
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: 2DUCAofxb3w1qtvt7Lq3rzwt48dAjfwTFIKRg+jT4hE=
Subject key identifier: A3:C4:9E:0D:3C:54:39:73:D9:3F:E3:3B:9A:D5:6A:C5:E8:35:65:AD
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 019E31F375AF11E630F0517C1F1A444E30B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 16F5
Signing time: Sat 16 May 2026 18:01:39 +0000
Manifest this update: Sat 16 May 2026 18:01:39 +0000
Manifest next update: Sun 17 May 2026 18:01:39 +0000
Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: uG2uoyBX/4eO0OsurrPNYxOpforhxgcJE5Xksy/2oEQ=)
2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:75:af:11:e6:30:f0:51:7c:1f:1a:44:4e:30:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: May 16 18:01:39 2026 GMT
Not After : May 17 18:01:39 2026 GMT
Subject: CN=a3c49e0d3c543973d93fe33b9ad56ac5e83565ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:05:81:b6:d2:e8:f4:58:a5:12:57:a1:52:
34:65:a5:8a:68:97:09:63:3a:76:96:5a:bd:f3:a8:
13:7a:25:20:37:63:2b:cb:ab:af:60:0d:f2:df:3a:
11:72:75:0c:ab:78:4a:c2:f7:67:ea:49:7f:74:c3:
87:d2:78:fa:5e:2a:98:04:ed:05:34:ed:8e:c8:ef:
38:68:61:43:46:2a:1a:79:67:70:e0:b3:f2:a7:7b:
35:20:e0:b2:4a:51:b5:89:52:0b:a8:41:5f:24:13:
9d:50:85:1b:8a:4b:0e:76:c3:f1:b1:c5:9e:78:90:
39:cd:e8:5f:4a:53:c5:1e:40:1f:e0:37:a2:ed:e7:
0a:04:b3:40:e8:f0:71:2c:24:c7:4b:6f:96:e5:1c:
70:a6:b7:53:7f:e6:5d:79:fb:b3:43:26:43:de:3c:
38:4e:a6:e3:2f:b9:3a:11:14:96:65:7b:7b:c4:71:
3b:f0:1e:40:22:06:8a:04:a6:bc:92:86:d1:af:3e:
09:ce:64:de:8e:53:03:d0:cf:96:71:01:c4:8d:31:
9d:38:d1:19:41:1d:1b:2e:18:ee:4f:fe:8c:42:b9:
86:9d:83:59:3e:3f:b0:40:22:7e:ab:da:91:74:54:
46:89:c4:3c:01:2e:e4:5c:cf:fd:d0:ce:33:b0:56:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C4:9E:0D:3C:54:39:73:D9:3F:E3:3B:9A:D5:6A:C5:E8:35:65:AD
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:8d:84:9c:d5:4f:f7:eb:62:a1:68:56:3e:5a:4e:51:4a:
58:d7:4b:51:58:9e:23:ea:0c:78:6d:e6:e9:e5:e1:77:9e:02:
34:dc:be:36:c4:78:7a:8f:1a:7c:26:6f:2e:64:4a:40:74:53:
0a:c0:db:7f:85:d5:a1:5f:b1:c5:9a:7f:4b:6e:49:8a:94:95:
41:43:d2:9b:5b:3e:2d:a3:5d:7f:17:46:0b:f3:fa:be:07:fc:
bb:89:d6:6d:1e:ed:30:ce:1f:3e:fe:5e:9a:aa:e5:44:19:a2:
ac:59:8d:f5:05:0e:65:1a:bb:7b:4f:1a:df:24:0e:b0:7d:21:
3a:22:d5:ad:89:8a:79:8c:f0:42:74:60:42:0f:2b:f2:52:b8:
39:39:33:a4:fd:e6:04:bd:0f:6a:23:27:5f:90:9d:d4:1b:69:
40:6c:64:0e:46:f0:c8:c6:7f:0c:bd:76:ac:6c:4d:98:b8:d0:
1f:e2:f3:52:95:32:b9:3c:3b:32:9f:78:2d:ab:d3:f7:56:f8:
24:06:3a:9b:04:9c:ef:60:73:18:76:ee:b5:03:27:d9:8c:15:
f5:c5:43:d1:b9:40:e0:b9:13:f4:40:a2:c5:cc:a8:70:9a:f6:
b2:91:87:ec:af:bf:7a:34:b4:d6:d9:08:a1:4e:e9:2c:e7:9e:
2c:7f:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:28:07 2026 by rpki-client