Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: RJjHdG1n+MIa8bux2c5/JOMKhAyaXVehQJ9xi9n8JSo=
Subject key identifier: D1:75:30:A7:58:04:B3:A7:D8:DF:49:99:F8:D4:28:C2:13:69:33:A7
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019D382DE0C16CEDCD1D0372FC820475ABBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 083A
Signing time: Sun 29 Mar 2026 06:00:23 +0000
Manifest this update: Sun 29 Mar 2026 06:00:23 +0000
Manifest next update: Mon 30 Mar 2026 06:00:23 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: oFTkI4OKFa3Cspxa8zN+/Ggx/WDGB0fD4goE3an5qTc=)
2: UO3efIc_XfI8seJml1F-LycT9UQ.roa (hash: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e0:c1:6c:ed:cd:1d:03:72:fc:82:04:75:ab:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Mar 29 06:00:23 2026 GMT
Not After : Mar 30 06:00:23 2026 GMT
Subject: CN=d17530a75804b3a7d8df4999f8d428c2136933a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dd:0f:68:b2:cb:f5:90:12:f3:31:7c:7f:b1:
87:43:72:fb:90:86:24:fc:ec:71:9d:2e:7e:1d:ef:
0f:8e:be:d1:cc:06:cb:d0:d3:28:ac:a7:01:6d:a0:
bf:dc:4d:46:22:3d:20:94:04:63:25:57:f4:e8:43:
85:7a:c7:fe:4d:1c:e1:71:d4:cf:22:55:d6:79:86:
c9:7f:60:d8:36:89:80:46:40:5c:16:b8:e2:c7:90:
19:24:3a:45:3f:35:e4:b4:81:76:9f:13:51:91:6a:
df:0c:a5:96:92:8e:f0:4c:69:02:0e:8a:0a:6e:bf:
a9:bf:49:15:d3:50:c2:bc:bb:96:2d:61:05:82:fb:
e2:01:4b:91:b7:cb:86:1a:c5:d6:f9:c4:0d:c2:27:
4b:11:8c:a8:fe:31:7f:dc:28:ed:0a:a1:8e:96:92:
cb:e2:ce:65:5c:69:ff:ac:50:9d:70:75:2c:ae:c0:
22:23:3a:7c:fa:15:da:d6:73:f0:3b:d3:7a:be:ae:
36:45:39:51:06:52:cd:f1:11:d5:a5:48:12:60:fa:
7d:52:e9:2f:5c:f4:42:af:30:5f:4a:a6:d7:33:af:
bc:cf:64:b3:b4:cf:36:85:83:09:21:81:50:57:d2:
fa:a9:d2:7a:ad:95:07:b3:62:32:a8:c9:25:38:00:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:75:30:A7:58:04:B3:A7:D8:DF:49:99:F8:D4:28:C2:13:69:33:A7
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:84:b9:9a:a1:51:6f:57:de:11:22:c1:89:15:56:61:9e:19:
ba:6f:56:de:ff:57:c2:43:ae:9d:49:a4:88:f4:a3:5a:0b:38:
76:26:ce:dc:7f:4c:b1:df:12:ba:1a:67:8c:32:37:1f:8f:6e:
cb:f4:8d:4f:ad:33:6e:80:5e:83:59:36:de:cd:e9:c6:33:64:
67:aa:a4:6c:19:cd:ea:56:40:a1:e8:fa:a0:12:09:25:e4:ba:
74:1c:31:30:bd:c0:95:52:30:ac:fc:30:32:4f:b3:0e:d3:6d:
ff:2c:65:73:27:94:f2:23:25:fe:b2:52:c0:70:60:11:d8:93:
85:6b:bb:4e:47:d7:3d:e4:7d:63:a3:16:b7:eb:2f:07:7b:e8:
4e:9f:61:1d:9a:4c:4c:f5:10:7c:e6:ed:66:87:75:22:6d:e7:
24:a6:16:db:c2:4a:81:46:80:b1:56:ce:8f:9a:cc:d9:0d:7f:
ab:33:3d:4d:e2:05:64:63:54:e1:04:08:77:9c:4a:6b:e7:b6:
02:e8:b1:ef:45:37:79:5d:db:dd:87:c1:83:44:14:63:32:27:
66:39:7a:be:0d:c5:d3:a7:32:66:cc:5a:78:ca:79:e7:ce:d9:
2c:4e:2a:26:3c:41:af:44:69:d5:4a:40:2c:a6:cd:29:d5:78:
d3:0a:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:09 2026 by rpki-client