Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File: BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier: xPplaFTY5Kz0lrDen0uBb+YUaCG2/zTHcPoMFeR9DPs=
Subject key identifier: BE:F0:3E:E7:06:93:8A:8C:C9:E8:AE:27:98:87:98:E0:32:8A:C8:2D
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer: /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial: 019D39414837820B7F4B0BFFEDF274CF69BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number: 0589
Signing time: Sun 29 Mar 2026 11:01:12 +0000
Manifest this update: Sun 29 Mar 2026 11:01:12 +0000
Manifest next update: Mon 30 Mar 2026 11:01:12 +0000
Files and hashes: 1: 7gkM7YDQNG3-1_Cc7pilIYXiVxM.roa (hash: RxktB/X/0ILAUcnLgcdw93xVGc/tLoK9pE6XU1OCXqQ=)
2: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: /SUDdKxk4BAS35DJaYY0lZFvp1I8X3awv6x0IUGdSx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:48:37:82:0b:7f:4b:0b:ff:ed:f2:74:cf:69:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Validity
Not Before: Mar 29 11:01:12 2026 GMT
Not After : Mar 30 11:01:12 2026 GMT
Subject: CN=bef03ee706938a8cc9e8ae27988798e0328ac82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:90:b5:0a:85:e1:a3:f1:64:26:db:aa:fd:
fd:60:d2:d3:ba:40:b2:4d:02:c6:e2:40:c7:d1:7e:
58:82:fd:f7:20:a0:72:37:35:97:24:55:3f:a7:d0:
40:b5:e8:dc:24:38:ca:69:ba:51:c8:3e:13:76:e9:
e5:a7:8e:dd:30:5e:35:e6:96:7d:4c:51:90:c5:2b:
42:a5:db:ed:2b:3a:41:fb:bb:02:8d:e1:3d:4b:cc:
28:e5:c1:ad:90:ac:8d:49:fc:e3:90:a2:6c:9f:d3:
50:fb:be:73:93:e5:ce:64:5a:fd:04:0b:cc:d3:41:
e6:61:8b:bb:88:26:84:16:f6:18:a7:4c:10:47:07:
6e:0f:3e:48:31:d9:98:34:ab:2a:94:a3:b6:cb:da:
18:9f:23:0a:8a:51:a7:6b:0e:78:56:c6:1e:99:bd:
48:9a:c7:a6:f3:94:54:e4:d8:b8:5d:ed:4e:1a:44:
f6:d1:95:3d:a1:4c:49:51:88:30:7f:71:66:53:c4:
30:c7:70:2f:ae:3e:52:36:64:ce:f3:f6:57:f3:a3:
78:80:2c:f3:47:88:49:90:02:6f:40:3c:7a:3e:b1:
4c:9d:31:87:63:19:e0:ef:97:4f:4f:fc:9e:58:2b:
0e:66:33:35:64:5e:74:95:c9:6b:8a:8b:67:90:6e:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F0:3E:E7:06:93:8A:8C:C9:E8:AE:27:98:87:98:E0:32:8A:C8:2D
X509v3 Authority Key Identifier:
keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2f:82:c2:03:9a:58:4f:6b:6b:a2:85:59:b7:f6:5b:0a:7f:
82:65:77:db:ef:52:39:ab:a5:d0:d6:2d:61:1e:56:11:c4:eb:
1b:08:1e:37:f8:f6:fc:d2:70:97:02:1e:43:a8:65:cf:41:3f:
8f:03:c7:56:f6:d1:a6:db:f2:f3:da:60:df:1f:96:08:1d:67:
33:cb:84:d4:b3:06:e3:bf:c9:13:c9:0e:3e:0a:1d:50:d7:c4:
78:7d:7b:f5:c3:c8:0e:df:8d:5f:dd:da:d1:9a:80:61:6a:e9:
10:8c:e8:72:2d:39:ba:2b:7f:5e:0b:42:f8:1b:99:14:21:2f:
9e:7a:4a:e0:26:ec:bf:63:21:79:c2:76:f1:34:3b:29:9e:3a:
29:c1:55:29:81:2a:c0:93:8c:53:67:1c:1b:fc:50:75:8d:1c:
25:17:6f:f0:fd:49:61:08:c3:c3:66:40:13:9c:99:be:0c:21:
5f:c6:93:bf:af:7d:9f:53:3d:18:d0:cd:40:d1:52:fc:30:dd:
24:b4:4c:8c:0c:47:59:49:30:39:17:50:d4:57:88:c8:62:e2:
b9:25:94:0c:78:d6:26:4e:e8:17:e8:fc:c3:e6:ec:c5:e8:04:
73:bf:97:67:36:06:90:e8:e8:8b:52:94:04:e7:0c:97:4d:23:
b2:a8:1a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:26 2026 by rpki-client