Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft (raw, json)
Hash identifier: 6LYZTiSNbfNIamvZRvoWWiDlgqnhFVZAghBU75rzOdQ=
Subject key identifier: E0:F1:98:44:71:58:36:7E:6F:E1:5D:CA:1B:86:61:D3:15:1D:EE:48
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 01A102B621D68973BF88FC9A22F0EF172B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
Manifest number: 020A
Signing time: Sat 03 Oct 2026 17:00:52 +0000
Manifest this update: Sat 03 Oct 2026 17:00:52 +0000
Manifest next update: Sun 04 Oct 2026 17:00:52 +0000
Files and hashes: 1: BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl (hash: fCj+qXSHJhxbtigCgsnPtQvwDgX7gQY/98JZMEQBYTU=)
2: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (hash: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:21:d6:89:73:bf:88:fc:9a:22:f0:ef:17:2b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Oct 3 17:00:52 2026 GMT
Not After : Oct 4 17:00:52 2026 GMT
Subject: CN=e0f198447158367e6fe15dca1b8661d3151dee48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:03:7c:72:f9:fd:d0:52:df:5d:ec:d7:09:
20:8f:c3:94:48:d0:af:e3:b1:65:33:62:e4:15:8e:
37:6f:dc:eb:d8:1b:bb:72:b3:90:4b:32:93:a7:6a:
fd:f1:75:42:3f:b5:02:02:49:a8:4c:46:dd:70:96:
a1:85:8c:31:8e:05:1e:f8:72:49:1c:7a:b7:4a:4b:
00:89:5c:64:5f:31:04:38:30:8d:95:32:b4:09:ec:
56:95:7e:21:b1:8e:af:06:94:97:2b:e2:cc:2c:cd:
21:4b:e7:43:de:a4:a4:c7:80:85:2c:dd:7a:46:60:
80:dc:6b:df:2a:21:26:98:23:5f:4a:ac:3b:b3:bb:
a9:a3:03:e1:ee:f6:f4:f4:d3:2a:1e:d9:9e:31:43:
b0:b6:4a:a7:72:c5:cf:a2:c1:a3:90:de:ee:01:bb:
0c:0e:dc:d9:37:9f:09:c4:df:fe:a8:b7:36:63:a0:
fb:e9:5e:af:83:7a:5d:8f:9f:82:3e:2a:8f:67:2b:
dc:a3:63:25:52:f8:64:55:44:4e:05:6b:ab:38:a4:
1e:49:7e:21:28:e0:3d:83:a8:65:a8:c6:1e:56:62:
2b:d4:38:90:bf:82:0c:7f:20:01:04:b7:74:77:c7:
9c:f8:30:b1:a0:70:9f:22:6f:b0:27:fc:d7:97:66:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F1:98:44:71:58:36:7E:6F:E1:5D:CA:1B:86:61:D3:15:1D:EE:48
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:af:df:31:83:0c:46:bb:a9:dd:66:97:ac:f1:1b:81:9c:1c:
96:b6:f6:bf:f7:e9:55:e3:97:03:e2:b8:b4:f8:f3:99:63:b6:
c9:11:5d:bf:1c:4a:fd:27:af:b2:23:52:65:40:ab:1b:1f:b4:
fe:21:7a:34:36:38:22:bc:11:3e:96:cf:01:36:fb:cc:40:f7:
d3:98:b7:6e:fd:4a:23:0a:26:21:90:b8:46:53:98:a0:29:da:
48:de:f9:02:60:d0:99:c0:01:c8:7a:b3:52:c9:94:bf:0e:93:
06:38:19:ba:fe:0b:a1:84:3d:eb:6e:72:f6:c5:7a:0a:40:58:
a0:94:d0:ed:67:b8:c3:88:12:84:cd:4c:ec:74:04:29:e0:2e:
78:13:76:fa:0d:38:2d:b0:70:06:b8:26:66:6a:10:9d:6b:60:
fc:82:f6:73:62:c1:20:61:3a:38:c7:9a:f1:7b:d9:85:92:9f:
c1:95:30:df:41:ec:59:99:ce:7d:3d:7c:97:fd:52:a6:ef:51:
ca:62:40:26:b9:d2:4b:d5:61:1e:96:cf:a3:89:19:55:13:1b:
3d:0b:de:a8:b7:19:96:ff:cd:ef:db:ff:76:97:81:01:c4:73:
c4:6d:1e:8e:b8:2e:47:69:6f:49:d6:f3:d3:6e:5d:45:ef:71:
aa:e0:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:13:03 2026 by rpki-client