Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: sXF1uk/IisM719NA9qMemCRgFtAhCyM8Zd2zHy8p+RU=
Subject key identifier: 79:FE:A0:23:82:6F:CE:86:E1:B7:6F:33:D4:16:E6:7C:D5:A2:33:72
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 019D9DAD99D7C0366FC0E3523DBFB568C741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: 48
Signing time: Fri 17 Apr 2026 23:01:32 +0000
Manifest this update: Fri 17 Apr 2026 23:01:32 +0000
Manifest next update: Sat 18 Apr 2026 23:01:32 +0000
Files and hashes: 1: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: ddBL5Fz+Griw5uvQk3U3zyFcdKe5tvnYfwn6M3hlTqk=)
2: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (hash: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 23:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:99:d7:c0:36:6f:c0:e3:52:3d:bf:b5:68:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Apr 17 23:01:32 2026 GMT
Not After : Apr 18 23:01:32 2026 GMT
Subject: CN=79fea023826fce86e1b76f33d416e67cd5a23372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:d7:67:ac:fb:93:c3:fd:1b:ff:56:b0:e7:
fc:49:bb:2d:be:bd:16:ee:09:d8:39:a6:f9:2b:b9:
ad:f0:4f:e9:9b:17:73:ba:7b:3b:d2:86:9f:f1:29:
48:0b:7d:0f:3d:1b:e0:7a:48:2f:2f:d2:82:74:6b:
a3:4b:98:aa:90:ba:5a:e8:f5:42:f0:f5:20:68:5e:
56:8b:2b:b3:02:53:7e:13:6f:d4:c2:1c:06:3f:44:
49:67:74:96:43:d7:28:93:c8:7d:c4:d9:b6:48:3a:
2a:7c:72:1b:ee:80:9d:03:16:8e:39:82:91:7f:30:
8b:75:8e:5b:73:e4:c3:4e:46:ee:a4:4e:78:c1:09:
da:84:41:10:28:15:18:64:ce:c3:96:d7:fd:48:4d:
46:07:17:7c:33:7c:0a:30:c0:f2:80:b9:06:9f:1a:
8b:40:63:c3:ba:6a:50:a8:ff:0a:87:95:04:b6:42:
6b:54:cd:67:54:76:2f:98:d5:91:0e:19:89:4b:80:
58:88:fc:95:c9:20:98:d6:6c:5c:49:ff:59:d1:0e:
0f:f1:94:6b:9f:71:c0:00:42:a1:28:42:f4:d8:07:
ce:84:cd:a3:e5:03:5c:86:9f:22:5e:4a:85:1f:56:
c5:51:ba:4c:f8:83:2a:9f:f8:8f:40:5c:7f:07:1f:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FE:A0:23:82:6F:CE:86:E1:B7:6F:33:D4:16:E6:7C:D5:A2:33:72
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bd:68:71:ac:3e:cf:ed:0f:74:d5:bf:10:c5:17:b3:ce:d5:
c6:ce:cf:87:a7:48:15:2f:f1:98:c0:c0:fb:ca:10:18:e4:5d:
aa:2e:76:57:c1:77:dc:19:aa:ea:c8:84:ff:52:e9:84:ae:42:
1b:54:0f:a2:83:4c:c2:0c:ad:7a:a9:67:43:5c:5e:be:69:e7:
9c:48:29:6d:ba:06:bb:b3:46:4e:9b:17:2a:5d:16:92:60:e3:
54:01:a7:55:79:f5:f7:fb:24:5b:e9:ee:b6:b5:e9:e6:22:24:
71:3b:b6:0c:3a:de:2b:39:2a:9f:b2:eb:24:17:3f:f9:6f:f9:
f9:a4:ba:4e:b8:bc:ae:ee:75:b1:04:bb:3b:cc:49:5c:22:13:
5a:7c:3c:10:9d:f3:08:ff:68:79:4b:8d:d2:d1:5e:de:82:2a:
4c:77:ef:15:8d:71:2d:6b:66:18:02:3e:f5:6f:d1:5b:7b:c8:
e3:4f:85:60:1e:fa:73:b6:a9:68:c6:a4:c7:51:08:78:07:69:
7a:49:e2:57:d2:ec:e6:6d:ed:8a:f6:91:a8:a9:cb:5b:2c:18:
36:07:92:50:23:3f:ce:6e:bb:0d:77:36:2d:43:ee:c8:6c:6c:
ea:35:bd:0b:49:6a:4d:6e:cc:11:e3:49:3d:fd:9c:cb:de:11:
06:08:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:51:09 2026 by rpki-client