Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: IKdOvtXmhLdnsgO+0/Ju0UtBvk3JX1xHSZWryIIrMlY=
Subject key identifier: 9B:5B:15:06:97:58:FD:6D:2D:C7:C3:03:98:90:16:7A:FA:AF:BE:BF
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 019F36E042EA751768754E377EDDFFCA1AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 052A
Signing time: Mon 06 Jul 2026 10:01:34 +0000
Manifest this update: Mon 06 Jul 2026 10:01:34 +0000
Manifest next update: Tue 07 Jul 2026 10:01:34 +0000
Files and hashes: 1: GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa (hash: +SThIA5U78DHRFgrExpVjECZowaekUZ+Kqjt9wzZQWI=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: aA5Hl5MpEKsPTR3sssIU+lXY0/mqw6RuSapgJxFwAAU=)
3: tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa (hash: 8XEuad3zZxDli1a1G3vIehCptWc+Hmtp2zxnb2jVTdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:e0:42:ea:75:17:68:75:4e:37:7e:dd:ff:ca:1a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Jul 6 10:01:34 2026 GMT
Not After : Jul 7 10:01:34 2026 GMT
Subject: CN=9b5b15069758fd6d2dc7c3039890167afaafbebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:26:81:76:41:ef:d6:b6:32:f5:d5:9a:bc:
eb:11:18:55:63:73:51:40:cf:c1:73:d5:9a:cb:09:
ae:55:c1:83:40:d0:d7:37:4c:8f:82:c5:15:1a:76:
53:15:f2:8f:f4:25:df:ba:9d:65:1b:94:af:4c:51:
e3:30:a6:0a:2e:69:8f:6a:d1:8f:1a:a1:c1:c8:bf:
3b:51:25:f1:6d:b6:a0:b7:01:b0:7a:ff:1d:74:bf:
01:01:d4:9e:67:38:b6:b5:94:47:72:74:b4:85:bb:
3e:d7:ea:3c:52:8c:f6:ba:4e:b7:12:ac:30:27:cf:
74:71:63:fe:37:a4:c3:94:90:03:c3:f5:80:b3:a1:
fb:a4:2c:f6:44:14:6f:da:30:53:59:6c:0e:f9:35:
ad:82:76:94:c9:86:cc:e9:be:c3:4f:3e:ea:d0:5c:
07:50:d2:c9:82:7a:5e:4f:18:2e:d2:0d:11:47:2f:
ef:49:78:62:07:6e:6e:40:a7:e9:26:d6:4c:86:45:
a2:b4:23:63:d4:53:64:e7:b8:84:8e:b4:3b:09:15:
b2:a6:d9:14:4b:81:90:0b:50:99:e4:22:78:d9:31:
a9:09:22:c1:42:c9:c2:d8:a8:b5:ec:48:9a:62:d2:
7a:43:5f:9e:26:c1:43:56:60:b8:7e:7c:30:95:70:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:15:06:97:58:FD:6D:2D:C7:C3:03:98:90:16:7A:FA:AF:BE:BF
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5e:d7:4e:a2:b0:7a:bc:a0:55:06:0a:95:19:50:f6:72:77:
21:f5:b2:a3:fd:0a:e5:af:50:d9:d1:2c:59:72:38:69:7e:3d:
55:9d:72:a4:67:25:c9:dd:bc:5d:9a:be:4a:fa:ed:3b:9b:07:
85:ce:d5:1a:37:5c:60:1d:22:19:ef:7c:64:c5:b1:7e:e5:bf:
92:63:da:6b:b3:3f:42:fa:0c:bd:af:d4:37:f1:35:77:ba:2d:
89:f2:7f:9d:1e:98:4e:ce:4f:f4:0d:fc:d1:ae:77:2a:e0:34:
61:9b:3a:75:a2:ed:9f:3f:16:19:6f:8a:43:af:4c:43:f2:45:
f3:df:ff:e8:db:3a:0c:b9:34:d7:3d:c7:76:53:15:05:bd:8c:
4c:77:42:14:46:9b:47:a2:33:d0:91:fc:24:10:47:74:db:2c:
68:af:9a:07:94:7b:4b:80:26:10:a1:11:34:cc:d4:0a:1b:eb:
f7:e9:dc:85:90:f3:9b:a4:01:44:ce:8d:aa:a7:e3:22:04:4c:
ca:61:7c:75:65:b5:66:f8:e5:85:04:3d:81:b7:54:60:9e:52:
53:4b:0f:13:bc:dc:af:a0:d3:8f:16:e3:c3:52:40:4f:45:ba:
91:78:7c:73:ee:97:f7:34:7a:a5:99:e8:68:a3:be:cd:f6:14:
51:b8:53:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ824ELqdRdodU43ft3/yhr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy
N2Y2NzUwHhcNMjYwNzA2MTAwMTM0WhcNMjYwNzA3MTAwMTM0WjAzMTEwLwYDVQQD
Eyg5YjViMTUwNjk3NThmZDZkMmRjN2MzMDM5ODkwMTY3YWZhYWZiZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL0mgXZB79a2MvXVmrzrERhVY3NR
QM/Bc9WaywmuVcGDQNDXN0yPgsUVGnZTFfKP9CXfup1lG5SvTFHjMKYKLmmPatGP
GqHByL87USXxbbagtwGwev8ddL8BAdSeZzi2tZRHcnS0hbs+1+o8Uoz2uk63Eqww
J890cWP+N6TDlJADw/WAs6H7pCz2RBRv2jBTWWwO+TWtgnaUyYbM6b7DTz7q0FwH
UNLJgnpeTxgu0g0RRy/vSXhiB25uQKfpJtZMhkWitCNj1FNk57iEjrQ7CRWyptkU
S4GQC1CZ5CJ42TGpCSLBQsnC2Ki17EiaYtJ6Q1+eJsFDVmC4fnwwlXDCNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtbFQaXWP1tLcfDA5iQFnr6r76/MB8GA1UdIwQY
MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt
OTRhYzhhZjFiZmNmLzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm
LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYl7XTqKw
erygVQYKlRlQ9nJ3IfWyo/0K5a9Q2dEsWXI4aX49VZ1ypGclyd28XZq+SvrtO5sH
hc7VGjdcYB0iGe98ZMWxfuW/kmPaa7M/QvoMva/UN/E1d7otifJ/nR6YTs5P9A38
0a53KuA0YZs6daLtnz8WGW+KQ69MQ/JF89//6Ns6DLk01z3HdlMVBb2MTHdCFEab
R6Iz0JH8JBBHdNssaK+aB5R7S4AmEKERNMzUChvr9+nchZDzm6QBRM6NqqfjIgRM
ymF8dWW1ZvjlhQQ9gbdUYJ5SU0sPE7zcr6DTjxbjw1JAT0W6kXh8c+6X9zR6pZno
aKO+zfYUUbhT4w==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:15:52 2026 by rpki-client