Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: 0QNMs9KMqIGr4huU0atSJ5D5dgp/UAgFVNCjokOICCk=
Subject key identifier: AA:6E:A5:9C:92:4F:B3:4D:94:DE:94:20:6A:C2:03:DB:75:6A:53:63
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 019D3AC1D0D48FB7926605FB6174F84EDAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 17C7
Signing time: Sun 29 Mar 2026 18:01:13 +0000
Manifest this update: Sun 29 Mar 2026 18:01:13 +0000
Manifest next update: Mon 30 Mar 2026 18:01:13 +0000
Files and hashes: 1: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: wuD+CQcGPubZr5YVb9zukZ/N94YnTIRoOSHmo1fv5AM=)
2: dfPlqF5Bgqr59PJATwAemysagHg.roa (hash: we4+dkipExQhf3pWjEb2Oj5eVIkZ4cWsxikVfB+DTTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:d0:d4:8f:b7:92:66:05:fb:61:74:f8:4e:da:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Mar 29 18:01:13 2026 GMT
Not After : Mar 30 18:01:13 2026 GMT
Subject: CN=aa6ea59c924fb34d94de94206ac203db756a5363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:a3:a4:87:ec:a2:7b:f5:3f:b3:1e:1f:e6:
56:7e:17:c5:0b:a7:79:cb:55:99:c2:26:45:54:c7:
9d:83:11:a6:6d:8d:7f:c5:b7:44:60:3c:2f:16:ca:
cc:fb:75:3d:32:be:30:34:b9:07:9a:aa:21:78:83:
b9:5f:89:d6:37:21:7a:91:be:39:23:24:c3:cf:c7:
8a:e6:e2:f4:b8:b1:db:48:1b:23:f7:1f:1b:f1:8a:
19:ce:c5:ee:62:b5:2a:3b:41:25:b9:bf:da:34:fb:
bc:eb:fb:8c:a4:a6:df:49:63:1e:0f:3e:af:91:ca:
ca:71:c1:45:92:aa:5e:91:0f:d8:84:49:09:6d:04:
3c:c6:a9:0f:65:e5:d9:95:98:ed:f3:08:d4:07:ce:
97:4c:7d:08:a6:3c:05:0f:86:20:40:80:71:6a:07:
4f:49:6d:6d:f4:e4:bd:66:ef:78:5e:f0:b3:21:f8:
d9:f7:03:4d:c3:2d:70:88:18:e4:20:1b:81:43:a8:
98:c1:0a:10:58:d1:9a:19:b6:c5:f4:14:17:f0:c8:
4a:54:68:d3:00:e7:01:dc:10:77:83:88:5a:4a:d9:
5c:41:fe:c5:ba:4e:68:2b:2d:b6:fc:a3:7a:3f:70:
12:1b:34:fd:db:21:84:53:c3:ff:cc:e9:90:ee:86:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6E:A5:9C:92:4F:B3:4D:94:DE:94:20:6A:C2:03:DB:75:6A:53:63
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:77:cb:cd:95:56:a8:75:47:f6:e3:fc:55:1c:cd:24:fb:3b:
22:b2:24:38:04:82:a5:b4:1d:03:f4:00:54:2e:87:20:3f:45:
95:15:65:c3:91:4c:66:ce:36:02:84:16:92:b3:fa:02:0b:f9:
03:c7:83:29:59:f1:e1:d5:09:ed:48:6f:ba:de:ae:aa:f0:90:
c5:f4:ba:71:c4:b9:b4:d2:a6:20:90:f4:f8:4e:d4:23:11:ab:
c2:3d:9c:0e:9c:d7:13:1d:05:09:b7:e4:79:46:0c:c4:a0:68:
7e:da:46:d5:72:98:8a:e6:16:e8:5c:22:27:25:c8:3c:4c:b8:
17:52:ac:73:85:75:87:38:96:5f:60:a3:3d:50:8f:dd:ff:70:
bb:34:fc:9b:bb:c3:1a:cc:e0:f1:f7:6c:7d:1a:19:ae:21:a7:
14:4d:10:f5:42:35:46:b9:20:5d:b2:1d:95:75:fa:93:1c:92:
d2:cc:d1:07:ba:4a:b9:34:da:88:65:2f:d5:76:67:02:89:de:
a0:b7:4b:c4:c5:a1:44:5b:83:11:9a:f0:2f:29:ba:c1:c9:25:
da:f7:ea:7b:a4:f0:43:8b:fc:13:0a:34:ee:1c:8a:6d:a5:c2:
9d:38:98:dd:5c:23:dc:94:a0:60:29:a4:55:30:f0:94:60:e2:
30:2b:f1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:17:05 2026 by rpki-client