Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: oe5yW3nKgkzfNNBrvmT2iR/UJPL1YZCbtT15stR6l68=
Subject key identifier: E1:C0:E0:39:1D:C6:9A:EC:B4:45:01:8C:DA:80:A6:C6:62:D4:07:C9
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 01A1784C7C0F40FFA778A7BF05B90BBC4440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 1A56
Signing time: Mon 26 Oct 2026 13:00:40 +0000
Manifest this update: Mon 26 Oct 2026 13:00:40 +0000
Manifest next update: Tue 27 Oct 2026 13:00:40 +0000
Files and hashes: 1: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (hash: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM=)
2: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: q0sdLYB7ssu/UFYoB9ErwtTS8SqeF9+AGOfdOYJaju0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:7c:0f:40:ff:a7:78:a7:bf:05:b9:0b:bc:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Oct 26 13:00:40 2026 GMT
Not After : Oct 27 13:00:40 2026 GMT
Subject: CN=e1c0e0391dc69aecb445018cda80a6c662d407c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:45:27:9f:93:04:55:81:74:27:0a:6e:42:
3b:29:b5:aa:a2:f0:31:6e:ca:d2:07:25:14:b2:f5:
c1:cc:51:ef:20:0f:ab:cb:57:96:a7:e7:56:db:b6:
4b:28:28:5f:a4:0b:38:5f:8f:c6:cc:21:7d:7f:50:
58:07:6d:2b:c8:e9:cf:76:06:ca:c8:3d:22:15:16:
d2:d9:f0:c4:b2:c4:63:f6:d8:d4:d9:39:5b:95:d9:
e4:c3:84:44:31:97:39:19:85:a3:46:df:f5:b6:91:
65:69:8a:6a:04:c9:77:a6:71:47:7b:70:b4:b6:27:
97:29:92:a8:74:5e:82:33:28:66:13:55:0e:8e:de:
6b:6f:8c:28:9e:2f:74:e5:b0:7c:2d:d9:1a:f8:af:
3f:6b:93:16:a7:ca:f9:32:4a:3b:f7:16:3c:c5:54:
5a:f8:d9:69:b3:e2:b6:c0:a2:30:2a:4d:b3:28:fd:
e0:ca:0c:a2:ae:1d:ec:a9:3c:42:5c:71:3b:72:2e:
6a:8f:ee:53:f5:37:a2:91:0e:a7:6b:09:e0:d9:46:
3f:f5:83:0b:d7:8b:35:70:e2:de:79:d9:19:96:14:
55:dc:2c:c6:58:62:f4:b8:26:ff:ba:26:97:b7:a5:
23:78:0a:86:0f:09:9e:6c:fa:09:2e:ba:3c:c6:e2:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C0:E0:39:1D:C6:9A:EC:B4:45:01:8C:DA:80:A6:C6:62:D4:07:C9
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:59:44:8f:48:08:21:01:a2:4d:ba:5b:68:ea:d3:2d:df:ad:
91:05:d6:a8:06:2a:60:95:9d:01:74:ab:86:9d:58:7c:45:13:
6b:e7:dd:cc:bf:d2:22:a5:4a:c4:bd:29:66:46:40:f7:56:c3:
4e:3f:f4:d6:e6:fa:3d:e0:ff:67:b9:a7:89:df:89:05:82:43:
70:9a:bc:b2:9a:17:cd:93:8d:88:9d:c1:f9:14:a4:33:4d:7a:
63:17:52:36:0e:fa:80:37:b1:b6:d2:73:e6:81:0b:9e:ac:b5:
89:08:7b:76:63:37:c3:51:52:ec:d3:5f:9f:1d:79:d5:87:72:
22:bb:6a:8b:a9:58:be:42:08:e4:e1:c7:5b:b3:15:ab:09:bc:
50:1f:12:32:d9:ff:3e:e6:bb:0b:5a:81:08:90:b7:fd:54:78:
45:79:57:8e:b6:64:88:da:40:f4:31:85:54:ef:11:c4:e4:66:
f0:c2:b9:11:51:25:5a:eb:5b:16:be:4a:97:9d:dd:3a:e0:e2:
95:43:25:0c:cf:ec:c2:b4:a4:09:34:1c:73:9c:1c:a7:19:ba:
fb:a0:53:5f:5d:cc:11:5f:d4:b8:fe:26:b6:45:c5:7c:1c:ff:
9a:d6:d0:02:45:20:d9:64:08:29:6a:ed:4f:26:d0:28:b4:cc:
be:45:9c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:42:26 2026 by rpki-client