Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: dIJyvPQVrgK+/paZMtx0Q8b/lkuzmPUsGMh9tDDzjQY=
Subject key identifier: C1:6B:7F:0A:9E:00:50:08:7A:70:5D:F1:B4:8A:3B:C7:92:30:22:D1
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 019DCFABDABBD0DF485258E2608ECD1D4965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 1871
Signing time: Mon 27 Apr 2026 16:00:39 +0000
Manifest this update: Mon 27 Apr 2026 16:00:39 +0000
Manifest next update: Tue 28 Apr 2026 16:00:39 +0000
Files and hashes: 1: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (hash: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM=)
2: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: MYt+u1gnZhvuztwwD0RdpQxBHfNF/wvNloCHfHrcKFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ab:da:bb:d0:df:48:52:58:e2:60:8e:cd:1d:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Apr 27 16:00:39 2026 GMT
Not After : Apr 28 16:00:39 2026 GMT
Subject: CN=c16b7f0a9e0050087a705df1b48a3bc7923022d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:13:db:e7:fb:ea:c7:b9:2c:ff:b6:30:7a:
e2:33:a7:e1:c0:19:66:2d:9c:12:6e:34:6b:8d:23:
48:3c:09:74:8e:a0:10:3c:98:c3:15:2d:b7:0c:70:
bd:b9:ee:ac:ef:4a:d4:0f:7c:0d:55:73:4f:e9:94:
e3:14:f0:50:d5:99:6a:6b:c7:e5:1f:06:36:15:17:
6c:18:2c:d9:37:39:27:f3:3d:17:ba:46:83:b3:41:
e0:b6:86:8e:d8:f4:2b:e6:76:4f:d0:90:22:28:6d:
f8:97:6d:fa:4b:c4:08:27:6d:03:87:ab:4e:44:e9:
3c:82:9a:56:1c:28:95:2e:f3:99:d6:95:f2:99:3c:
b5:22:9a:8d:a5:db:fd:70:5a:56:d1:06:8e:3f:2d:
7b:2f:58:b5:65:25:86:83:37:33:08:50:34:2f:6e:
f5:c6:96:14:c6:5f:4b:83:60:a2:55:fe:a9:d3:16:
a3:ce:11:68:ac:ed:6f:a8:ad:60:0f:60:c7:1c:4a:
46:45:a7:af:e3:8b:04:2e:84:2a:51:14:c9:1b:80:
f3:0c:ee:64:45:aa:11:b1:12:d2:c6:f6:83:81:93:
c8:da:de:56:8a:25:95:49:e0:51:f0:25:7a:4e:ee:
90:55:ed:7e:9d:5a:b6:63:82:6c:af:38:94:b7:18:
8d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:7F:0A:9E:00:50:08:7A:70:5D:F1:B4:8A:3B:C7:92:30:22:D1
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e0:14:65:14:22:9a:df:ab:c4:14:c7:98:29:dd:c8:c6:a0:
7b:53:15:14:62:19:34:9a:e0:5e:53:a2:07:2d:90:82:6a:86:
d1:17:34:f4:ba:2f:61:0f:20:9a:16:f6:6a:52:dc:5a:0d:1d:
98:b0:4d:8b:b3:e6:58:db:6a:19:47:c5:8a:e5:2d:b4:c3:3a:
b6:61:64:ac:79:25:5a:a7:29:88:25:d0:e7:1c:8a:a5:0a:39:
2a:37:e3:fd:83:91:36:a4:d2:c3:d9:48:06:b4:83:41:46:b3:
37:35:49:ac:75:94:4f:b3:77:1f:22:09:ad:e9:23:5c:6e:a7:
c0:1a:34:03:c6:13:e4:20:9b:89:9a:7c:09:e2:b1:64:1e:57:
0c:71:aa:b0:fc:66:6f:4e:33:bc:0b:d1:44:fa:b0:3f:05:07:
9d:d2:06:a4:e2:20:aa:bd:ed:43:98:0b:81:36:d8:2b:69:6e:
2f:7c:33:18:91:9f:52:c2:3b:33:e1:ba:92:fa:19:fe:b1:f6:
57:c8:d0:56:bb:59:83:f2:1d:60:d5:74:8a:3f:fc:90:a4:9f:
f0:fb:80:27:ba:a1:ae:2f:fa:14:3e:ae:75:13:56:22:e2:d4:
14:eb:8c:63:1d:dc:e6:5a:11:bf:00:44:e5:a2:64:16:67:13:
ef:c8:e6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:06:15 2026 by rpki-client