Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: JboiZ4viNZzpgxSsoEX0Xu9aQSoT8rbVSnsJ8b3gSBQ=
Subject key identifier: 19:FE:94:E2:4B:AF:35:41:BB:DC:DC:51:B2:ED:A6:12:3B:E3:89:55
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 019CE5FFA2D01D7DB0887650EAB24D99F777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 17F8
Signing time: Fri 13 Mar 2026 07:01:01 +0000
Manifest this update: Fri 13 Mar 2026 07:01:01 +0000
Manifest next update: Sat 14 Mar 2026 07:01:01 +0000
Files and hashes: 1: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (hash: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM=)
2: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: 7kjmz2+fsfXuDkuF6NHkU8nasNejej67PKXy6NzndgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:a2:d0:1d:7d:b0:88:76:50:ea:b2:4d:99:f7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Mar 13 07:01:01 2026 GMT
Not After : Mar 14 07:01:01 2026 GMT
Subject: CN=19fe94e24baf3541bbdcdc51b2eda6123be38955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:13:41:86:dc:e7:fc:b4:7a:e1:e0:ff:cf:
c3:21:79:e6:5b:6f:c2:d0:d5:aa:b1:48:8b:e9:ef:
c0:86:fa:16:c7:96:e6:fd:ba:9f:57:35:f0:38:4d:
43:54:8d:ae:1e:05:46:11:71:8f:74:cc:bd:c6:86:
5d:ee:65:53:c1:c6:2d:14:0b:20:24:e8:10:31:8a:
7d:b0:b7:2b:d1:1d:e4:25:80:e2:79:53:1e:a4:ba:
4f:06:1e:b9:de:56:62:78:41:06:cb:21:ed:9d:6a:
21:94:80:92:12:95:13:a8:22:53:4e:ae:51:d4:91:
51:d4:fa:93:a2:63:34:ee:56:7a:2d:39:c9:02:90:
15:fa:b8:e1:d7:5a:b7:d5:74:aa:83:dc:be:b4:38:
7c:ac:b0:90:63:5a:c9:cf:d0:9d:b8:b6:7b:77:f9:
98:eb:44:97:97:33:70:cd:64:fc:df:e9:a4:89:3d:
8a:49:47:cd:b5:6e:b9:17:e5:ff:0b:dd:4e:e8:b8:
c6:43:b1:64:e1:b5:da:4c:29:08:a4:b2:2b:b6:e6:
f0:ac:e4:0c:50:e0:80:78:e1:e1:50:62:6b:9b:0a:
a2:4a:6d:47:7e:b7:38:66:95:5e:11:be:dd:3d:f7:
16:ef:07:2d:68:44:f3:99:af:da:c0:cc:fc:53:1c:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:94:E2:4B:AF:35:41:BB:DC:DC:51:B2:ED:A6:12:3B:E3:89:55
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c5:5a:1e:dd:58:23:8b:7b:55:d6:cb:d1:10:0b:25:78:20:
43:a9:e9:1a:f2:c5:c0:73:af:ff:33:40:96:62:22:da:e0:b6:
39:ee:10:5c:e4:ca:b0:0f:f0:04:45:c8:db:6d:93:80:d4:d9:
7d:21:2d:bd:56:23:04:5d:c3:a0:26:a5:17:6f:a4:44:db:2b:
ac:b9:f0:bf:4c:ea:7d:14:d6:c2:2f:9a:78:e8:2f:33:9f:27:
49:91:fc:ec:82:85:16:35:a3:f5:38:d5:62:3c:4b:f5:06:e7:
c0:51:b7:23:3e:ed:53:24:38:9b:c7:09:0b:c8:93:84:fc:76:
40:36:94:31:8b:1b:f4:cb:65:53:ab:cc:cc:8f:4a:60:b2:5c:
0f:34:eb:a3:dd:10:57:90:d0:39:02:d8:90:d6:63:5b:13:30:
7a:0a:5a:be:be:7e:de:5e:70:df:10:ce:41:0f:d1:45:9b:0b:
f5:d1:15:0b:97:c7:95:60:1f:3a:1d:45:b8:a5:cd:c3:f6:45:
4d:bc:20:fd:b0:d4:f5:db:36:ef:8c:ad:47:e8:45:d2:54:a1:
7c:91:96:89:b9:a7:d8:fc:58:c9:60:29:3a:f1:a3:aa:83:61:
fc:32:00:3a:55:89:83:8e:ed:76:3f:bc:89:1d:5f:cd:a1:75:
ee:69:90:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:15:22 2026 by rpki-client