Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier: PoQiTbBmS22d8EDzGUEFsySKThr4Lse9dzdiLLbJkBU=
Subject key identifier: F7:55:04:AE:D2:44:2F:77:F8:B5:1A:A9:DA:11:E2:1B:E3:46:4D:CA
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 019E69F407342852632020B69A3DBB43253E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number: 04D6
Signing time: Wed 27 May 2026 15:01:00 +0000
Manifest this update: Wed 27 May 2026 15:01:00 +0000
Manifest next update: Thu 28 May 2026 15:01:00 +0000
Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: GBrUuX72f0sXWCpSeisd8POMdUTqBsbaW6chBZHBOWw=)
2: Fb3aBBcJ_RU5gPWUY71udWZuQ_o.roa (hash: VnpK440llW/db9ofXXkT+hMi7FL519qaQ5nOCrY4q+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 14:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:f4:07:34:28:52:63:20:20:b6:9a:3d:bb:43:25:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: May 27 15:01:00 2026 GMT
Not After : May 28 15:01:00 2026 GMT
Subject: CN=f75504aed2442f77f8b51aa9da11e21be3464dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:c2:fc:bc:a4:c4:5d:0a:bd:3c:0d:b8:b8:
9d:c5:f8:d4:d0:af:cb:05:94:44:92:95:a9:2f:69:
86:a7:17:d4:04:60:07:84:df:14:ad:43:ec:25:37:
4e:f7:3c:d6:6b:66:1a:f3:1d:f0:32:30:05:31:22:
80:60:89:5d:6e:61:8a:9b:9e:80:9e:e2:8f:91:9c:
72:26:62:64:cb:83:b3:e2:b9:df:c3:b8:0c:7b:bb:
d2:7e:c5:74:5b:7e:52:38:df:49:d6:2c:91:2e:60:
73:54:4f:e1:e6:05:11:0a:a3:e2:1e:b5:df:9a:06:
24:0d:42:8c:de:0a:20:66:52:06:88:e8:7a:42:11:
e8:9d:8d:9a:e1:d5:1a:9c:c3:c7:92:45:0a:b4:a0:
17:b4:0f:e2:33:5c:09:5f:be:95:63:03:28:d3:55:
93:0b:76:15:0d:24:78:89:15:bc:08:af:38:3b:99:
a1:53:86:4a:39:9f:4d:48:5d:46:bc:5d:ed:53:ee:
d0:f3:f8:bb:8c:b4:d2:c5:eb:ad:7a:c0:f7:73:8f:
c2:6e:d2:63:12:a8:47:ea:fe:3e:6a:ed:6d:69:78:
b8:e9:67:e7:a0:40:fa:a0:b3:31:e5:ee:90:4c:03:
c8:cc:8a:84:36:e1:94:df:d9:ba:b5:13:98:55:90:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:55:04:AE:D2:44:2F:77:F8:B5:1A:A9:DA:11:E2:1B:E3:46:4D:CA
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ec:13:2d:6b:a3:7c:38:3e:43:68:a2:b7:ed:75:42:b6:5e:
58:3c:f5:97:52:65:3a:3c:9d:19:c7:6d:de:ca:32:17:a9:c8:
b6:2e:e7:cd:65:4f:a2:99:7c:17:8f:1c:56:eb:c1:60:8a:31:
3b:e4:fc:9a:b9:39:28:cb:77:82:71:2a:fa:72:3e:6d:3a:74:
87:ff:80:97:42:51:9b:4c:01:c6:0a:db:e8:86:d5:37:fb:19:
c2:14:01:85:5f:39:7d:07:f8:48:27:f6:65:d1:03:26:20:16:
e1:ee:f6:a8:42:96:c2:1e:50:f7:7e:49:d6:16:d4:1f:56:ad:
01:e0:73:c9:c9:53:e5:e8:27:cc:32:a3:bb:8f:75:7c:81:ef:
c0:71:5e:4b:9a:cf:20:6f:19:32:6c:09:4b:2a:a6:6e:78:ed:
7d:61:46:e4:6c:93:e3:ee:ae:8c:e9:a0:f1:ff:46:99:6e:bb:
55:cd:60:75:21:7d:80:aa:ee:ce:de:d4:d9:6b:25:33:90:9b:
1a:4b:a5:58:4e:de:96:dd:a2:23:87:e8:ec:d6:1e:2c:24:57:
a8:d7:42:d6:5a:5f:6c:5e:ad:f2:1e:3d:ac:1f:87:e5:d3:0f:
78:3e:ac:f1:46:e0:c3:b7:51:24:21:26:6e:e8:fe:12:5c:0e:
0b:f9:d5:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5p9Ac0KFJjICC2mj27QyU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDZlNWQ0NjI5MWY2YmM1M2I5NjU4NjUwNTFiYTM5OTc0
OWViMmQwHhcNMjYwNTI3MTUwMTAwWhcNMjYwNTI4MTUwMTAwWjAzMTEwLwYDVQQD
EyhmNzU1MDRhZWQyNDQyZjc3ZjhiNTFhYTlkYTExZTIxYmUzNDY0ZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgfC/LykxF0KvTwNuLidxfjU0K/L
BZREkpWpL2mGpxfUBGAHhN8UrUPsJTdO9zzWa2Ya8x3wMjAFMSKAYIldbmGKm56A
nuKPkZxyJmJky4Oz4rnfw7gMe7vSfsV0W35SON9J1iyRLmBzVE/h5gURCqPiHrXf
mgYkDUKM3gogZlIGiOh6QhHonY2a4dUanMPHkkUKtKAXtA/iM1wJX76VYwMo01WT
C3YVDSR4iRW8CK84O5mhU4ZKOZ9NSF1GvF3tU+7Q8/i7jLTSxeutesD3c4/CbtJj
EqhH6v4+au1taXi46WfnoED6oLMx5e6QTAPIzIqENuGU39m6tROYVZCxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdVBK7SRC93+LUaqdoR4hvjRk3KMB8GA1UdIwQY
MBaAFNNG5dRikfa8U7llhlBRujmXSestMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUt
M2U5NDNmOTdmZjMxLzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUtM2U5NDNmOTdmZjMx
LzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOwTLWuj
fDg+Q2iit+11QrZeWDz1l1JlOjydGcdt3soyF6nIti7nzWVPopl8F48cVuvBYIox
O+T8mrk5KMt3gnEq+nI+bTp0h/+Al0JRm0wBxgrb6IbVN/sZwhQBhV85fQf4SCf2
ZdEDJiAW4e72qEKWwh5Q935J1hbUH1atAeBzyclT5egnzDKju491fIHvwHFeS5rP
IG8ZMmwJSyqmbnjtfWFG5GyT4+6ujOmg8f9GmW67Vc1gdSF9gKruzt7U2WslM5Cb
GkulWE7elt2iI4fo7NYeLCRXqNdC1lpfbF6t8h49rB+H5dMPeD6s8Ubgw7dRJCEm
buj+ElwOC/nVQw==
-----END CERTIFICATE-----
Generated at Wed May 27 18:36:51 2026 by rpki-client