6d:7b:94:77:f9:51:0f:
51:6b:a9:9b:49:e8:60:a5:a2:81:cf:1f:e1:2d:dc:
b5:32:5c:d3:27:c8:0e:fa:81:7f:df:a1:4a:bb:a5:
b3:03:dd:f3:22:db:3e:a8:d6:77:46:39:19:2f:6e:
fc:fa:13:05:9b:e1:0d:79:5f:e7:a4:78:40:c4:81:
ea:d6:b8:f0:f2:83:ff:bd:df:c8:f0:fc:68:0c:39:
6a:13:90:0c:90:82:47:75:82:f2:7c:6b:05:14:89:
61:95:30:f4:1f:1a:0d:4a:48:8d:7f:8a:35:ea:1b:
ad:15:09:25:1b:5c:6d:5c:bb:40:b5:43:37:b6:20:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F3:90:38:12:46:A6:F8:B7:B1:E5:E4:99:CB:4F:C4:24:CD:3F:53
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:69:f0:b9:64:1e:45:35:c0:30:df:29:7d:b5:ad:2c:b2:49:
c1:28:94:3b:c3:58:03:55:da:7e:07:b2:2b:fb:df:46:77:ce:
7a:ad:10:b8:53:2b:13:16:59:f4:37:47:65:16:01:8a:fe:b0:
f8:de:08:2c:49:46:9d:cd:b8:1b:ca:54:5c:22:a5:f9:12:6d:
f6:8a:0d:a2:96:8e:2f:c1:33:ce:4a:04:c5:ab:27:be:cb:16:
54:4b:99:4e:66:3a:ba:61:15:0a:ca:40:c4:34:43:43:11:2f:
8a:5d:16:f7:3e:10:98:fa:26:fd:e3:02:66:35:e2:93:0f:d1:
26:62:15:22:19:bd:d9:50:cd:59:ba:7b:36:f9:d7:9f:54:ac:
89:a9:a9:60:16:f1:b1:14:72:c4:71:15:b6:06:26:d3:5e:85:
e0:4f:b3:a0:4c:a6:31:c4:ef:51:cf:93:94:43:6e:28:75:dc:
6d:19:85:6c:5a:6d:07:9d:f8:84:f7:2d:ee:2f:ad:79:ee:73:
2b:54:40:7e:67:ec:2f:b3:64:af:99:19:39:ad:07:2d:a6:08:
91:12:2e:01:fe:7e:47:32:9d:ca:20:98:89:d8:9a:6b:96:57:
37:69:7a:d0:81:23:c7:db:76:ea:f0:9e:b2:3d:68:c1:3f:e2:
40:02:18:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:09 2026 by rpki-client