Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
File: BLHnVu2xw70vV2afWCv2qVG4P0g.mft (raw, json)
Hash identifier: wajQWmZxsN2YzkKH6zpi50hc3BT4jolsWYed8gnEpYM=
Subject key identifier: F7:E5:B3:E8:98:B3:AE:EA:29:90:B2:52:FB:3C:4D:FF:2B:5E:8A:0C
Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
Certificate issuer: /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Certificate serial: 019F194343EA7D5AE07CCD27BF0DCC416E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 16:01:06 +0000
Manifest this update: Tue 30 Jun 2026 16:01:06 +0000
Manifest next update: Wed 01 Jul 2026 16:01:06 +0000
Files and hashes: 1: BLHnVu2xw70vV2afWCv2qVG4P0g.crl (hash: JndXry6kCknQxa5jjJEW7CZBDaITp5vk9En8uKOYWWg=)
2: XvWth5JnRTo0n6WWkbtF-kr40Bo.roa (hash: FcXBAVVeRl2iDfImKR5vQ2YlB5INy+hid9PG+FEh1dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:43:ea:7d:5a:e0:7c:cd:27:bf:0d:cc:41:6e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Validity
Not Before: Jun 30 16:01:06 2026 GMT
Not After : Jul 1 16:01:06 2026 GMT
Subject: CN=f7e5b3e898b3aeea2990b252fb3c4dff2b5e8a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:dc:7f:b8:5c:35:14:c8:d4:f8:16:94:72:
31:e7:2f:db:d2:f0:6f:cf:5e:c1:6d:e3:8b:0f:3c:
e6:37:cf:76:40:b1:b9:65:6b:6a:96:d3:97:b4:fb:
8a:70:64:01:58:81:b1:2a:61:16:f6:5f:50:42:bd:
f1:ab:34:92:3d:2e:61:db:fe:9a:7e:ce:ce:92:56:
fc:b4:3f:82:83:2f:00:0e:4a:09:4e:7c:07:d1:ea:
95:62:ec:73:d4:3f:6b:a7:1e:1b:dc:2a:2e:f3:9c:
7b:70:21:4f:89:36:b9:5b:ae:7b:42:25:87:d8:0a:
26:28:9e:bb:fa:02:47:39:b9:b3:f1:f7:8f:24:e3:
c8:31:46:61:6e:e2:c3:8f:34:f7:c0:29:56:a9:50:
8e:0a:25:f3:33:b2:00:19:7c:36:aa:19:ac:9c:4e:
41:01:b1:6d:4a:49:15:59:aa:5d:04:a2:b1:e0:50:
5e:eb:c1:fa:b4:b0:9c:6c:b3:c0:56:b5:69:32:fe:
57:d0:bf:75:3c:ae:a8:18:1c:d4:6b:b5:20:72:53:
90:c5:77:ee:46:b5:99:f2:3d:4c:d0:1d:98:8b:69:
77:18:00:e8:49:b6:e7:76:60:8d:d2:59:5a:3d:0d:
ea:28:13:db:5b:93:f2:bb:e3:1e:30:06:4c:4b:e3:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E5:B3:E8:98:B3:AE:EA:29:90:B2:52:FB:3C:4D:FF:2B:5E:8A:0C
X509v3 Authority Key Identifier:
keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8c:e7:ee:b9:b2:97:da:53:79:0a:e5:e6:54:2f:9e:38:36:
98:20:fc:cb:3a:67:52:3d:b4:f5:54:b5:7c:05:f5:50:77:a6:
61:5a:f4:90:18:f5:52:42:8e:3c:b2:e0:6b:66:c3:92:e6:68:
41:53:89:d2:c6:44:c2:04:54:c5:61:04:b0:d0:21:30:ef:d6:
55:c2:44:41:3c:05:8f:5a:03:c6:d2:29:b4:db:39:7e:a4:37:
46:63:00:a6:a4:93:17:fe:d1:62:39:57:9b:be:2e:dc:32:db:
82:e9:da:a8:81:77:f6:6f:ad:85:5a:c9:38:40:01:fe:c5:01:
35:c9:f5:26:38:fc:0a:d1:f0:d9:0f:8e:d9:a1:98:2c:23:78:
39:aa:7a:15:75:33:18:93:f8:db:65:63:5c:1d:e3:8a:24:fb:
2f:c7:86:76:ad:fc:c6:b4:57:ee:a7:3a:68:d7:4f:ff:b8:b2:
c3:30:bb:29:89:3b:fe:84:0a:aa:ba:e9:bb:98:2e:5f:bc:1c:
91:78:0d:57:ed:61:a6:dd:bd:81:84:1a:e6:05:ba:e8:91:1e:
78:62:8e:10:bd:85:40:4f:bf:dd:8c:c6:f7:c5:9b:12:34:eb:
50:8f:1e:1b:cd:7c:bc:da:3b:9d:a3:89:86:fd:e1:c8:63:29:
37:5d:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:22 2026 by rpki-client