Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: j+nDXiwYR7vqFQXRQUzGLJ0Gr+rX3Eo1250qsusjyq4=
Subject key identifier: D5:BE:FF:DC:06:6D:F2:45:24:E9:89:E0:99:9B:B3:22:07:83:D1:0E
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019CB994CE29B2A45AB13E144BC5CCCE3682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 15F4
Signing time: Wed 04 Mar 2026 16:01:02 +0000
Manifest this update: Wed 04 Mar 2026 16:01:02 +0000
Manifest next update: Thu 05 Mar 2026 16:01:02 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: Rrzv7u6CJ/SSW5wv7cJ7VsKwOXwYtJMfg6hHvGxqz+w=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:94:ce:29:b2:a4:5a:b1:3e:14:4b:c5:cc:ce:36:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Mar 4 16:01:02 2026 GMT
Not After : Mar 5 16:01:02 2026 GMT
Subject: CN=d5beffdc066df24524e989e0999bb3220783d10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:da:3f:d0:1b:6c:64:af:fd:5a:09:a0:26:
2e:30:be:c2:22:c3:4b:c4:b1:31:7a:e2:c4:d9:41:
42:51:42:67:0c:af:bf:ae:ec:ec:6e:b2:33:96:05:
1b:76:1a:c1:ad:f7:7f:96:9b:75:28:9c:cf:07:34:
51:1b:c2:05:3a:9d:2d:13:d2:40:ee:d9:f7:66:9a:
af:26:48:11:12:73:b1:e4:53:d3:86:17:05:ab:e8:
ce:27:63:d4:59:40:5c:30:05:cc:03:59:40:10:22:
3e:04:8a:f5:71:63:60:95:3e:53:87:54:82:fe:23:
49:17:f2:f9:66:ac:6e:29:58:31:fb:fc:6d:32:52:
30:21:57:45:2f:d9:b6:8f:68:84:3e:6e:19:77:8b:
f9:8c:3d:57:17:91:be:2b:da:0b:4b:83:67:1f:ce:
03:6a:47:70:7d:d3:a7:cf:b7:59:88:ba:df:75:6a:
25:56:fa:ac:8a:ba:ce:85:16:ae:e1:e1:86:c5:28:
f7:c2:12:94:e1:42:6b:ff:6f:74:67:57:1f:d1:22:
4b:50:93:32:5c:fe:d2:a8:38:98:cb:d5:b2:83:ed:
96:a3:15:d3:5f:a2:19:76:37:2b:64:f2:16:c3:8a:
09:e4:73:07:97:e2:8e:88:c0:a4:d5:a9:dd:08:72:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BE:FF:DC:06:6D:F2:45:24:E9:89:E0:99:9B:B3:22:07:83:D1:0E
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0a:02:c5:cb:98:da:4d:f2:bf:e4:4f:fe:ba:1d:70:f1:de:
fb:0e:69:00:78:05:51:8e:cf:d4:e6:60:89:5f:c1:6c:2c:15:
3a:1f:3b:d8:a5:c7:4a:08:87:59:6f:31:b4:dd:4a:65:6c:42:
cc:1d:7f:3a:15:21:29:69:34:60:a6:78:be:88:43:96:41:19:
76:7f:76:f2:4a:43:98:15:e7:61:72:95:a1:73:90:a6:36:85:
26:c2:bc:9b:c5:07:d8:f5:3a:dd:e5:ff:32:98:ba:2e:20:e3:
b2:02:5d:c5:5d:45:89:1c:3c:22:93:2d:2e:5d:8d:70:a8:a9:
88:e7:00:24:e8:60:a4:d8:1c:4b:aa:82:ef:1e:56:e8:b6:f3:
39:04:44:a0:1a:3b:34:60:fe:eb:de:01:b8:7d:fb:88:79:ab:
1f:03:97:87:74:70:cb:d3:e0:31:72:88:06:14:86:df:ca:75:
26:a5:db:e4:c8:d1:d8:f7:27:30:56:17:6e:38:dd:c6:41:1f:
b7:1a:e4:ae:e5:2a:02:31:c8:03:7c:89:ad:06:98:52:04:4e:
cb:84:3d:7e:c3:19:3b:3f:81:5a:5e:5d:35:23:0a:e1:7b:12:
c5:18:78:da:21:28:32:59:1d:98:e8:b9:09:9b:b3:6a:5e:5e:
4a:95:7a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:05:17 2026 by rpki-client