Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.mft
File: RmBLR38rZwno7JqWJ6Zixne619Y.mft (raw, json)
Hash identifier: 7osoUjgEGYu5Yi/wCeouaHMuvb2xmNlYnI9/g6cT6Z4=
Subject key identifier: 15:52:44:4A:8B:71:16:77:D9:98:99:58:E8:8C:2A:74:0D:87:D6:80
Authority key identifier: 46:60:4B:47:7F:2B:67:09:E8:EC:9A:96:27:A6:62:C6:77:BA:D7:D6
Certificate issuer: /CN=46604b477f2b6709e8ec9a9627a662c677bad7d6
Certificate serial: 019D382E7DD7D6E2D4604498CF4F5DB71DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmBLR38rZwno7JqWJ6Zixne619Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.mft
Manifest number: 012E
Signing time: Sun 29 Mar 2026 06:01:04 +0000
Manifest this update: Sun 29 Mar 2026 06:01:04 +0000
Manifest next update: Mon 30 Mar 2026 06:01:04 +0000
Files and hashes: 1: RmBLR38rZwno7JqWJ6Zixne619Y.crl (hash: HN52UJhgbPRXpWpuiae2udO7wwNs5KLL59GHXcSaOIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmBLR38rZwno7JqWJ6Zixne619Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7d:d7:d6:e2:d4:60:44:98:cf:4f:5d:b7:1d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46604b477f2b6709e8ec9a9627a662c677bad7d6
Validity
Not Before: Mar 29 06:01:04 2026 GMT
Not After : Mar 30 06:01:04 2026 GMT
Subject: CN=1552444a8b711677d9989958e88c2a740d87d680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:71:ec:38:0b:d4:bf:99:b5:58:4a:a3:a9:
ef:ea:11:00:87:c5:08:48:21:a9:07:b5:f2:37:04:
22:5d:2e:99:54:90:4b:e6:10:01:d8:6b:44:87:ea:
a1:b4:ca:75:77:84:18:f4:fa:dd:6b:0e:f7:03:e1:
f6:07:b9:d3:ac:35:e8:02:2e:10:9c:9a:61:2f:d0:
0c:f0:c2:0c:66:47:e4:67:9b:78:20:80:2c:84:29:
a1:1b:c9:bb:00:e7:b0:7d:14:0a:de:b7:4a:40:5b:
fd:21:f7:c7:0b:02:1a:3e:07:9d:8b:5b:b2:a2:25:
b9:e8:a6:4c:45:e0:61:8c:1a:34:cb:ef:66:c9:fb:
b2:73:e4:e5:2d:83:4f:26:7e:83:7d:cc:64:d2:82:
c4:ec:5d:ce:89:23:87:62:b3:ff:d0:6c:f4:f8:27:
a7:c4:80:d6:ac:54:51:1c:c5:25:a9:5f:f7:d3:b2:
c2:6b:cc:87:8f:12:dc:af:29:a3:ad:2d:a2:be:57:
08:bb:84:5b:e5:2c:6a:58:7f:dc:42:78:0f:4d:b6:
d4:4e:60:1e:49:97:be:0a:0f:5a:f2:f6:3a:69:55:
f7:79:64:f4:53:2f:95:08:5b:e0:2e:3e:e5:96:74:
1f:ab:e8:fa:5a:d5:94:f5:fc:ae:31:f1:b2:47:13:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:52:44:4A:8B:71:16:77:D9:98:99:58:E8:8C:2A:74:0D:87:D6:80
X509v3 Authority Key Identifier:
keyid:46:60:4B:47:7F:2B:67:09:E8:EC:9A:96:27:A6:62:C6:77:BA:D7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmBLR38rZwno7JqWJ6Zixne619Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/be04e8-e6ab-4b50-ba50-930790e61933/1/RmBLR38rZwno7JqWJ6Zixne619Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:85:18:c8:4a:d8:4c:60:24:f0:26:ef:9e:8d:d2:bd:2e:37:
d0:5c:34:73:64:7f:9b:d3:eb:e2:3a:bf:e0:f0:6f:f8:0f:c1:
ee:b1:ea:e5:0c:8c:44:cc:33:4b:d8:6c:6b:05:a7:c2:e0:9c:
52:91:72:2a:c9:23:4f:09:c7:72:20:54:a7:14:61:62:50:b3:
24:e7:de:e9:9a:ca:6a:2f:21:3b:34:0c:57:6d:9c:08:f7:e0:
be:de:08:26:7a:17:b1:84:b2:5d:13:a2:be:e2:e2:18:45:7b:
38:25:ee:4b:28:55:2f:04:54:d1:21:d0:dd:5c:d1:39:d9:47:
be:8b:6d:d1:de:25:4a:8b:e0:15:c0:e2:d6:95:c1:01:5c:a2:
21:98:66:9a:f7:f2:3c:47:77:72:88:d9:1c:89:9b:aa:a5:7e:
8a:8c:22:f3:d7:73:79:c7:39:a0:cf:75:9a:56:4e:c5:a8:f2:
6e:45:e5:bb:4c:24:b7:e0:8c:1a:ad:62:01:29:b1:bb:8c:92:
e6:72:d9:04:12:57:d1:f6:ab:22:11:60:56:b6:21:ee:d1:4a:
3d:dc:57:7f:de:09:6d:79:86:df:61:6f:44:6a:43:7f:01:7f:
c1:7f:19:68:a9:be:8d:da:32:b0:46:38:a3:2b:a2:c5:ce:dd:
ca:23:ea:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:34 2026 by rpki-client