Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: RmdYjd18dSGKN7SFWWrjsIp1z8bmL9nFz1fCRz7njpI=
Subject key identifier: 8A:6B:1F:8E:7D:23:72:E4:A9:BD:84:B0:44:99:A5:05:C3:25:33:EB
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 019D37C01AAE1031C608860A7BE6D8AA17B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 071F
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: AjVMhbWBQs6Zaf+IGyZMsmHmtb74O7mPCrwOSct/ZIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1a:ae:10:31:c6:08:86:0a:7b:e6:d8:aa:17:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=8a6b1f8e7d2372e4a9bd84b04499a505c32533eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:fa:7d:bb:56:3f:3e:cc:a0:a2:c8:46:d6:
78:7d:ea:e1:e9:46:53:e7:14:65:ee:94:92:18:60:
de:1c:43:77:0e:84:cb:00:27:58:8e:7c:80:ac:97:
aa:93:f5:25:a8:02:ce:29:c9:d7:3d:a0:a8:db:ae:
59:19:77:30:d4:1a:eb:8f:f9:5e:c5:4a:eb:6d:c6:
0e:92:b4:6b:39:e6:11:88:d4:6f:78:90:0f:3e:bc:
a5:fc:8c:a1:43:09:cf:84:68:8b:e6:51:b8:2f:a1:
f5:29:22:a2:a6:1b:de:b6:b7:c2:8c:cb:42:ae:08:
10:bb:2d:e2:21:15:f1:46:3f:9e:d9:65:60:66:71:
eb:7e:38:8e:ee:49:0e:8a:bb:9a:60:f3:87:52:38:
9a:6f:ba:0d:6f:24:f8:a4:84:50:2a:1a:68:3d:d9:
74:66:80:d6:fd:a7:f4:49:cd:48:6d:2f:7b:ef:aa:
c4:5b:3d:f9:8b:8f:72:a5:38:03:5a:7d:e7:7f:43:
c3:b0:67:5c:5c:df:b3:02:30:ff:30:29:95:5c:91:
2f:84:f1:80:93:79:43:49:f6:24:55:e1:10:b0:68:
97:42:d6:71:4c:71:04:a5:eb:04:29:6d:1a:7a:00:
9d:87:30:54:75:f9:0b:12:6e:99:65:1a:f5:c0:f1:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6B:1F:8E:7D:23:72:E4:A9:BD:84:B0:44:99:A5:05:C3:25:33:EB
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:76:2d:f9:10:ea:15:16:ea:92:18:29:e2:0b:c5:71:35:43:
ef:cd:04:6e:82:c7:a3:63:c4:a7:e5:65:c7:8c:7d:1d:8c:3a:
5a:cd:0c:42:7d:74:88:64:62:de:bf:22:b7:1f:e4:7f:c3:06:
71:73:ac:dd:c3:d6:05:c8:ca:fb:07:bd:74:5e:c8:02:a0:c1:
20:df:b5:1b:3a:c4:4c:94:0a:b4:70:c0:6f:eb:db:9d:4d:07:
f1:c5:e7:04:ed:21:a7:f9:0e:fe:9e:4e:93:a2:3e:af:e7:23:
70:a9:1c:46:5f:14:e8:1d:15:0d:39:47:07:09:a9:46:4e:21:
44:4a:67:a2:a6:a3:27:67:b5:28:90:5a:6b:ae:59:e2:fe:35:
da:dc:6d:cc:cb:a1:fc:22:3a:ce:67:11:8f:c6:a5:39:7a:39:
97:9e:88:cc:c4:7c:c5:39:a8:7a:a1:46:70:a4:c3:74:43:65:
e9:8b:58:0e:6a:6d:2a:a7:74:7d:4e:f0:3b:58:a2:9b:d1:6c:
83:46:bc:75:cb:37:12:ed:71:68:92:37:6b:97:9b:6e:00:bd:
ad:a0:56:b7:75:ad:14:ab:9c:73:fb:fd:0e:0f:a4:5c:8b:db:
1d:dc:ef:70:27:2a:2e:eb:c7:16:a5:8f:25:9f:97:fc:c8:6b:
dd:1b:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:13 2026 by rpki-client