Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: mp4AFvZK1LBl5POxp/IYQHrK/2XmtIMZ8oA7ZzSxXpI=
Subject key identifier: D6:5F:BD:32:55:A4:D6:33:92:ED:2B:26:08:46:A1:D0:FA:E4:0C:D8
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 01A1423ABFD5C79CBD8B88D1260AEBCA171E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 184D
Signing time: Fri 16 Oct 2026 01:01:48 +0000
Manifest this update: Fri 16 Oct 2026 01:01:48 +0000
Manifest next update: Sat 17 Oct 2026 01:01:48 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: RQKcztdClwELYc3W6qr9+UzljmoD1o85IT2L1zj/Xl4=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:3a:bf:d5:c7:9c:bd:8b:88:d1:26:0a:eb:ca:17:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Oct 16 01:01:48 2026 GMT
Not After : Oct 17 01:01:48 2026 GMT
Subject: CN=d65fbd3255a4d63392ed2b260846a1d0fae40cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:dc:79:15:fb:99:bf:43:36:db:7f:5c:06:
fa:61:98:fb:c4:0e:d0:e2:9d:4b:00:ca:ac:4f:1f:
12:58:6b:14:a2:52:df:8a:31:a9:42:a0:e9:39:ec:
a0:8d:3f:7e:99:92:98:ad:35:91:d3:d4:f3:b5:12:
49:f3:a9:20:24:f9:c2:65:98:eb:2d:b8:78:f5:a7:
9e:f6:1c:4c:f8:04:cd:c9:d6:b3:3f:83:d5:11:75:
22:b1:8c:4e:41:0c:54:c8:0b:1f:73:88:20:8a:01:
fa:3d:50:8a:0b:09:99:dd:dd:0f:cf:b9:e5:5c:9d:
02:6c:f2:03:f4:1d:05:93:89:24:a3:2d:c7:96:b1:
43:de:06:03:c5:52:09:fa:da:f2:7e:cb:1b:f5:ee:
f8:d6:ac:6e:1d:4f:0d:cf:79:00:c5:7e:10:b2:77:
eb:bb:b7:47:8f:3d:a9:8d:5c:ee:bb:5b:30:7c:a7:
72:97:34:53:91:93:9d:4e:9b:20:51:62:fa:da:70:
3f:45:7a:39:e9:09:8b:59:c2:bb:11:a1:81:02:68:
0b:98:e7:ab:d3:81:63:0e:d0:79:a0:7a:b0:b4:8c:
b3:9d:bf:31:49:13:b0:4c:eb:c4:84:74:35:e3:6f:
ec:b7:e6:17:ef:30:1d:d7:6d:d4:69:66:cf:5b:b6:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5F:BD:32:55:A4:D6:33:92:ED:2B:26:08:46:A1:D0:FA:E4:0C:D8
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:76:87:93:a3:ce:ef:45:c7:7e:4e:0f:82:c1:ad:8c:a0:3f:
ee:a5:8d:92:28:ef:2e:2f:58:d2:7a:43:d5:d4:36:dc:8f:3b:
31:30:bd:28:72:1a:f3:28:b0:9d:e3:9f:91:bd:0a:6d:1c:47:
ca:fb:0b:73:83:e6:3f:58:0b:0b:31:d0:1d:22:d8:5b:27:5f:
ee:30:4c:c6:26:de:ac:cb:c5:8d:ee:46:56:f9:db:90:f3:50:
e3:5b:a1:00:94:bf:18:c9:13:ec:b4:90:5b:06:67:e2:ce:48:
94:e5:0f:52:56:68:4f:64:71:02:ec:58:4a:ca:bc:5a:0e:bc:
d2:f6:30:62:cf:38:bd:66:d6:74:c9:46:32:24:b5:08:37:4d:
e1:ff:9f:33:dd:d2:ec:f2:fa:8d:96:0c:09:4e:fb:ac:3a:09:
75:44:d4:c8:a2:dc:83:e2:70:ea:c6:41:ca:f2:40:ac:e4:dd:
8d:fa:d8:3e:2f:60:6e:05:24:e1:5b:3e:70:70:57:39:6a:03:
71:ff:d7:14:0d:2b:79:bb:7f:e5:8d:db:be:7a:18:5a:6c:72:
8f:f2:95:fb:1d:7c:b7:4e:9d:62:25:b4:ec:5b:05:40:c2:3a:
e2:81:03:25:a5:4e:d6:9e:94:c9:97:fd:61:b7:88:bc:7d:45:
eb:ab:20:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCOr/Vx5y9i4jRJgrryhceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz
MzliYWUwHhcNMjYxMDE2MDEwMTQ4WhcNMjYxMDE3MDEwMTQ4WjAzMTEwLwYDVQQD
EyhkNjVmYmQzMjU1YTRkNjMzOTJlZDJiMjYwODQ2YTFkMGZhZTQwY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r3ceRX7mb9DNtt/XAb6YZj7xA7Q
4p1LAMqsTx8SWGsUolLfijGpQqDpOeygjT9+mZKYrTWR09TztRJJ86kgJPnCZZjr
Lbh49aee9hxM+ATNydazP4PVEXUisYxOQQxUyAsfc4ggigH6PVCKCwmZ3d0Pz7nl
XJ0CbPID9B0Fk4kkoy3HlrFD3gYDxVIJ+tryfssb9e741qxuHU8Nz3kAxX4Qsnfr
u7dHjz2pjVzuu1swfKdylzRTkZOdTpsgUWL62nA/RXo56QmLWcK7EaGBAmgLmOer
04FjDtB5oHqwtIyznb8xSROwTOvEhHQ142/st+YX7zAd123UaWbPW7Z8IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZfvTJVpNYzku0rJghGodD65AzYMB8GA1UdIwQY
MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt
Y2M3YjI4OTkwYjgxLzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx
LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHaHk6PO
70XHfk4PgsGtjKA/7qWNkijvLi9Y0npD1dQ23I87MTC9KHIa8yiwneOfkb0KbRxH
yvsLc4PmP1gLCzHQHSLYWydf7jBMxiberMvFje5GVvnbkPNQ41uhAJS/GMkT7LSQ
WwZn4s5IlOUPUlZoT2RxAuxYSsq8Wg680vYwYs84vWbWdMlGMiS1CDdN4f+fM93S
7PL6jZYMCU77rDoJdUTUyKLcg+Jw6sZByvJArOTdjfrYPi9gbgUk4Vs+cHBXOWoD
cf/XFA0rebt/5Y3bvnoYWmxyj/KV+x18t06dYiW07FsFQMI64oEDJaVO1p6UyZf9
YbeIvH1F66sgEw==
-----END CERTIFICATE-----
Generated at Fri Oct 16 04:08:32 2026 by rpki-client