Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: dEd4uYlf9mfJSIHNcfpzJuGgWmAsq6L0FBksdPD9tfo=
Subject key identifier: BD:D7:ED:5E:CA:71:4D:DA:03:9B:27:7E:C9:10:44:18:DD:CA:6E:3E
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019F13417F72401D2057FFE0CF6466F9FB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 0930
Signing time: Mon 29 Jun 2026 12:01:27 +0000
Manifest this update: Mon 29 Jun 2026 12:01:27 +0000
Manifest next update: Tue 30 Jun 2026 12:01:27 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: eenGTpwDx6JwfPT7p8ttKlrIpKyFMILA1EW5+0nJosk=)
2: UO3efIc_XfI8seJml1F-LycT9UQ.roa (hash: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:7f:72:40:1d:20:57:ff:e0:cf:64:66:f9:fb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Jun 29 12:01:27 2026 GMT
Not After : Jun 30 12:01:27 2026 GMT
Subject: CN=bdd7ed5eca714dda039b277ec9104418ddca6e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:47:d8:b5:ce:d7:de:f3:86:d8:3c:a3:44:
0c:4c:7c:7d:dd:79:f7:13:92:92:f9:77:a5:ef:df:
e7:fc:9e:65:3b:52:d1:7c:3b:42:62:ee:a6:4f:52:
0e:22:3b:34:01:8b:7c:41:5d:21:7f:a1:98:50:f8:
35:67:a0:98:ae:8a:1e:0f:81:0d:03:20:b9:df:85:
ce:89:57:0c:40:d5:7e:22:ab:2a:9d:c5:d4:31:e8:
a3:3a:79:a6:12:21:d3:49:1c:83:3d:14:60:e7:35:
45:1c:65:d5:c3:66:70:cb:55:33:f4:2f:6c:27:0d:
a4:3f:6e:86:32:1a:4f:50:29:0f:e0:37:b5:bd:73:
1b:33:a1:15:05:75:3e:c0:ef:72:ee:e9:ad:79:c8:
9c:3d:cf:4d:b5:fa:cb:85:54:cb:23:27:ef:3c:66:
2f:6c:36:1e:68:e6:b8:93:04:7a:b6:1e:61:67:52:
5a:8f:d1:71:27:e7:12:6a:c0:d9:6f:f1:11:cd:54:
9f:b4:3f:58:48:cc:57:70:5a:99:5b:fd:e4:54:0c:
99:11:41:28:87:62:b7:32:d4:3b:d5:8f:30:61:2c:
d2:8c:56:cf:fc:65:5c:15:44:e1:ca:13:8d:96:a0:
70:a3:a6:ca:8f:78:94:aa:5b:dd:78:6d:ed:38:48:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D7:ED:5E:CA:71:4D:DA:03:9B:27:7E:C9:10:44:18:DD:CA:6E:3E
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d4:7e:23:1a:ff:ec:7c:02:d7:dd:73:7f:3c:22:ab:dc:81:
e7:91:84:a4:9d:94:af:2b:0b:3a:11:e7:05:01:da:7f:44:10:
72:c5:58:de:6b:38:8d:8c:1d:0c:91:9d:07:ad:01:bf:98:e4:
af:be:4c:fe:e0:f5:c0:f1:0e:01:6a:6c:a6:74:d4:43:e1:c6:
42:0e:c0:77:86:86:7c:61:5f:e9:22:d1:55:1f:ab:0a:65:7b:
fc:36:62:77:81:90:c5:74:43:af:67:34:c4:c0:65:0b:77:d7:
d8:ef:e3:09:e8:05:d2:cb:91:53:90:12:b9:3c:e5:0b:89:58:
82:0e:42:e9:81:9a:bf:ce:2f:f6:38:7c:3b:29:ad:60:3f:13:
b6:b8:57:28:ba:40:52:bd:fa:7c:ec:4f:2c:78:a9:39:c9:8e:
08:0d:ea:46:dd:6f:2d:95:c9:cf:dc:a0:b0:c1:1e:56:bc:24:
d7:4f:87:5d:98:55:73:31:fc:b4:2a:7c:33:ac:7e:94:50:8b:
cc:9e:cd:77:79:e3:55:2f:ce:0b:12:1b:93:8c:fc:66:cf:4d:
96:18:02:5c:05:8d:47:7f:85:4c:8e:b2:b1:30:c6:b4:c1:5e:
dc:55:8c:27:fc:d4:c3:db:61:4c:1b:23:a1:91:de:aa:fc:4a:
31:75:42:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:53:47 2026 by rpki-client