Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: UAV4FLHbSvNiLnk9udnOeKtCSCk1fBCbHkokxq95rjE=
Subject key identifier: 30:25:3E:88:6A:94:C9:8A:4D:2C:EB:33:3A:38:C0:E1:03:E1:77:75
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019F0697F5FD0A53F004DC0756E0C40E74F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 1725
Signing time: Sat 27 Jun 2026 01:00:49 +0000
Manifest this update: Sat 27 Jun 2026 01:00:49 +0000
Manifest next update: Sun 28 Jun 2026 01:00:49 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: TyZ2Y5wJWhWWbWWNcXYVZovJkC8G5pPjhhxsranaVxk=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 23:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:06:97:f5:fd:0a:53:f0:04:dc:07:56:e0:c4:0e:74:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jun 27 01:00:49 2026 GMT
Not After : Jun 28 01:00:49 2026 GMT
Subject: CN=30253e886a94c98a4d2ceb333a38c0e103e17775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:32:5e:8d:60:e4:84:ad:a8:07:49:7e:7d:
dd:cc:2b:2f:dd:4f:8e:8c:f9:03:12:97:96:a2:20:
dc:50:65:7f:61:58:59:b9:43:eb:df:75:76:c0:97:
ed:9e:a6:04:38:af:e2:e0:9b:30:05:b2:69:cd:6a:
60:c1:ad:b3:75:85:07:ff:44:89:53:9d:50:f1:8b:
44:ed:56:57:97:2b:93:d2:54:9e:25:b0:35:2a:50:
3f:bc:04:89:a1:15:ea:a4:10:32:43:1b:f8:f7:7f:
68:02:4d:3e:8a:af:22:24:e1:d0:d1:8b:7a:27:31:
39:15:33:a4:c2:5e:80:eb:4b:25:59:48:1d:c0:45:
03:b7:7f:86:c9:18:1b:73:b3:39:43:10:76:5f:a4:
47:d5:ed:44:7f:9f:ae:fd:e6:77:27:51:75:20:05:
4c:8e:3b:5b:14:91:ca:30:3e:c6:15:9d:c3:4a:f0:
17:43:ec:73:fb:8d:b5:72:d5:42:93:e5:0f:cd:a1:
2a:16:a5:e1:a5:27:44:9d:c5:25:9a:09:da:17:ea:
29:45:ff:a9:96:89:6b:bb:08:64:46:74:73:36:94:
40:d5:e6:de:b4:47:1c:3a:33:20:fe:57:18:8e:59:
a7:c2:08:b7:bb:09:4b:40:72:da:10:12:11:57:b1:
5a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:25:3E:88:6A:94:C9:8A:4D:2C:EB:33:3A:38:C0:E1:03:E1:77:75
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:01:17:8b:35:96:d6:33:63:a3:32:9f:a9:cc:97:4e:4a:c8:
d5:2f:1c:97:0a:08:0e:72:95:d2:63:a0:1a:e4:22:11:45:87:
86:3a:e2:34:eb:47:ba:42:07:03:54:30:ce:c0:50:ea:59:0b:
fc:08:f0:25:d6:c7:74:ff:98:fc:0a:e4:5a:90:ed:e7:42:e7:
45:73:1a:af:d9:20:bf:7a:17:68:20:59:e0:d5:f1:d5:67:ae:
dd:47:76:29:75:f1:98:df:20:4c:7d:81:8f:df:c2:77:af:43:
cc:6f:45:5c:b3:fd:d7:5c:50:ff:97:2b:75:a7:f1:5f:7e:f1:
a7:e8:61:38:5c:64:6c:9f:25:40:cc:8d:a2:f5:ef:4d:db:21:
93:0e:cd:53:23:e9:f0:c9:14:a3:c9:e1:e4:42:ac:17:87:ac:
f1:49:c0:26:90:ab:e2:af:f0:6f:20:18:e5:8e:ae:d8:83:d8:
31:d5:d7:99:cf:f4:cb:12:45:62:84:57:ed:c3:ef:d9:11:2c:
ab:fd:0e:fc:48:54:89:1f:4b:a6:71:62:f9:15:a2:83:ee:36:
db:ba:b1:df:e5:7a:83:4f:32:40:9f:ea:63:54:56:4b:6f:b6:
1c:4a:77:4e:9a:e0:82:e5:78:9f:53:7d:4c:72:f6:38:3d:1c:
71:f2:10:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 09:24:45 2026 by rpki-client