Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
File: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft (raw, json)
Hash identifier: vVdqXPpzM0HD9UyJb+6/6jqW0A6GBOT47lGhGFqzs7w=
Subject key identifier: BD:B4:1F:DB:54:99:B6:3A:B8:F0:33:DE:43:7D:3F:DD:94:15:A3:1C
Authority key identifier: 6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
Certificate issuer: /CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Certificate serial: 01A06F1608F21B908EB75DE7DDA80EA92107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
Manifest number: 07C6
Signing time: Sat 05 Sep 2026 01:01:49 +0000
Manifest this update: Sat 05 Sep 2026 01:01:49 +0000
Manifest next update: Sun 06 Sep 2026 01:01:49 +0000
Files and hashes: 1: Je_y8wxQvqCgs-B_X_JDDy6e4N4.roa (hash: EsZORo0khgTEum2xHY+MdLQ0jyUTYVdE3AQ38NpK21M=)
2: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl (hash: UiyBGLB4g5n4XgLeg79Mlg3AqnLJT2WvwUHjIDPscC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:16:08:f2:1b:90:8e:b7:5d:e7:dd:a8:0e:a9:21:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Validity
Not Before: Sep 5 01:01:49 2026 GMT
Not After : Sep 6 01:01:49 2026 GMT
Subject: CN=bdb41fdb5499b63ab8f033de437d3fdd9415a31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:80:31:e8:c9:78:85:17:e8:df:13:ee:fa:
ca:1a:62:66:0d:5f:ae:75:90:a3:75:75:e5:35:1f:
f1:7e:e5:f1:c8:9c:60:6c:df:b9:0b:db:bf:2e:47:
a3:c4:5a:5f:27:88:94:e7:f9:09:6d:87:58:67:2c:
a1:6e:33:b9:6f:d4:fc:b9:a5:d0:22:8d:1f:4c:b1:
f8:17:f7:93:a2:cc:d3:74:8e:9b:6e:17:2f:2b:5f:
a0:7d:1d:32:06:10:1e:63:32:e5:f9:44:c3:33:79:
aa:1e:b9:b8:08:f3:19:f3:ab:a1:39:57:c0:25:00:
23:59:3a:7e:6e:dd:70:67:c2:94:37:d7:26:92:41:
1b:c2:24:ce:9b:0b:52:a1:6c:5a:45:a0:d8:0c:69:
14:a1:a1:fe:80:ea:97:61:f8:c7:5b:25:e3:3b:3c:
3f:ab:c8:a5:aa:e1:b5:b2:92:2f:7e:24:41:0b:2b:
7d:ca:18:ce:2e:be:ad:5a:20:8e:db:4f:a3:43:1f:
f1:d1:c8:73:8b:a4:2b:96:30:c2:db:e7:53:8e:aa:
d6:e8:c1:99:e8:3c:37:eb:09:e4:d4:7c:f8:bc:06:
21:72:2d:ee:4c:d1:70:95:84:8b:87:3b:f8:b5:e2:
2b:10:c1:bd:d2:f7:69:b8:77:5d:fd:29:c3:4e:48:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:1F:DB:54:99:B6:3A:B8:F0:33:DE:43:7D:3F:DD:94:15:A3:1C
X509v3 Authority Key Identifier:
keyid:6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9b:9f:42:a6:d7:fb:58:4c:db:b8:7a:6d:22:06:9e:d3:28:
2b:97:c5:c2:b9:ab:32:fd:84:d1:b9:52:5d:b4:1a:83:88:93:
02:66:71:75:d8:e4:7f:1d:1c:fa:3d:b1:c0:39:8b:17:f2:29:
ca:03:89:23:2f:65:2c:9b:80:dc:37:a8:d9:5d:42:31:c0:ce:
80:6a:16:40:d2:c6:56:55:2e:28:95:f7:22:c7:24:7e:10:22:
9d:e7:29:69:f1:24:17:78:6b:1b:d0:c5:fa:21:c2:ac:f0:b2:
0d:18:45:37:ad:8f:89:a9:49:e4:1e:2b:b3:ae:77:2b:4c:23:
4f:6c:c5:4c:f3:d4:78:a6:96:22:33:70:46:d8:1e:78:d6:70:
cc:ae:a2:7b:13:a6:0e:4f:5b:c8:0a:c8:17:c5:14:63:e9:80:
ae:12:e1:97:f2:3c:1c:0e:bf:06:65:fe:17:6e:f4:28:e6:38:
15:08:8d:eb:d1:fc:07:b4:a8:54:c9:c0:1c:6e:db:41:75:a9:
1a:e4:d4:58:2d:b6:ba:65:32:b7:52:4b:78:0a:df:38:fc:2d:
76:78:a1:47:21:9a:05:0f:3b:03:34:e4:fe:5e:af:2a:6d:ed:
b3:a8:6c:21:7e:f6:42:db:92:79:fc:d7:71:85:bc:51:88:39:
77:14:b4:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvFgjyG5COt13n3agOqSEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjg1MGRlYjI4YmRiMmY2NTVlMmYxYjAyZDM3YzEzYzZk
NDM0NTIwHhcNMjYwOTA1MDEwMTQ5WhcNMjYwOTA2MDEwMTQ5WjAzMTEwLwYDVQQD
EyhiZGI0MWZkYjU0OTliNjNhYjhmMDMzZGU0MzdkM2ZkZDk0MTVhMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK2AMejJeIUX6N8T7vrKGmJmDV+u
dZCjdXXlNR/xfuXxyJxgbN+5C9u/LkejxFpfJ4iU5/kJbYdYZyyhbjO5b9T8uaXQ
Io0fTLH4F/eToszTdI6bbhcvK1+gfR0yBhAeYzLl+UTDM3mqHrm4CPMZ86uhOVfA
JQAjWTp+bt1wZ8KUN9cmkkEbwiTOmwtSoWxaRaDYDGkUoaH+gOqXYfjHWyXjOzw/
q8ilquG1spIvfiRBCyt9yhjOLr6tWiCO20+jQx/x0chzi6QrljDC2+dTjqrW6MGZ
6Dw36wnk1Hz4vAYhci3uTNFwlYSLhzv4teIrEMG90vdpuHdd/SnDTkhaEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL20H9tUmbY6uPAz3kN9P92UFaMcMB8GA1UdIwQY
MBaAFGy4UN6yi9svZV4vGwLTfBPG1DRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxoUTNyS0wyeTlsWGk4YkF0TjhFOGJVTkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iMmQ3MGQtNDk1My00ZDYxLWI4Yzkt
ODhiMmQyY2Y3YzMxLzEvYkxoUTNyS0wyeTlsWGk4YkF0TjhFOGJVTkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9iMmQ3MGQtNDk1My00ZDYxLWI4YzktODhiMmQyY2Y3YzMx
LzEvYkxoUTNyS0wyeTlsWGk4YkF0TjhFOGJVTkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpufQqbX
+1hM27h6bSIGntMoK5fFwrmrMv2E0blSXbQag4iTAmZxddjkfx0c+j2xwDmLF/Ip
ygOJIy9lLJuA3Deo2V1CMcDOgGoWQNLGVlUuKJX3IsckfhAinecpafEkF3hrG9DF
+iHCrPCyDRhFN62PialJ5B4rs653K0wjT2zFTPPUeKaWIjNwRtgeeNZwzK6iexOm
Dk9byArIF8UUY+mArhLhl/I8HA6/BmX+F270KOY4FQiN69H8B7SoVMnAHG7bQXWp
GuTUWC22umUyt1JLeArfOPwtdnihRyGaBQ87AzTk/l6vKm3ts6hsIX72QtuSefzX
cYW8UYg5dxS0VA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:00:40 2026 by rpki-client