Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier: xze2/kqXOArObo3pcQEu+CM4MT6OixAky0ey5wMjRtI=
Subject key identifier: A3:F0:F2:F9:C8:2B:2C:81:6C:26:BB:60:92:93:91:71:28:06:DE:ED
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 01A0946B5BBD4DFAD79940A8A7CCCF93042F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number: 1A2C
Signing time: Sat 12 Sep 2026 07:00:58 +0000
Manifest this update: Sat 12 Sep 2026 07:00:58 +0000
Manifest next update: Sun 13 Sep 2026 07:00:58 +0000
Files and hashes: 1: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (hash: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A=)
2: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: q87MVpROTsBGucIxByre+vk8SxZAfOh3L7Ch6CyxhVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:6b:5b:bd:4d:fa:d7:99:40:a8:a7:cc:cf:93:04:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Sep 12 07:00:58 2026 GMT
Not After : Sep 13 07:00:58 2026 GMT
Subject: CN=a3f0f2f9c82b2c816c26bb60929391712806deed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:92:af:c1:8a:ec:8d:37:49:f6:6c:35:f9:
08:7b:43:39:e6:50:0c:95:8b:61:f8:35:9d:9b:90:
44:c9:4b:b2:41:1a:72:36:00:fd:e0:96:e9:58:df:
c5:bb:17:6f:bb:cb:e7:68:e0:ab:26:d3:06:1f:73:
2f:07:f4:0f:05:86:54:ec:65:30:5c:9c:be:4a:e6:
41:7c:77:48:cc:c5:3d:49:44:13:d1:1e:d2:89:a0:
c2:42:3b:63:77:ba:e3:fa:94:57:a3:f7:de:0d:3c:
ec:4e:fb:d6:5e:bc:c3:3d:c3:2b:1b:68:4b:a8:c1:
8e:e5:00:db:a4:2d:57:d2:a2:ec:96:af:54:30:6b:
d4:29:58:e3:ef:58:69:94:49:75:8a:ed:f6:e8:81:
88:4e:4e:8e:3b:b9:fa:cd:58:f7:03:d4:5e:10:9f:
21:36:99:d3:e4:35:b2:10:bd:51:74:b0:8e:aa:39:
8d:2a:85:34:21:4c:83:19:7e:2f:dd:8e:a8:67:fd:
09:60:0a:69:51:ce:f8:bb:2e:09:4f:fd:e4:08:dd:
4f:96:de:d1:f8:bd:31:04:39:bd:59:71:ef:b1:2f:
12:37:3f:50:e3:9e:4c:34:40:20:51:52:16:3e:8e:
44:8d:64:bc:a9:5c:6f:6f:90:b0:d9:06:ff:06:86:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F0:F2:F9:C8:2B:2C:81:6C:26:BB:60:92:93:91:71:28:06:DE:ED
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:67:42:ae:83:ea:22:cf:dc:f5:cc:21:44:f8:b7:dc:3a:37:
1e:3b:52:ff:e0:31:f3:a7:0f:6c:c1:21:5f:b5:67:df:79:7c:
12:20:fc:91:61:82:ea:16:ae:bd:9c:93:5c:87:b6:dc:78:cf:
47:e3:f3:d0:93:21:72:5a:20:83:47:e3:d5:3c:98:cc:7c:1e:
07:01:2f:7b:6d:0c:54:5a:ba:eb:4b:ca:d1:ba:12:4d:81:50:
e9:d6:05:df:07:1f:7e:f3:e2:8d:59:c0:31:8c:a5:9c:d1:fd:
ed:a5:7b:3f:d9:82:30:3d:f5:54:c2:3d:ea:c0:79:74:4b:1c:
ab:48:a7:e3:cd:ae:21:a6:47:75:99:89:72:a6:c5:3f:d3:89:
a2:55:98:e7:05:ac:43:ae:db:8f:3d:de:cb:8a:5d:7e:9f:c5:
8b:df:fc:2f:be:2f:27:24:17:32:4f:76:aa:4b:16:88:08:d8:
62:d4:e4:29:dd:64:56:c3:b3:19:4a:6d:b2:3f:fd:22:f4:b0:
f9:a0:5a:75:85:b0:19:da:4d:f3:83:18:17:28:e8:fb:88:b5:
e7:53:bb:56:ae:a1:74:a7:db:9d:c9:3a:cb:03:80:14:b0:2e:
fa:76:e4:7b:55:04:23:96:ec:86:1a:11:88:0f:3b:c0:0c:97:
b5:e6:eb:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCUa1u9TfrXmUCop8zPkwQvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk
NGExMmUwHhcNMjYwOTEyMDcwMDU4WhcNMjYwOTEzMDcwMDU4WjAzMTEwLwYDVQQD
EyhhM2YwZjJmOWM4MmIyYzgxNmMyNmJiNjA5MjkzOTE3MTI4MDZkZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OWSr8GK7I03SfZsNfkIe0M55lAM
lYth+DWdm5BEyUuyQRpyNgD94JbpWN/Fuxdvu8vnaOCrJtMGH3MvB/QPBYZU7GUw
XJy+SuZBfHdIzMU9SUQT0R7SiaDCQjtjd7rj+pRXo/feDTzsTvvWXrzDPcMrG2hL
qMGO5QDbpC1X0qLslq9UMGvUKVjj71hplEl1iu326IGITk6OO7n6zVj3A9ReEJ8h
NpnT5DWyEL1RdLCOqjmNKoU0IUyDGX4v3Y6oZ/0JYAppUc74uy4JT/3kCN1Plt7R
+L0xBDm9WXHvsS8SNz9Q455MNEAgUVIWPo5EjWS8qVxvb5Cw2Qb/BobDbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPw8vnIKyyBbCa7YJKTkXEoBt7tMB8GA1UdIwQY
MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt
MzE4YzcxYjExOWY3LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3
LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamdCroPq
Is/c9cwhRPi33Do3HjtS/+Ax86cPbMEhX7Vn33l8EiD8kWGC6hauvZyTXIe23HjP
R+Pz0JMhclogg0fj1TyYzHweBwEve20MVFq660vK0boSTYFQ6dYF3wcffvPijVnA
MYylnNH97aV7P9mCMD31VMI96sB5dEscq0in482uIaZHdZmJcqbFP9OJolWY5wWs
Q67bjz3ey4pdfp/Fi9/8L74vJyQXMk92qksWiAjYYtTkKd1kVsOzGUptsj/9IvSw
+aBadYWwGdpN84MYFyjo+4i151O7Vq6hdKfbnck6ywOAFLAu+nbke1UEI5bshhoR
iA87wAyXtebr2Q==
-----END CERTIFICATE-----
Generated at Sat Sep 12 09:42:27 2026 by rpki-client