Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
File: bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json)
Hash identifier: T9VWm4AmL8wXhmn0ShoLf/+BYG/a3aO1Ewv+qMvjfcM=
Subject key identifier: C5:23:55:47:67:E2:89:C3:D4:C1:23:62:A3:D8:8F:8E:78:B1:15:9B
Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
Certificate issuer: /CN=6cb9bfe9336da055790608a77a58ccabc4968694
Certificate serial: 019D38D356A81F1B1874F22166D527873B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
Manifest number: 0F34
Signing time: Sun 29 Mar 2026 09:01:07 +0000
Manifest this update: Sun 29 Mar 2026 09:01:07 +0000
Manifest next update: Mon 30 Mar 2026 09:01:07 +0000
Files and hashes: 1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: GzGXwj8V6crzKtaj5NmAFn31fWS6ChWU+Z7LDfJYmqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:56:a8:1f:1b:18:74:f2:21:66:d5:27:87:3b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694
Validity
Not Before: Mar 29 09:01:07 2026 GMT
Not After : Mar 30 09:01:07 2026 GMT
Subject: CN=c523554767e289c3d4c12362a3d88f8e78b1159b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:62:1a:55:00:3a:94:31:1a:4a:cc:7d:3c:
a0:e9:d4:86:ff:08:ff:d8:99:63:5b:d3:42:9a:02:
ea:c4:2b:06:0f:34:d1:60:9f:af:71:f5:cd:ee:ec:
7b:15:5f:2a:09:55:e3:d9:a5:7c:62:6c:39:5c:58:
d2:24:b7:de:04:a5:4f:25:7c:fb:cc:55:0e:be:66:
2b:0f:78:cd:11:50:1f:2a:e1:51:86:e5:b2:ec:f5:
77:04:eb:24:a8:fb:c4:8d:44:fc:5f:26:9d:b2:00:
d4:63:13:d4:ac:a0:91:1c:c7:19:c8:15:c4:30:ef:
7a:b2:c2:3f:77:41:9f:1e:60:1b:1f:b6:2a:c3:24:
fb:6a:17:98:cb:c4:5f:a0:d0:8e:62:91:32:4c:7a:
ce:10:08:ba:af:cc:ce:b7:5f:8c:6c:a6:aa:64:28:
48:65:b2:14:2b:9b:af:20:de:f5:81:12:3d:b4:ae:
94:df:d8:e2:76:0f:66:c2:51:f1:b0:fc:dd:cf:11:
af:1a:f2:92:ba:b3:cc:a4:b2:0a:45:62:57:10:d6:
f1:2c:da:fa:94:b9:18:fb:70:92:46:8d:f8:94:47:
65:26:1c:70:48:8e:ff:d0:b6:ba:bb:96:05:d0:d6:
b1:b4:64:0d:66:9c:24:12:23:2c:2d:18:cb:84:ec:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:23:55:47:67:E2:89:C3:D4:C1:23:62:A3:D8:8F:8E:78:B1:15:9B
X509v3 Authority Key Identifier:
keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1e:82:f3:8b:2a:7e:44:e9:43:e5:0c:c7:92:0b:bf:17:e1:
89:eb:a4:4c:73:07:3a:e8:1d:4d:d2:c7:90:f3:de:bc:6c:3e:
ac:5e:9b:c6:e6:24:ce:74:14:14:41:85:3e:54:a7:64:5b:57:
2c:81:49:4f:6c:c4:42:b0:24:b9:87:fc:b9:12:c6:24:a4:9a:
84:be:50:30:8a:cd:d3:46:ca:b3:e1:15:cb:c8:73:81:0f:57:
ad:e3:67:70:1e:b3:0d:02:2f:10:61:5c:5d:a4:77:b9:46:35:
80:d7:23:ab:76:d2:af:89:80:d0:21:c4:81:88:dc:0d:7c:6b:
1e:b3:3b:c2:02:55:13:f9:41:60:be:ab:bc:d1:8f:d3:e2:7d:
2f:b1:cc:67:4c:a8:fb:ad:8c:e3:b6:b4:eb:7a:ce:db:37:77:
27:d5:af:7d:6a:92:fb:8a:bf:c9:bb:71:d9:40:33:a4:28:1b:
36:a3:7f:67:1a:a0:bb:79:50:59:92:c5:b9:e0:bb:b5:af:0a:
7f:35:f9:65:f1:61:64:2b:12:0a:67:e7:c8:cb:db:13:3d:a1:
7e:81:42:f1:19:06:0e:f3:82:03:6e:04:8f:2a:75:f6:e5:1e:
b7:13:2f:a6:52:89:f9:c5:cc:01:34:b3:18:6c:38:70:62:9d:
ca:ce:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:03 2026 by rpki-client