Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: j3QLfh8k9bZ/wxuXAfBRhiyMfp/IC5c1P24UbgLJ4Eg=
Subject key identifier: F5:1E:77:00:44:76:E5:56:4F:5D:14:F3:CF:7F:B0:F4:30:94:5D:98
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 019E4F22173C09D7BB44E2AF8F704488E701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 04B2
Signing time: Fri 22 May 2026 10:01:34 +0000
Manifest this update: Fri 22 May 2026 10:01:34 +0000
Manifest next update: Sat 23 May 2026 10:01:34 +0000
Files and hashes: 1: GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa (hash: +SThIA5U78DHRFgrExpVjECZowaekUZ+Kqjt9wzZQWI=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: U1s5Dy6JzPF7VJ5mpV4rS68G9MRWT3zsHajxBd1GBdc=)
3: tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa (hash: 8XEuad3zZxDli1a1G3vIehCptWc+Hmtp2zxnb2jVTdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:22:17:3c:09:d7:bb:44:e2:af:8f:70:44:88:e7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: May 22 10:01:34 2026 GMT
Not After : May 23 10:01:34 2026 GMT
Subject: CN=f51e77004476e5564f5d14f3cf7fb0f430945d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:ec:e9:78:a0:80:83:ec:d0:30:25:29:58:
f1:16:da:63:0f:a2:75:d3:c2:d7:25:0e:d6:df:1b:
68:95:71:71:43:fc:07:17:e6:e4:5a:e8:12:96:db:
1e:28:cc:08:18:45:f0:8c:16:05:3d:a3:16:ad:c5:
f7:aa:d3:94:e9:78:55:78:6d:c3:56:39:ba:72:08:
24:0f:f0:26:9f:12:c0:17:9a:ff:bb:28:a2:ff:6a:
88:1b:a0:b3:1d:58:c9:d7:66:21:60:9a:ae:a3:77:
07:0f:fa:4b:66:38:73:27:92:41:65:d8:c6:ce:0a:
28:1b:23:75:b7:f2:7f:55:0c:b1:7e:fa:f4:36:4c:
4e:a6:06:f8:b7:ea:0c:00:ef:de:d8:b4:64:d4:18:
d5:9b:4b:c8:5e:64:f3:ed:5d:5e:6e:49:a1:97:75:
09:bc:c2:b5:29:98:6b:e7:cf:8d:b3:64:92:50:68:
71:15:71:3e:1c:2e:b5:3c:28:0f:a8:a2:49:10:0d:
f2:27:2c:56:a7:44:f2:b6:24:57:11:e6:ba:97:8f:
49:4b:14:1e:62:82:cb:56:10:bb:0a:40:64:09:8f:
fa:9a:c7:66:c4:40:2e:6d:8e:eb:c3:11:8e:a3:77:
c2:42:99:74:6a:01:23:52:df:d1:f3:3a:e3:85:b2:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:77:00:44:76:E5:56:4F:5D:14:F3:CF:7F:B0:F4:30:94:5D:98
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:72:3e:c6:24:a1:7f:a7:36:b2:41:80:37:78:bf:0f:af:08:
2a:2a:87:ae:cb:84:08:77:f5:50:7c:1a:60:b2:2d:c6:5f:76:
3f:3a:36:9e:3b:44:da:1d:75:4d:ef:0f:2e:09:89:8d:e0:07:
84:b0:2a:c2:48:b0:dd:f3:45:ab:91:5b:f3:76:d4:b5:4a:c8:
28:5a:9e:66:58:0c:53:ca:44:d1:d8:62:55:06:6b:ab:4e:c6:
9c:e3:7a:14:3c:8f:14:25:4f:2e:63:7f:0b:28:4c:f7:ae:61:
b4:a4:f7:73:69:6f:f3:b9:12:4a:be:47:c7:17:1e:db:6a:31:
c1:27:d0:30:07:bc:1d:29:20:dd:8d:9d:11:78:f2:1e:6a:33:
54:b4:cb:d4:12:37:a1:63:14:a9:45:32:86:c4:c8:ad:26:a2:
3e:c5:77:34:ef:2f:1b:a2:46:f6:bd:90:ed:8d:5c:52:3f:ca:
a9:a4:eb:19:a1:68:73:d9:46:b6:d7:94:c3:ac:22:40:a6:2d:
8e:31:06:ef:fc:f3:5b:a7:f2:92:9a:d0:01:04:fd:28:94:68:
2c:28:16:3f:fe:bb:ae:bb:1d:b0:13:c8:8e:4c:13:1f:49:6c:
ff:40:73:a2:7e:4f:b8:50:91:02:56:43:6f:45:fd:58:1f:66:
8b:70:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:08:13 2026 by rpki-client