Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.mft
File: BlgzlfRBfvQ9yV0vZl8n2KTfO_0.mft (raw, json)
Hash identifier: susOcrFDILKsEgkoYWAFfHp5j1KqgAjMbVNh3Cpg+dQ=
Subject key identifier: 60:BE:F4:A7:9E:9D:0B:D7:01:9E:B6:55:F5:7C:0E:98:38:6B:59:D3
Authority key identifier: 06:58:33:95:F4:41:7E:F4:3D:C9:5D:2F:66:5F:27:D8:A4:DF:3B:FD
Certificate issuer: /CN=06583395f4417ef43dc95d2f665f27d8a4df3bfd
Certificate serial: 01A178F151797BAF8569FFED0F1A85D56B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.mft
Manifest number: 60
Signing time: Mon 26 Oct 2026 16:00:43 +0000
Manifest this update: Mon 26 Oct 2026 16:00:43 +0000
Manifest next update: Tue 27 Oct 2026 16:00:43 +0000
Files and hashes: 1: BlgzlfRBfvQ9yV0vZl8n2KTfO_0.crl (hash: L/amvfQjh3ImxH3nbCoG7Qt2iZsfoMSBpZlgCAjPH8Y=)
2: bU3beGgV0nZVp7p7z8MN2g04ln0.roa (hash: va4HbvsqhxTEI6Ls+Tgw6tvu2Xrv9KvXExgn7EJCncY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:51:79:7b:af:85:69:ff:ed:0f:1a:85:d5:6b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06583395f4417ef43dc95d2f665f27d8a4df3bfd
Validity
Not Before: Oct 26 16:00:43 2026 GMT
Not After : Oct 27 16:00:43 2026 GMT
Subject: CN=60bef4a79e9d0bd7019eb655f57c0e98386b59d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:5c:1b:eb:fc:3e:4e:ef:a8:aa:4f:9d:fa:
f8:93:48:2b:a7:69:98:c5:6d:cd:86:48:66:a7:52:
4e:01:6f:fd:32:54:cd:b1:8f:93:b7:c9:d6:43:c7:
d2:3b:f5:71:d7:2c:cc:63:82:28:d3:c4:e4:dc:00:
f4:0c:7d:86:ef:70:3a:bd:c5:48:91:80:4c:58:18:
38:de:7e:7a:aa:7c:7b:9b:e3:21:b9:d6:01:b5:54:
3f:a7:9b:2e:5b:34:42:bb:18:b6:f8:04:71:ce:a2:
9a:df:82:59:f9:30:7d:61:49:d1:a0:9c:b9:12:7d:
19:f9:95:86:69:56:c2:99:ab:5a:cb:d6:6a:e0:be:
c5:c0:5d:a5:a9:77:9f:bf:82:69:2f:6b:90:44:fb:
44:a9:19:2b:89:5d:bf:92:ef:89:42:f7:a0:46:61:
4f:94:fb:90:ff:27:a1:f2:84:76:c3:d0:f4:e3:a6:
2f:f9:45:27:32:7b:ce:5b:50:07:66:e7:db:98:98:
86:76:49:7d:d2:9f:4f:fc:ec:bf:a8:bf:71:fb:2a:
36:a7:88:98:99:52:be:b8:66:83:91:10:05:e1:c1:
b1:a0:d1:d8:68:34:7f:6b:8e:7d:58:5f:47:58:ea:
03:43:99:9c:ac:35:87:91:1f:40:2b:d5:7d:a1:a9:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:F4:A7:9E:9D:0B:D7:01:9E:B6:55:F5:7C:0E:98:38:6B:59:D3
X509v3 Authority Key Identifier:
keyid:06:58:33:95:F4:41:7E:F4:3D:C9:5D:2F:66:5F:27:D8:A4:DF:3B:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/48b26e-b095-4837-8b0d-7b2345eeaeeb/1/BlgzlfRBfvQ9yV0vZl8n2KTfO_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:06:21:96:4d:b2:d4:4e:ee:48:25:98:17:74:71:28:75:be:
96:3a:b9:9a:6b:bd:14:b7:72:38:75:52:5b:4f:b4:a5:5c:0b:
7c:54:8f:a2:a9:c2:eb:18:0c:1b:8e:19:a7:f3:ff:de:b7:e9:
08:91:c5:2b:27:7e:7f:8b:c3:66:57:27:46:37:95:8b:01:c3:
e6:e1:34:f8:15:93:c0:ba:4a:22:3c:4a:6d:2e:26:af:d8:bd:
83:8f:ea:63:44:d6:6a:59:49:8a:9d:e0:6a:b2:6c:88:b0:2f:
3e:2a:07:3b:e4:93:ae:fd:9f:76:d3:a5:79:3c:cc:2b:4d:e6:
bb:b0:75:63:fb:f0:e9:c2:23:39:a3:50:3c:5a:be:21:c0:ed:
e1:22:60:09:24:ff:45:38:1a:cf:a5:3a:c3:d0:cb:ac:27:04:
13:80:57:a4:7e:14:53:11:58:b5:e2:51:c8:28:0a:25:57:12:
95:81:14:bd:ac:6e:9d:d6:f0:b8:ab:18:2f:7b:6f:66:2a:e7:
52:97:39:71:7b:10:f5:12:e9:18:29:b2:63:3a:da:cf:94:e2:
10:5e:96:3b:20:94:c5:52:d9:0e:ab:e2:2e:8c:ab:b6:86:06:
1a:a7:59:b5:e6:e4:57:cf:29:e2:dc:13:50:85:2f:34:13:f1:
45:37:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:25 2026 by rpki-client