Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: 1WT+dXDDUCh8Gu8MpwukgRhmw3JMAFhOSqO2DCAh8rg=
Subject key identifier: EB:08:35:23:32:38:F5:A5:98:E6:8A:B7:99:43:AE:09:10:35:B3:D8
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 01A17B166BF6E4A9DDC411E0DBC97DDEECFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 132D
Signing time: Tue 27 Oct 2026 02:00:29 +0000
Manifest this update: Tue 27 Oct 2026 02:00:29 +0000
Manifest next update: Wed 28 Oct 2026 02:00:29 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: S+W1hCvk+RHejKl4JshuyBFOvTX3rU9e5Nc9bxWfnAI=)
2: dCctAo4cF_cQVF9v9iua88jVN3g.roa (hash: NqSK6SL1qTb0fxaxxTxRSRb53epcbkxkPGl7gPfChT0=)
3: klXO-sH0E69ctlYICKM2oEhYAk0.roa (hash: 8p7Dn973TTYNLcmIRozlh88axGubR0kxdQP115KfTHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:6b:f6:e4:a9:dd:c4:11:e0:db:c9:7d:de:ec:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Oct 27 02:00:29 2026 GMT
Not After : Oct 28 02:00:29 2026 GMT
Subject: CN=eb0835233238f5a598e68ab79943ae091035b3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:32:ec:48:5b:2c:b7:07:63:b3:07:d8:1a:
e9:1e:d5:39:72:89:55:f4:4f:54:87:d3:d7:e0:ff:
da:23:a4:73:fe:54:f1:7a:50:e0:08:70:b9:69:cd:
a6:ea:6c:aa:de:7d:6b:27:b7:05:65:d9:bc:d5:18:
06:e3:c9:34:a0:c5:97:b6:6a:c4:61:53:cf:0d:b1:
70:83:12:18:0e:77:8f:95:e1:d7:3b:41:0a:ad:8d:
98:61:97:9d:53:6f:f9:b4:07:02:bf:fe:d1:06:4e:
f8:bf:83:4f:8b:52:b7:cc:68:ca:76:1c:81:b3:2b:
1d:76:0d:35:94:55:8a:91:62:50:90:86:a1:fe:a5:
6e:99:65:2b:15:7d:f0:d1:9e:5b:02:4d:fb:ed:be:
e1:76:7d:0e:26:e4:88:90:06:ef:91:05:db:84:5f:
a8:86:94:f2:fd:b4:e0:24:5e:23:a0:a5:60:6a:59:
4d:5a:92:cb:dc:f3:1a:d1:15:aa:ed:8d:da:3c:81:
47:1f:de:6e:c2:e9:ee:db:96:ec:85:ea:ee:69:19:
ee:13:e2:d3:32:fa:a0:fa:53:a2:2a:da:57:09:44:
50:0f:89:0a:57:11:c1:d2:0d:fd:01:75:79:1a:19:
83:84:2a:69:ef:09:e9:fc:21:ef:6e:05:1b:90:a5:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:08:35:23:32:38:F5:A5:98:E6:8A:B7:99:43:AE:09:10:35:B3:D8
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:01:82:59:4b:6b:9a:7e:8f:f6:22:7e:e6:3e:0b:b2:ae:99:
41:18:1c:e5:9f:09:7f:15:7c:d7:21:ac:19:cc:8c:17:92:55:
5a:2d:b8:1b:2c:f6:d8:38:27:c2:d6:e1:3d:25:ab:42:24:ab:
29:1c:1f:c8:0c:2e:5c:ab:47:94:6c:d0:e2:4b:c8:fc:66:77:
fd:88:d4:2a:75:4a:de:66:dc:0b:a1:43:df:d8:40:af:77:89:
b5:1b:6b:1d:b9:b5:a8:c6:cf:27:69:24:77:3e:d5:d9:27:d9:
c2:be:b0:fc:17:24:eb:e1:f9:00:b6:ce:42:a4:5c:4c:0d:0a:
23:df:60:a5:1e:1e:55:7a:37:15:f3:4c:00:15:e8:b8:93:22:
b6:08:f0:97:0a:c2:dc:8b:aa:ea:2a:27:39:55:6d:7c:cf:44:
c9:f3:e2:aa:4f:2d:ad:e6:0b:89:e8:e0:82:a9:77:b1:68:7b:
f2:6f:8c:77:ae:5a:c8:ac:d3:43:a9:27:01:a5:2a:e3:da:54:
68:91:f5:b4:99:45:dc:ff:62:6e:3a:dd:d7:3a:79:8e:f4:30:
00:8e:bc:1c:2b:68:7f:b2:5f:d1:75:69:d5:4f:24:fc:d8:a1:
95:77:8b:0b:14:6d:02:95:ac:c7:8d:af:eb:94:8c:76:74:c2:
58:48:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:38 2026 by rpki-client