Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
File: x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json)
Hash identifier: 0h/vtP1jTWI/fVWZtSdZN2mmMIS+y25RVzMr/zd3akE=
Subject key identifier: 08:2F:97:EF:2F:88:A1:EF:17:BE:58:C8:AB:26:A6:F5:FD:5B:2E:82
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 019DB246938CCA9EACE895B9429B99441FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
Manifest number: 1170
Signing time: Tue 21 Apr 2026 23:01:02 +0000
Manifest this update: Tue 21 Apr 2026 23:01:02 +0000
Manifest next update: Wed 22 Apr 2026 23:01:02 +0000
Files and hashes: 1: Qt6UBSy6AyGq63QOVL4RXffcTic.roa (hash: DrxVhbMxa0VyjrLuDeUMjs53zIXiEcOYuKYWoHkcfHw=)
2: ap-XVBzw4zZPatC0RYn5qlV_mrQ.roa (hash: +C964lY3jvSC9YXuZCdEHQIGMY6YBYM0/bQTHHxKS1E=)
3: lJDrnLvMDgHk_fzThFsf8Cm6mX0.roa (hash: w3x9Am6AgVtB0uwWUskomuBF/D7slx352RaRjUM5kz4=)
4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: btzWlUEmwYDk2MG5EexE8B3GCgcGn7bNz6Y+aWVvyqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:93:8c:ca:9e:ac:e8:95:b9:42:9b:99:44:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Apr 21 23:01:02 2026 GMT
Not After : Apr 22 23:01:02 2026 GMT
Subject: CN=082f97ef2f88a1ef17be58c8ab26a6f5fd5b2e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:14:32:bf:e2:6c:3b:cc:7d:57:ae:24:e7:
1a:cc:ab:8d:56:32:b1:ec:f1:c2:f1:d5:ac:e8:f2:
28:be:6c:dd:1a:11:6b:51:11:2c:7c:73:50:2b:1a:
09:6f:c2:08:28:56:5a:bf:68:2c:96:20:04:c1:42:
a3:82:5c:d5:3f:85:a0:08:c6:ee:17:85:d2:c4:01:
81:93:aa:b3:84:4b:e3:0e:b0:63:bb:ef:18:61:2d:
da:85:08:71:88:f6:c2:ef:38:da:0d:4c:aa:b2:de:
ab:20:47:b3:84:d0:a7:c8:6d:50:09:82:4d:e5:fd:
70:77:22:b4:bf:36:ce:9e:e0:e3:01:57:d7:3c:18:
d5:f1:c4:e0:c5:b9:73:06:6d:99:f4:c6:b6:78:0c:
1f:34:83:70:2c:08:5d:b1:31:4a:8a:2a:3c:ab:cc:
c7:a9:e7:e1:4f:2f:ae:36:02:f4:c1:99:23:db:4c:
31:eb:28:0c:1d:58:bd:e0:9b:e0:33:94:04:09:e5:
d3:75:b0:09:d9:ca:4f:fa:33:c4:f6:a1:94:fe:88:
a3:c5:38:7b:b7:7c:fe:28:24:41:26:f5:55:89:0e:
b4:fd:75:72:65:4d:e6:d5:39:15:70:ee:9b:0a:9f:
87:82:59:dc:ea:f9:09:c6:73:20:0a:04:c7:83:fe:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:97:EF:2F:88:A1:EF:17:BE:58:C8:AB:26:A6:F5:FD:5B:2E:82
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a5:f7:99:94:1a:85:35:33:05:1f:1e:28:a8:3a:3b:27:6a:
8f:58:66:62:66:d5:11:bc:aa:b1:4b:57:bb:b2:83:55:e9:df:
64:cb:4b:2b:76:e6:fe:98:b2:f5:a8:c5:19:2c:de:6b:98:e9:
55:25:e1:74:ed:36:20:d7:85:ce:32:d2:6a:4e:f0:bc:6c:8c:
5c:eb:6d:c1:a4:95:03:45:8f:63:dd:02:4d:30:4e:59:ab:8f:
a5:39:61:1f:1d:ab:95:20:79:39:59:b7:fe:9a:45:91:a3:5d:
1b:da:ea:28:be:10:6b:1e:62:cb:6d:ca:98:f9:67:72:13:50:
85:d6:f4:c3:ff:4f:6d:6e:e8:de:92:d0:03:43:c8:7a:8e:69:
19:3a:cc:51:a2:04:f4:9d:32:24:4b:1f:09:35:c0:53:33:8a:
52:b1:02:c2:77:7e:26:ec:e3:56:d2:9e:22:7e:89:f6:ed:a3:
8f:a1:c1:af:71:e4:13:8c:4d:fc:a8:6a:24:bb:14:23:a6:7a:
5d:b0:05:48:2e:9b:6e:d3:94:1f:19:3e:8a:0f:04:3d:ed:67:
e4:13:54:0c:bc:20:65:6e:48:f5:7f:6b:a5:ad:38:94:ed:51:
a4:ad:1b:6f:31:88:32:67:7a:97:36:f5:03:a4:0b:26:49:09:
d7:16:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:15:14 2026 by rpki-client