Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: ytN4BYi2LSCVpzeSnaigM5VoqS2ba8pOC1xmWtk8yT8=
Subject key identifier: D2:09:AD:53:A9:A5:10:82:6F:56:9C:35:DE:BA:78:6A:AF:7E:6C:68
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019FFEDC0886AF062B07D3B7518F5787120F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 09AA
Signing time: Fri 14 Aug 2026 06:01:00 +0000
Manifest this update: Fri 14 Aug 2026 06:01:00 +0000
Manifest next update: Sat 15 Aug 2026 06:01:00 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: Np2EpZcXJ8G7BsT9+laGlzLlpnLtJA68MtJEcn7/lHE=)
2: UO3efIc_XfI8seJml1F-LycT9UQ.roa (hash: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:dc:08:86:af:06:2b:07:d3:b7:51:8f:57:87:12:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Aug 14 06:01:00 2026 GMT
Not After : Aug 15 06:01:00 2026 GMT
Subject: CN=d209ad53a9a510826f569c35deba786aaf7e6c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:0e:d1:bc:dd:74:9c:b8:d5:68:41:6c:3c:
0e:45:30:a8:73:71:54:f2:c7:c3:a5:00:6e:38:64:
ae:73:2e:6a:ea:88:6b:7a:84:d1:fa:87:a0:fd:80:
0b:00:24:0c:8b:f3:18:ff:de:d5:c7:f8:95:ff:b9:
cf:85:0b:1e:31:31:94:1a:8a:73:e6:55:95:b2:c6:
64:1a:42:bb:aa:24:1d:3a:d4:2d:9b:ee:01:bc:54:
9c:ad:36:94:da:bd:bb:dd:76:89:ce:a8:8e:69:ef:
9a:4e:9e:02:03:a8:8a:12:d9:8d:64:88:8c:33:4e:
b0:a6:6c:58:6d:b6:7e:21:41:82:ff:fb:c2:80:58:
8b:47:bf:e8:ac:44:eb:f3:a1:4a:cd:8c:88:81:62:
83:8c:63:fc:9c:93:bf:c3:cf:c2:66:02:dc:a8:f2:
63:a4:83:c6:7c:39:3e:ba:4e:34:fd:aa:1c:0d:6d:
36:76:ef:21:0b:05:fb:ea:df:1d:02:34:b8:39:b1:
da:fa:83:6d:9c:ae:98:5d:60:6b:67:04:b3:b3:23:
2c:19:c0:d6:45:6f:87:16:58:65:11:76:a5:05:07:
55:cf:e3:97:4b:bf:fd:72:61:a9:4c:e2:2d:02:46:
58:3d:75:b9:e5:7d:1d:5b:2d:02:68:36:6c:aa:47:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:09:AD:53:A9:A5:10:82:6F:56:9C:35:DE:BA:78:6A:AF:7E:6C:68
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:05:50:58:ce:80:73:18:c5:52:2f:59:cf:3a:cb:41:86:d3:
3b:69:18:99:02:1c:79:4e:e7:a0:7c:e8:89:e3:de:4a:35:e5:
c3:79:56:b2:27:be:53:14:16:7c:b6:bb:57:e8:ae:64:a8:5e:
9c:64:8c:c7:7d:98:cc:5a:d5:9c:97:44:ab:b1:64:9f:96:5c:
f8:da:17:ae:89:f0:ca:94:bb:d0:77:65:97:6a:97:0c:39:73:
2a:0c:1d:89:91:bf:97:47:a3:2d:38:3d:84:83:e2:59:20:19:
9b:30:00:a9:5a:25:be:99:a1:f7:ab:57:a5:d3:a0:11:e7:fe:
59:d6:c0:af:99:3a:eb:f1:a8:89:e6:a7:3e:b0:f3:28:37:05:
b0:0f:30:09:bb:07:1f:2a:af:8b:a4:f2:e7:c9:5d:49:82:8f:
74:13:54:77:d9:f4:83:ff:00:b7:dc:46:f5:20:a8:b4:e4:20:
09:59:7e:1c:ab:d8:44:65:e7:f7:58:9f:37:16:72:06:40:6d:
fa:95:51:56:25:47:d0:fc:01:0a:66:97:92:a5:d3:4a:3b:52:
b2:7f:69:3a:24:14:08:bf:fa:0f:72:1c:19:61:a2:74:1c:eb:
82:30:4d:ab:46:db:dc:7f:bc:3a:0e:48:16:e3:3e:6a:b8:d1:
70:31:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 11:14:39 2026 by rpki-client