Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: HgMi0xXDBy0owW+fWkfFh4cwawmazPIB7n9yRqhK0dc=
Subject key identifier: 70:9B:C7:B0:82:87:5B:AC:DA:3D:65:A9:50:AE:67:D1:B1:4A:51:46
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 019F18D6D36F189F08D53E30D6F540206863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 0819
Signing time: Tue 30 Jun 2026 14:02:39 +0000
Manifest this update: Tue 30 Jun 2026 14:02:39 +0000
Manifest next update: Wed 01 Jul 2026 14:02:39 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: ZulDuCxOTqN+7qsRcBtDVX2vIqtxf7s/DemBDWHCMdg=)
2: XiOLVjMMRIXjDwamXxHQaw_QW5M.asa (hash: j0uAz4SCp4axiJ6lvLbL24SoF2CItfFxlFx3BSZUkLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:d3:6f:18:9f:08:d5:3e:30:d6:f5:40:20:68:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Jun 30 14:02:39 2026 GMT
Not After : Jul 1 14:02:39 2026 GMT
Subject: CN=709bc7b082875bacda3d65a950ae67d1b14a5146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:a0:3e:bc:81:bf:82:82:ad:08:7f:3c:5b:
80:76:69:77:40:74:34:90:e1:be:dd:17:0b:9e:10:
d5:0d:83:16:d3:62:56:e0:85:cc:38:63:cb:8e:15:
29:78:4c:1d:73:7b:b6:7b:6d:8b:75:e6:26:b7:29:
29:7e:13:91:47:2e:96:66:69:c5:b0:62:df:04:30:
4b:bc:5b:44:af:d8:55:db:26:c5:1e:06:ee:55:c1:
56:cb:bf:b4:b7:01:9b:a5:f9:8d:31:64:71:87:4e:
18:fc:62:c4:0e:84:81:fa:b8:fa:bf:b3:21:35:64:
37:d1:92:1a:6f:df:21:69:db:72:c1:66:8f:73:22:
62:b2:cc:9c:b5:ec:c7:79:bb:d9:18:6d:62:d7:a8:
db:a9:37:6f:87:97:14:08:51:22:f4:06:9c:ae:03:
3d:a4:66:17:25:69:8d:72:ff:c1:f3:57:56:d5:49:
b6:3c:4a:d6:f4:50:20:6f:40:da:d0:50:3e:45:d0:
d9:68:3f:28:94:8a:93:61:43:b0:f2:77:39:8f:a6:
2e:a8:52:75:9f:da:8c:98:85:57:fd:7d:19:e0:e5:
4c:4a:6d:f7:68:1e:84:12:23:4a:4e:58:43:ee:4c:
38:f4:9f:85:d0:68:d2:75:f9:cd:17:4e:ec:91:fc:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:C7:B0:82:87:5B:AC:DA:3D:65:A9:50:AE:67:D1:B1:4A:51:46
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:30:01:c4:7e:bb:09:76:68:93:18:28:19:81:26:32:1f:95:
ca:9e:c9:cc:4c:26:e7:bf:ae:65:c3:6f:f8:37:70:68:ae:98:
f7:19:dd:9a:38:ff:24:a4:4a:7c:d9:11:c9:7d:36:10:de:4b:
a6:ec:a0:d8:72:25:a9:32:64:6f:c7:b5:44:ba:62:40:86:2d:
a0:3a:17:cb:49:38:c9:1b:cc:f8:a5:eb:30:65:39:25:c3:31:
4d:c5:aa:4a:87:be:2a:c9:ac:45:e1:8b:ca:6f:f3:1f:4e:42:
42:2f:10:05:ad:dc:b5:06:42:1a:2a:71:1c:67:fd:58:5d:a2:
06:f2:5f:53:9c:ac:0b:94:fe:30:ba:28:22:28:27:eb:06:27:
9d:e8:a5:19:58:a0:2e:80:eb:fa:f8:68:9c:74:d8:ee:f1:50:
f8:28:f3:01:62:64:7c:f3:ec:32:0a:95:bf:3b:25:84:e6:36:
7b:18:06:1c:9f:2e:7b:64:cd:c9:78:f4:76:65:ef:d8:64:43:
78:43:32:3f:a9:53:e3:23:b6:ba:c2:ab:e2:39:fd:3e:e9:b0:
aa:33:24:04:3d:eb:61:a6:2e:f1:94:64:f3:ab:e6:5b:ef:fe:
ee:e7:01:a4:57:3a:15:52:6e:eb:aa:e8:22:e5:e8:80:9b:90:
10:1b:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:17 2026 by rpki-client