Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: 0IY1rw2Lu5ZcA+ySV8xlDBu/arXeJ7lQsht5tQUsx/c=
Subject key identifier: EF:D9:80:C9:BA:C3:30:34:91:19:94:C6:CD:4E:5B:32:12:C6:0E:92
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019E3072E026D42E43DF38A314AC7F8DFD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 18A5
Signing time: Sat 16 May 2026 11:01:35 +0000
Manifest this update: Sat 16 May 2026 11:01:35 +0000
Manifest next update: Sun 17 May 2026 11:01:35 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: jdztvER4/ccpMatL/8xnKAjUIPlEtdgvw74Smxf2ZDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:e0:26:d4:2e:43:df:38:a3:14:ac:7f:8d:fd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: May 16 11:01:35 2026 GMT
Not After : May 17 11:01:35 2026 GMT
Subject: CN=efd980c9bac33034911994c6cd4e5b3212c60e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3e:3c:84:d1:a0:9f:91:49:4e:9e:26:c7:63:
ba:6e:61:75:3e:60:a4:44:49:cc:e4:0e:19:d4:2e:
41:a9:9e:9e:10:0e:1c:0d:22:ea:09:db:13:52:d4:
a0:4d:6a:f8:5f:d6:b6:69:36:e5:cb:f0:0d:12:ab:
7a:23:e4:ff:40:98:cc:49:40:8e:a9:dd:fa:25:30:
f6:84:30:10:20:64:51:b8:43:fa:ad:57:2d:b1:9d:
28:e5:4f:e9:4e:27:2f:4c:c5:28:f7:84:37:ad:3d:
03:b3:89:1e:70:4f:b5:41:ed:44:fc:4a:6d:e9:34:
d6:2e:25:04:3f:89:71:4c:86:a8:84:2f:c6:9a:1d:
39:c6:05:8e:2f:d5:09:25:21:92:5d:99:0a:43:66:
b7:30:4f:a7:f5:68:a6:73:72:5e:56:d9:5e:57:27:
3e:0a:fb:7b:98:3a:a4:69:33:e6:3f:d4:1f:3a:52:
c6:66:52:4f:77:35:cb:1a:48:3e:29:f9:f4:62:53:
61:b1:26:88:be:ab:e8:4e:6e:a7:6d:69:83:52:05:
87:c1:ff:9d:23:2b:96:90:c5:92:0a:a6:f0:46:10:
ae:21:5c:52:66:ec:33:1b:ba:f7:cd:19:64:06:1c:
a2:58:8a:69:7d:ff:b1:b3:f8:42:10:db:5d:80:c1:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:80:C9:BA:C3:30:34:91:19:94:C6:CD:4E:5B:32:12:C6:0E:92
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:67:1c:81:b4:f5:c2:3c:f8:52:ef:47:20:5f:1b:47:5d:4d:
ba:0f:44:89:63:9e:43:63:e1:d1:77:4d:3a:59:76:c2:eb:87:
11:ab:3a:25:70:28:0a:9c:a7:c8:70:cc:19:88:18:ce:d0:b3:
36:50:ff:cb:7d:eb:65:85:7c:6c:bb:49:94:fa:e1:e4:0b:e1:
0e:97:1e:47:cf:8f:b2:a7:b8:5b:d8:bc:c2:da:c7:26:9a:04:
7e:da:3c:39:6d:7f:84:dd:5f:4b:61:fa:e4:52:52:c3:64:22:
2f:91:ce:bb:ab:f2:f2:3c:d7:55:a1:76:79:bb:ab:a9:08:c2:
b9:03:20:6b:e5:5d:82:15:46:1d:53:80:cf:15:dc:0e:aa:03:
8d:44:8d:93:d1:80:5e:92:f8:ab:b3:a6:17:5a:b2:8f:d8:20:
38:67:3c:18:d3:b2:0b:c1:c5:e2:41:c3:79:bc:9f:d7:d4:f7:
02:5d:64:b5:20:32:bd:01:0b:fc:fb:ef:58:80:6b:de:07:fa:
8e:af:01:2d:b5:2c:ae:19:5d:82:24:50:50:c1:5f:6d:cb:c4:
f0:f7:1f:ed:75:15:f7:f2:3e:53:75:86:f7:b7:09:7a:f1:65:
1d:88:2b:59:bf:2f:14:2c:f1:2e:d6:d2:d8:74:0c:06:2f:ad:
b6:a5:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:19:41 2026 by rpki-client