Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: GWksTExyi/w17YS3ix+L7FXqGl7yaYbuKML1/KBRy1U=
Subject key identifier: 9A:13:A8:D9:21:A4:EE:24:ED:12:5B:85:48:7D:56:12:5D:90:88:88
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 019D3AC21F5D951E993DB96E4C902353A741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 1675
Signing time: Sun 29 Mar 2026 18:01:33 +0000
Manifest this update: Sun 29 Mar 2026 18:01:33 +0000
Manifest next update: Mon 30 Mar 2026 18:01:33 +0000
Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: 7TWSMcwBVMg3c3bbkT+H4aUlbp4a992//MiG27fbYHw=)
2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c2:1f:5d:95:1e:99:3d:b9:6e:4c:90:23:53:a7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Mar 29 18:01:33 2026 GMT
Not After : Mar 30 18:01:33 2026 GMT
Subject: CN=9a13a8d921a4ee24ed125b85487d56125d908888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:ab:75:74:d9:be:de:1c:8e:ff:73:03:bc:
8e:2f:fb:7d:6d:f3:6a:9a:48:06:61:9c:b5:88:50:
f8:cd:01:fe:fb:f9:c9:4a:91:7b:65:45:ed:7d:9d:
70:7f:3a:49:57:92:df:bc:46:ec:ab:4f:40:a2:0a:
95:a4:8d:19:2c:8c:6c:fa:17:2b:8a:c5:a4:96:48:
5f:31:b3:e3:40:9f:69:fa:a5:f4:03:05:a0:05:38:
aa:1e:5b:b4:82:00:5c:04:cf:08:fc:d3:b0:c6:9c:
52:5e:fb:35:62:ca:08:98:f1:b2:34:3d:17:8e:94:
9f:1b:6c:67:e7:34:64:50:78:9b:8d:42:e1:51:f6:
99:ad:dd:09:9e:51:5e:b3:c0:8f:c0:3b:68:80:d9:
88:7f:89:b8:6a:41:7c:62:51:dc:02:77:b0:8c:73:
7f:e2:7a:4f:20:62:1c:8a:e7:2e:a8:5e:2b:06:8f:
ed:d7:8e:3d:4c:69:88:43:cd:ec:2a:4e:d8:29:9d:
5e:34:7c:34:08:96:5a:71:21:94:e3:46:8d:b9:2e:
08:f2:d5:ba:bc:09:59:30:cb:93:e4:1a:ad:9c:1a:
02:7f:1d:dc:e4:63:a9:52:0d:9f:74:8c:65:68:2a:
34:1b:18:7d:cf:e4:03:4f:6d:15:3a:82:18:28:ac:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:13:A8:D9:21:A4:EE:24:ED:12:5B:85:48:7D:56:12:5D:90:88:88
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0d:2e:82:d6:39:58:1a:01:23:2a:e2:99:35:e6:9b:e2:1b:
0c:31:d4:d3:da:46:69:1c:65:a4:db:70:e7:58:2e:e3:57:5a:
c8:14:30:75:54:f5:2a:0b:87:91:15:4a:b2:c7:2b:a5:37:7a:
e4:8a:a4:dd:2b:ff:bf:2a:69:03:a5:e4:77:fa:b2:03:d0:3a:
32:a4:39:95:67:a5:14:f1:38:6a:24:00:6a:ca:0f:bd:74:e7:
4e:64:b3:db:5f:d5:4e:d2:a3:b9:32:8c:63:7b:fc:b7:1f:b4:
1d:f7:db:14:fc:30:8f:b8:07:5a:43:ae:6a:04:90:5e:6d:71:
c0:36:d1:ab:9a:21:eb:de:1f:96:72:5c:f5:97:c5:7a:92:30:
ca:a8:a2:f3:56:c8:d4:38:05:eb:78:16:93:8a:1b:e8:ab:08:
d1:37:70:28:79:96:aa:ee:62:dd:53:e3:43:ac:f8:34:c0:e1:
ad:e9:ea:58:b8:62:8e:49:15:73:66:78:b4:ad:f4:29:8e:64:
98:a9:4e:9e:55:e9:45:46:d1:b0:7f:3e:8a:13:c5:00:7e:86:
91:34:3c:0d:eb:6f:a7:b7:10:2b:fd:06:2a:23:bf:cd:4b:ee:
a8:57:db:9f:da:0a:16:61:f1:b6:6b:46:1d:73:f6:3c:93:d7:
76:3f:1e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:31 2026 by rpki-client