Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier: sXv03ljV8gOrIV7k/DcwsNRnlRDgzNa5OfECkxr7+4Y=
Subject key identifier: 24:4F:54:19:0D:91:1C:A2:D0:2D:6F:A1:AA:25:09:43:A8:21:5A:2A
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 01A1DFF11A0DACDA14B101F3DEC697DDB82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 16:01:22 +0000
Manifest this update: Sun 15 Nov 2026 16:01:22 +0000
Manifest next update: Mon 16 Nov 2026 16:01:22 +0000
Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: falQtC1t9S9uYAx5RsFmHIfzMrl+RIWpxgAv6+os4fQ=)
2: yko62gQUpDznk6pbTXdM7BFWgrg.roa (hash: 4X0+42FTN6ZFQiCpU0LUUz9jtfGgyphhCU+pgUNgAQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:1a:0d:ac:da:14:b1:01:f3:de:c6:97:dd:b8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: Nov 15 16:01:22 2026 GMT
Not After : Nov 16 16:01:22 2026 GMT
Subject: CN=244f54190d911ca2d02d6fa1aa250943a8215a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:46:ee:36:97:b8:e5:03:33:9e:22:8a:21:
7e:81:ee:26:b8:4a:8d:86:bb:9c:f2:d8:ec:46:1f:
68:44:15:bd:1a:67:3e:12:fa:88:d0:92:b3:3a:69:
73:4e:5f:18:f0:8e:55:2d:5d:01:90:d9:27:58:4e:
4f:17:c9:7d:4c:f5:98:7a:a1:71:5d:8b:31:40:a8:
f5:1d:37:70:47:54:f9:28:1f:36:88:d9:f5:8d:42:
9b:b2:2b:90:d0:c6:b9:f9:1d:b9:69:9d:ff:8a:23:
5a:36:56:62:fa:9a:91:05:42:ad:6f:e7:94:c4:b9:
ac:8e:eb:29:dc:36:e9:f2:37:d0:48:43:05:b3:0b:
84:f4:8f:34:f9:1b:01:48:bf:1a:c3:e7:35:3e:33:
38:99:27:56:93:cc:43:3a:65:49:1d:aa:18:65:6d:
95:1e:d5:a2:45:09:96:b9:4f:a0:6e:a1:e9:d1:c5:
59:46:13:e5:45:c5:5d:ab:34:78:0a:72:ea:3b:d1:
e7:d1:9c:01:7b:3a:a5:e8:57:fb:41:73:37:aa:19:
b2:e8:60:da:b1:49:02:09:3f:7c:62:51:a0:b6:4d:
b1:c4:3e:b5:16:d6:e6:60:d2:b0:c0:50:e8:69:ab:
b8:e0:e8:d5:c0:0c:0e:a3:40:d9:8b:52:e0:15:4e:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:54:19:0D:91:1C:A2:D0:2D:6F:A1:AA:25:09:43:A8:21:5A:2A
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d2:1c:27:35:cb:01:94:e2:4a:a5:e4:0f:89:63:0a:91:d8:
b8:b9:16:4b:98:a3:d7:52:67:da:83:27:ba:51:a9:4d:17:fe:
06:b9:5a:35:60:ab:c7:78:69:3b:b5:65:cc:63:9f:82:7a:99:
13:3a:49:cc:6c:0c:45:58:5d:e5:ae:40:f7:e2:85:90:ac:74:
84:b2:72:b7:04:f5:08:03:1b:9d:99:66:a0:5c:df:d1:2f:43:
74:59:22:ce:55:98:0a:0c:a2:8b:3c:c7:f9:7c:38:fe:0c:a7:
5c:b5:45:58:80:1b:47:c6:20:2c:07:da:09:30:31:d4:0d:38:
ab:a7:e3:6d:1a:47:60:d6:7b:de:6a:0a:92:86:8b:4c:42:d2:
8b:26:67:4d:29:ee:29:54:e9:ac:50:fb:e7:9b:be:72:cf:2f:
17:89:80:6f:ea:ad:91:0d:c1:be:43:db:c7:4d:9b:bb:aa:ee:
91:24:0a:63:74:40:b6:62:88:1b:52:d9:bf:3e:4d:5c:f0:13:
61:f6:7d:b5:fa:5b:30:64:b4:d8:b5:7e:7a:92:16:77:13:de:
dd:9d:e4:b8:0b:ee:1b:3f:3a:b0:1b:c5:58:76:ba:53:68:d1:
59:75:a1:84:14:77:75:15:bc:d8:2e:da:30:10:1b:b1:34:2f:
fa:35:cd:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8RoNrNoUsQHz3saX3bgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NWM5ZmVkYjViNTQ0ZjY5NmVkNGRhZjEzNWIwMmRlZTZk
OTdhZjYwHhcNMjYxMTE1MTYwMTIyWhcNMjYxMTE2MTYwMTIyWjAzMTEwLwYDVQQD
EygyNDRmNTQxOTBkOTExY2EyZDAyZDZmYTFhYTI1MDk0M2E4MjE1YTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4pG7jaXuOUDM54iiiF+ge4muEqN
hruc8tjsRh9oRBW9Gmc+EvqI0JKzOmlzTl8Y8I5VLV0BkNknWE5PF8l9TPWYeqFx
XYsxQKj1HTdwR1T5KB82iNn1jUKbsiuQ0Ma5+R25aZ3/iiNaNlZi+pqRBUKtb+eU
xLmsjusp3Dbp8jfQSEMFswuE9I80+RsBSL8aw+c1PjM4mSdWk8xDOmVJHaoYZW2V
HtWiRQmWuU+gbqHp0cVZRhPlRcVdqzR4CnLqO9Hn0ZwBezql6Ff7QXM3qhmy6GDa
sUkCCT98YlGgtk2xxD61FtbmYNKwwFDoaau44OjVwAwOo0DZi1LgFU5wewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRPVBkNkRyi0C1voaolCUOoIVoqMB8GA1UdIwQY
MBaAFAZcn+21tUT2lu1NrxNbAt7m2Xr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTkt
MThkNjkwMzY3NTNiLzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTktMThkNjkwMzY3NTNi
LzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9IcJzXL
AZTiSqXkD4ljCpHYuLkWS5ij11Jn2oMnulGpTRf+BrlaNWCrx3hpO7VlzGOfgnqZ
EzpJzGwMRVhd5a5A9+KFkKx0hLJytwT1CAMbnZlmoFzf0S9DdFkizlWYCgyiizzH
+Xw4/gynXLVFWIAbR8YgLAfaCTAx1A04q6fjbRpHYNZ73moKkoaLTELSiyZnTSnu
KVTprFD755u+cs8vF4mAb+qtkQ3BvkPbx02bu6rukSQKY3RAtmKIG1LZvz5NXPAT
YfZ9tfpbMGS02LV+epIWdxPe3Z3kuAvuGz86sBvFWHa6U2jRWXWhhBR3dRW82C7a
MBAbsTQv+jXNsg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:54:20 2026 by rpki-client