Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: 2cVqAwRkEmx1YNJXp2F8c8JGCZ7NE8+xkZN3xrMcTBs=
Subject key identifier: 8A:8E:1D:AD:55:32:6B:66:5E:16:2F:61:C4:EA:35:7D:A1:5C:A0:02
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 019D3909D3174317C6A63EEAD3360D585AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 0422
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa (hash: +SThIA5U78DHRFgrExpVjECZowaekUZ+Kqjt9wzZQWI=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: 4GOXVvgc+dp9LitXoYynK/7TQBCau+UKMyqkeqrKdUY=)
3: tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa (hash: 8XEuad3zZxDli1a1G3vIehCptWc+Hmtp2zxnb2jVTdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d3:17:43:17:c6:a6:3e:ea:d3:36:0d:58:5a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=8a8e1dad55326b665e162f61c4ea357da15ca002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:45:b8:e8:66:39:1c:d7:f9:b9:24:21:a5:ce:
3f:93:04:ea:75:4f:16:9f:c5:90:a2:dd:21:67:54:
b6:2f:9c:42:a2:53:b7:5b:86:54:90:18:9f:6c:1e:
8f:32:80:cf:f4:01:a7:e3:ec:90:f5:42:d6:16:68:
4d:a0:f4:e5:62:a7:c6:e4:ee:55:c4:2c:2e:2f:cf:
34:05:c9:d5:cf:14:3f:c9:1b:e8:23:a9:89:61:75:
63:9a:51:65:20:89:2c:61:a4:42:ef:ec:08:32:7b:
21:d1:26:83:56:d8:68:47:98:be:dd:ad:cf:ab:b9:
49:03:04:c9:da:63:91:02:d7:49:38:e9:6b:43:66:
01:6a:36:f0:62:58:8b:05:80:40:b4:02:0a:09:11:
7f:1f:07:6a:c1:cc:48:3c:c9:27:fd:54:cc:7d:d7:
4b:62:a2:a5:df:ae:89:26:20:7b:0f:10:1b:e1:12:
66:72:cd:44:25:65:a8:86:7b:66:50:14:f2:4e:a3:
0c:a6:a1:e9:6c:cb:0c:a1:3b:4e:c3:7d:ed:5b:8e:
6d:bc:c2:67:fa:44:75:5e:7b:95:da:65:3f:ac:11:
88:ba:59:88:df:0f:29:78:97:9a:88:96:0b:c6:3a:
ef:78:4d:c9:c3:90:7c:e4:fb:18:c0:32:19:a9:fc:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8E:1D:AD:55:32:6B:66:5E:16:2F:61:C4:EA:35:7D:A1:5C:A0:02
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:24:3c:23:c1:66:c4:15:a6:77:10:ff:07:09:8e:8a:16:95:
db:56:87:ad:a1:d1:44:a6:b4:70:ab:83:6d:c5:d4:35:8b:45:
33:4c:b8:7c:ae:0c:d5:98:55:56:99:b2:fa:dd:f5:72:38:f9:
84:c1:20:b4:9a:54:39:9c:6d:bf:b0:04:9b:e1:fd:da:bf:ed:
11:9c:94:d2:53:2c:96:c3:cb:c8:38:4b:cb:91:51:fe:fa:a1:
e2:05:88:19:c3:5d:f0:99:41:9d:e6:a0:a4:b2:e5:16:2c:76:
ce:e1:ae:1f:d2:ef:4c:6e:f8:33:bb:07:c1:70:8b:6e:ac:9e:
26:3f:bb:13:44:cd:b4:92:61:ec:6c:2c:6f:a8:b3:43:14:ea:
72:7f:86:2b:91:85:01:f0:e4:ed:80:b3:7a:7c:6b:31:f1:75:
44:04:1d:86:d1:4a:04:5c:f2:7e:c8:7a:a5:df:46:fb:bc:e4:
51:8f:74:25:22:c1:75:af:91:ab:11:91:9c:9d:72:0b:6f:44:
71:af:e5:f2:87:13:ef:ec:b8:5f:d8:bf:09:01:98:b3:04:e8:
6f:fc:4c:54:3a:41:77:5e:38:88:ae:bc:34:73:b9:92:dd:b4:
2b:3f:5d:f9:e0:17:da:68:18:17:79:e0:16:c6:4c:d5:03:06:
17:3d:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:44 2026 by rpki-client