Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: lralEbRshkoXCDmHKm8rjVMoD1Uakfk0Nxz7z+/bbg8=
Subject key identifier: 66:1C:1B:78:57:50:DF:F5:BD:BD:DD:12:F7:AD:83:37:69:CB:F2:3F
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 019DED80200D94167D79F2E47E24E6604083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 1156
Signing time: Sun 03 May 2026 11:01:30 +0000
Manifest this update: Sun 03 May 2026 11:01:30 +0000
Manifest next update: Mon 04 May 2026 11:01:30 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: AnCPqZLtSE4V3O1GI0z4C354mWzI5VNXlbyfkmvXo4c=)
2: dCctAo4cF_cQVF9v9iua88jVN3g.roa (hash: NqSK6SL1qTb0fxaxxTxRSRb53epcbkxkPGl7gPfChT0=)
3: klXO-sH0E69ctlYICKM2oEhYAk0.roa (hash: 8p7Dn973TTYNLcmIRozlh88axGubR0kxdQP115KfTHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:80:20:0d:94:16:7d:79:f2:e4:7e:24:e6:60:40:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: May 3 11:01:30 2026 GMT
Not After : May 4 11:01:30 2026 GMT
Subject: CN=661c1b785750dff5bdbddd12f7ad833769cbf23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:8e:70:bc:89:67:b8:fa:90:ed:b2:d0:82:
c4:a3:b9:73:55:45:a0:b7:75:da:a0:8d:f2:50:64:
26:36:42:2d:10:27:9f:95:94:5d:17:5a:f9:35:da:
6e:5b:8d:df:8e:46:2a:5e:ba:ad:63:7f:24:cc:29:
04:60:5c:43:50:01:de:9e:88:73:b8:58:77:ab:ba:
71:e3:c6:e2:c1:1e:51:ee:ce:b0:d5:ed:a5:33:ac:
7e:ed:5e:ab:ff:51:bc:40:f5:af:5a:07:20:89:6f:
48:15:a2:31:1a:82:48:84:5a:68:d6:53:5b:be:d4:
1e:b6:8f:87:f4:f3:4e:30:2f:01:68:01:44:bf:40:
be:34:f6:29:41:8e:df:68:79:10:ba:79:38:eb:5c:
f7:ab:f0:36:c5:96:20:4c:99:18:66:b8:87:c9:34:
a5:10:8a:ed:75:12:ea:a5:0e:10:ef:f2:2b:88:91:
bf:ae:cc:a5:c5:2d:ab:06:a6:c3:fc:54:58:75:b6:
13:2d:ac:4e:d8:73:86:95:fb:8a:07:3f:7a:8c:87:
22:eb:57:7d:50:86:25:10:03:61:8e:a7:99:e7:c4:
e1:e8:ff:a0:67:7a:03:23:67:3c:29:de:51:e0:26:
8a:36:3f:6e:42:31:9f:ba:66:1c:f8:9c:6a:ca:1c:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1C:1B:78:57:50:DF:F5:BD:BD:DD:12:F7:AD:83:37:69:CB:F2:3F
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d2:c8:66:d5:a3:95:1a:61:19:1e:e1:5d:48:38:b5:29:5e:
09:5f:ac:b3:0d:e2:f6:bf:de:f9:80:6b:21:d1:1e:aa:63:90:
e9:b2:64:7d:fd:74:f0:d3:5c:4a:3d:1c:e4:5e:a4:28:e9:05:
23:b8:84:12:1e:f6:ee:f5:0a:95:22:32:2f:9d:a2:63:f1:fd:
1e:c9:fc:e7:c6:82:4c:90:ad:6d:7c:02:f6:62:dd:27:b1:9f:
98:9a:8f:26:6c:e1:a3:0c:4d:7b:25:16:f9:f2:c0:e5:4c:0b:
71:2f:ab:d4:18:61:41:a2:85:51:3a:92:c8:06:b3:2e:9d:6d:
a9:c4:0a:c0:9e:3b:73:cd:b8:8a:7d:73:57:8c:df:80:e1:c1:
af:e5:1a:08:f1:5d:78:77:a8:50:c6:26:87:87:59:b6:4a:33:
05:de:d0:42:90:6e:48:24:cc:5f:49:03:ea:c1:b8:61:2a:ba:
fc:a1:cc:4c:29:4f:a8:2c:d1:86:dc:2d:a0:5d:8c:1c:4a:8c:
66:10:33:c3:bd:07:20:34:e5:25:03:04:4c:0a:02:bf:93:bb:
f3:86:df:2a:42:77:3f:b3:ae:ca:ae:76:13:8a:a6:2b:d9:f5:
53:7e:f1:fe:b5:7b:11:ae:42:65:54:0f:61:b5:1f:d2:a3:dc:
fe:19:e5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:19 2026 by rpki-client