Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: 9ziXlosJyaPWNp+SqwkS23ale8EnVk4tMOZnIKJ/RKo=
Subject key identifier: 97:2E:FE:D9:03:BC:17:3F:3C:8A:88:C1:57:2D:E9:D9:98:F6:0C:A9
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 019EB95806631713575FAA024B1182FA6B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 18EA
Signing time: Fri 12 Jun 2026 01:00:14 +0000
Manifest this update: Fri 12 Jun 2026 01:00:14 +0000
Manifest next update: Sat 13 Jun 2026 01:00:14 +0000
Files and hashes: 1: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (hash: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM=)
2: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: YvNoNCtGiKn6lT/D5zBiP/KPX8e4FfGZ/m4RLQ7pDO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:06:63:17:13:57:5f:aa:02:4b:11:82:fa:6b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Jun 12 01:00:14 2026 GMT
Not After : Jun 13 01:00:14 2026 GMT
Subject: CN=972efed903bc173f3c8a88c1572de9d998f60ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:3e:35:20:87:33:25:9e:64:5f:f4:c0:7b:
ca:31:3a:f4:ac:61:ca:b6:eb:ea:fe:63:12:5d:8b:
3d:d6:46:d5:aa:c0:9d:9e:d6:1b:38:03:fa:e4:64:
c8:99:75:9d:29:a9:21:60:48:95:a9:32:f9:69:1a:
52:1d:fc:31:26:b1:8b:e6:05:bb:31:fe:6d:21:27:
3a:58:07:dd:39:64:4b:6f:a8:b3:bc:fe:44:46:39:
56:c6:6a:a3:19:31:b5:07:d9:63:ae:73:62:73:19:
dc:d6:b1:db:aa:1b:4e:6d:97:7a:82:96:12:0f:e2:
be:dc:3c:b0:04:71:8a:23:75:29:d2:71:22:84:23:
f1:6e:3a:7d:8c:51:5d:b2:86:ce:3a:4e:01:56:ca:
b9:e6:e5:ae:89:57:67:da:ba:87:2e:ff:c3:a7:36:
b5:ed:4e:4f:3f:4f:2c:5d:81:45:e9:c2:63:ea:0f:
5d:62:fd:2f:30:37:44:6f:21:80:20:80:2d:ca:61:
29:72:c5:d7:12:96:7a:c1:87:7d:9c:d2:80:5f:3e:
fc:de:9e:3a:c6:22:f7:05:2c:d6:2f:2b:53:a2:79:
ee:a4:29:8a:c8:d2:c4:7f:16:7e:e0:a6:8a:51:c0:
4c:9a:c5:c4:6a:42:a4:75:35:80:69:4c:56:58:65:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:FE:D9:03:BC:17:3F:3C:8A:88:C1:57:2D:E9:D9:98:F6:0C:A9
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b0:a4:c9:9e:8c:94:6a:e2:fa:d5:85:5c:70:1e:0b:52:a9:
0c:2d:e8:ef:c9:0e:76:16:c2:39:cc:ae:bb:42:9e:47:19:cc:
35:91:86:d9:7b:6b:90:f0:6a:49:d6:35:4a:b0:c8:f5:ce:89:
9f:5e:c8:1f:11:b5:40:7a:54:bf:f2:80:10:d3:a8:34:b7:e6:
a5:2c:eb:d7:92:46:3a:88:87:74:30:34:08:01:3c:c1:da:22:
6c:93:5e:92:7e:e1:b3:fa:2d:78:f1:37:b6:7b:f1:4c:25:1b:
39:76:39:d8:c2:3c:1d:ce:22:9e:61:73:97:02:48:b3:1d:f0:
36:79:df:83:90:17:42:4b:b0:29:a2:c3:0c:50:7d:53:4c:22:
64:dd:46:99:cd:3a:1f:11:c9:3d:a2:07:d6:b4:8f:2b:fb:ba:
1a:94:c3:b5:4a:75:81:0c:25:bc:5a:85:c1:4d:1a:a9:26:61:
79:55:a6:77:ce:8a:b8:09:f0:02:c0:f1:d4:80:ed:2a:52:7e:
06:31:36:ec:0c:06:d4:c9:ad:79:a8:25:b2:96:57:e7:93:2f:
5b:33:72:4d:e9:c8:ff:da:53:88:1b:76:0d:51:89:37:5b:bb:
9f:a3:d2:56:a7:03:df:69:e1:5b:18:11:45:cf:1a:02:44:0a:
75:27:40:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:50:11 2026 by rpki-client