Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier: jyB5g89ugr4lkWQaUFWe7xKzaIGdjoWL3XR6bv38mgA=
Subject key identifier: E5:BD:98:B5:7C:0C:15:E1:1C:66:84:E5:2D:63:E9:2C:D9:78:5C:DB
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 01A1A2C9994407FF5B6A49335F76590C4DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number: 1AB8
Signing time: Tue 03 Nov 2026 19:01:23 +0000
Manifest this update: Tue 03 Nov 2026 19:01:23 +0000
Manifest next update: Wed 04 Nov 2026 19:01:23 +0000
Files and hashes: 1: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (hash: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A=)
2: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: Rdk2YAviPz2Bj2TjZ7DnOC1U4n3Vzb8up3G6tGeETOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:c9:99:44:07:ff:5b:6a:49:33:5f:76:59:0c:4d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Nov 3 19:01:23 2026 GMT
Not After : Nov 4 19:01:23 2026 GMT
Subject: CN=e5bd98b57c0c15e11c6684e52d63e92cd9785cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:d7:64:6e:ea:59:92:fa:3c:f2:81:f8:23:
ec:ea:a4:e9:bb:3b:5b:34:77:44:f5:cc:f1:da:3b:
c5:7a:38:7f:97:bd:97:3f:df:40:0f:72:73:08:1e:
75:db:a6:62:8e:61:2e:4c:dc:98:a9:3d:14:01:78:
73:20:23:64:e9:5d:2e:56:95:64:80:d6:f2:55:be:
ee:41:2c:3f:12:13:8f:84:3b:c6:9f:8b:2e:45:15:
8d:27:89:d9:c5:18:55:4c:de:1f:de:f6:9c:02:06:
ce:67:31:6f:29:2b:89:88:10:2f:03:fd:49:a3:f0:
12:a3:80:0b:6a:6e:70:62:20:3a:dc:f0:ca:5c:94:
48:cd:56:27:07:fd:54:45:04:ad:7b:87:87:e5:90:
85:08:92:92:48:65:b7:93:92:1f:d7:7f:ea:a3:6b:
5e:9e:81:6f:3c:90:b8:32:11:d2:0c:7a:85:d4:eb:
fd:93:be:f3:ff:35:47:29:77:76:98:48:72:43:93:
05:6e:8e:43:60:92:ff:02:0e:d3:39:16:c3:80:68:
58:1d:f9:36:b4:3c:72:72:fc:67:d9:c7:03:b6:5a:
cb:07:f2:60:bc:c2:48:37:a1:92:d4:fd:00:2c:f7:
54:ef:42:36:1d:75:fd:de:b7:65:fc:9e:f7:90:1c:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:98:B5:7C:0C:15:E1:1C:66:84:E5:2D:63:E9:2C:D9:78:5C:DB
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:68:d4:01:59:5e:34:67:58:cc:f2:ca:81:a5:09:b5:ec:
41:f2:67:af:92:01:d4:23:76:88:f1:fb:01:ee:44:5e:69:81:
15:62:51:6f:0c:a0:b9:92:e9:21:2d:e7:9f:2b:26:4c:3a:b2:
88:5a:98:c0:ee:d9:e7:48:ec:6e:82:5e:73:ef:a4:1d:62:df:
b5:ab:83:53:fc:64:1e:af:d4:69:20:63:f3:79:e7:cc:c5:26:
d7:3c:7c:90:fe:d0:a7:63:47:2b:e4:b1:1f:96:b2:06:fb:a8:
3d:4a:75:71:95:0f:dc:b8:88:5a:46:e3:f6:c2:4d:dd:b6:0d:
30:79:d0:5c:c5:be:64:90:23:fc:f6:a4:ad:0c:da:95:5d:0d:
34:69:86:44:c4:12:fb:33:1e:89:ba:2f:fc:f8:cb:72:94:94:
06:c5:c4:8c:91:4d:0a:8b:8c:ba:5b:ac:6d:7f:a3:40:fd:2b:
e0:e0:9f:d1:6a:f0:2e:d0:54:a0:fa:20:ac:5e:08:32:28:06:
3b:dd:d1:1b:d0:32:9c:0a:58:f0:00:a1:56:67:9c:08:2e:79:
ad:22:12:1f:e9:8b:14:3c:ff:02:00:b6:68:ac:ed:87:ff:28:
5e:67:f4:8e:5c:65:02:6b:91:b2:fc:62:ba:8c:38:11:4f:7e:
05:7d:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:58:54 2026 by rpki-client