Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: imeyO1LSZHmfw8eUP199htG8ahl7WuHHWMmsaLjzvBs=
Subject key identifier: 24:9D:18:D5:FC:F2:61:73:61:45:D7:D6:FC:B0:8A:8C:F0:D9:48:2B
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 01A001DD90D6FFB6D9185B5CDD25F9DE7C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 1996
Signing time: Fri 14 Aug 2026 20:01:32 +0000
Manifest this update: Fri 14 Aug 2026 20:01:32 +0000
Manifest next update: Sat 15 Aug 2026 20:01:32 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: IZ8dBhQ4fkcI3a0cuv8eBLYuqSSk/9wlBXUmwhfLsQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:90:d6:ff:b6:d9:18:5b:5c:dd:25:f9:de:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Aug 14 20:01:32 2026 GMT
Not After : Aug 15 20:01:32 2026 GMT
Subject: CN=249d18d5fcf261736145d7d6fcb08a8cf0d9482b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:4b:e6:02:c4:84:ce:6f:18:91:ff:22:cd:
df:6b:55:71:db:4b:18:ea:78:67:dd:f7:ee:f9:fb:
32:50:1f:ee:5e:df:c8:a5:f3:aa:dc:c7:6a:2c:0c:
70:d6:e0:a2:5e:87:70:1f:6b:d0:cd:bf:ab:d6:1f:
74:ce:07:1c:cf:75:23:82:3c:07:cb:26:c7:b6:c5:
f3:8b:33:52:a3:47:3b:6c:0c:ba:b7:02:3c:34:4e:
61:c0:dd:38:6f:15:a5:be:bf:48:c7:06:3a:0e:12:
c3:97:bb:4b:fc:bf:6c:74:a5:61:e1:c5:00:75:9e:
86:fb:12:b6:09:66:27:85:5e:96:33:ee:fe:51:75:
36:b0:25:42:fc:04:0f:f9:1b:84:a1:1a:d4:8a:30:
6d:6a:d0:de:93:b8:d3:2d:be:49:6e:d7:2b:a8:0a:
f7:05:00:98:7c:87:48:3b:15:24:00:f6:df:62:45:
96:28:a5:72:74:bf:18:7d:d5:d3:72:c9:61:03:4b:
f5:ca:e0:3d:df:d9:ef:29:05:94:e7:b8:42:53:d9:
a8:fa:e7:c5:36:29:07:c5:1d:20:dc:a9:2f:06:16:
7f:02:26:f2:61:b5:4c:4f:67:27:62:ef:97:54:bb:
09:9f:9f:5c:8a:67:96:d8:72:7d:5e:4a:ca:00:82:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9D:18:D5:FC:F2:61:73:61:45:D7:D6:FC:B0:8A:8C:F0:D9:48:2B
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f6:eb:0f:18:14:87:b4:27:00:b2:2f:08:69:c1:8b:7f:1b:
f2:65:14:20:91:d2:84:72:16:bc:e5:0c:bf:c9:7c:d7:35:31:
0f:a1:a5:aa:21:5d:a3:27:3f:ef:f5:81:61:39:62:b0:6c:88:
bc:1f:e4:29:f4:7c:37:7f:f6:27:ca:cc:fb:8a:fb:66:ce:92:
08:22:02:3b:83:20:5f:8d:04:c8:21:9c:9a:65:57:7e:d4:ea:
0b:bb:28:f3:f5:87:56:93:c6:f8:1e:a1:d4:40:3a:5f:3b:29:
f0:fe:89:16:04:34:9b:d0:74:f0:36:d2:b4:38:38:18:8d:1d:
e4:39:84:84:e5:97:30:cb:3b:ca:02:38:a3:23:b9:49:47:e6:
d7:e1:c5:6b:b6:d0:30:f3:64:7a:39:47:85:25:3f:51:37:43:
85:2a:51:ca:d1:32:31:2b:a4:e4:7c:50:c0:6e:0b:8d:81:54:
c1:be:de:ce:8e:d3:3b:0e:22:02:e4:f6:23:e8:f7:d9:8b:95:
f6:08:01:cf:35:87:14:15:0c:c5:1d:52:9f:0c:05:e7:d2:cd:
18:1e:df:80:98:10:14:75:c4:1e:4d:5d:17:53:5f:c5:5d:1c:
e1:8d:12:27:ce:ad:11:5a:55:99:12:0d:c6:44:cb:63:0f:fe:
d5:aa:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:02 2026 by rpki-client