Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier: rLtMlsOgpKAPA0bVhSJfSYCRwQ1E1wJTpahWNOBylgY=
Subject key identifier: 89:0A:DC:3B:41:78:0E:A5:82:9F:6C:4D:09:C9:6A:AC:3C:EB:46:C7
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 019CAB6B3B4A8C885B72EB36215375DE7F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:00:57 +0000
Manifest this update: Sun 01 Mar 2026 22:00:57 +0000
Manifest next update: Mon 02 Mar 2026 22:00:57 +0000
Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: ql0EYQmWdwU1AXYnp0MnHCb0On7zVyRMQdXWLRki3r8=)
2: yko62gQUpDznk6pbTXdM7BFWgrg.roa (hash: 4X0+42FTN6ZFQiCpU0LUUz9jtfGgyphhCU+pgUNgAQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:3b:4a:8c:88:5b:72:eb:36:21:53:75:de:7f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: Mar 1 22:00:57 2026 GMT
Not After : Mar 2 22:00:57 2026 GMT
Subject: CN=890adc3b41780ea5829f6c4d09c96aac3ceb46c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:38:55:66:d5:24:3f:38:57:1e:9e:cb:73:ea:
fb:0d:0b:7f:8b:9b:a3:ce:45:b4:5b:7b:3c:e6:3a:
03:c1:56:44:01:4e:b4:47:98:f7:98:36:c1:d4:b1:
da:ae:98:71:5a:f7:ed:b8:2a:22:d5:af:da:3e:93:
b8:83:e6:0f:6e:cf:91:40:92:5b:a3:02:8e:06:72:
39:34:fa:3a:08:d3:a5:da:f1:0f:ee:6f:75:06:0c:
59:86:3f:3d:4a:75:e4:4b:1b:b2:46:25:3b:31:9b:
82:06:2d:92:7e:2d:92:4b:d8:63:a9:c4:1d:61:96:
64:43:4a:59:36:a9:19:bf:47:94:97:fa:88:8e:0b:
98:92:9a:48:e7:ae:20:c4:d3:b8:56:1c:ae:68:c8:
bf:cf:7c:be:c7:fc:52:c7:56:1c:68:0b:86:68:d2:
a4:4b:95:16:e8:6e:54:37:81:37:77:c5:8a:45:37:
0e:ba:58:9f:9f:9c:5a:9a:ce:f8:2f:c4:71:5d:9c:
ec:fe:7d:6a:75:f8:03:2d:b7:74:81:18:9a:0e:0b:
ce:05:2e:9a:4c:40:5d:8b:0f:32:c8:f0:9e:fe:f5:
cc:ed:e5:1c:bd:dd:ac:68:cd:3c:a6:74:f3:e2:d6:
15:9f:5d:e5:02:09:4c:6b:bf:68:ac:95:15:da:71:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0A:DC:3B:41:78:0E:A5:82:9F:6C:4D:09:C9:6A:AC:3C:EB:46:C7
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f7:a8:cf:36:ef:a1:da:9c:f1:3f:17:6a:e6:15:76:44:24:
97:bc:91:8b:fb:8f:17:c4:d1:0a:41:a8:e3:b7:b9:d4:3c:25:
8a:86:33:85:16:39:75:30:db:05:d1:bb:66:4c:d9:40:19:6f:
1f:ac:88:7f:aa:6e:b7:62:d7:97:73:0c:25:c4:4e:e2:81:ba:
0a:c1:48:ef:19:06:88:fc:7e:ca:2d:69:ba:92:16:f9:cf:21:
71:95:87:0e:de:9a:81:97:b5:b9:51:82:e5:5d:84:98:4f:33:
66:e8:9e:63:85:e3:ac:37:af:1a:bc:40:6c:73:84:ca:cf:19:
4c:06:99:46:c1:ef:30:99:7f:42:eb:2c:12:9e:ea:b1:b1:7f:
ca:bb:4b:0c:b3:24:93:13:08:63:a3:67:d4:14:44:07:5b:45:
18:ff:2e:ef:b3:e1:e1:82:49:27:1b:61:cb:b0:84:ae:7c:53:
ed:3d:d5:ea:31:46:37:7c:11:86:6a:41:45:81:b2:35:36:86:
97:b8:6e:08:ee:fd:3a:0c:6e:31:11:5a:0c:c9:02:b1:d0:23:
82:07:e2:7a:2a:6c:7c:59:a7:25:0f:9f:4b:93:1e:44:7d:72:
86:0c:d0:67:49:8a:d0:6d:d8:b5:da:bc:0a:24:82:3b:83:32:
65:0e:54:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:53 2026 by rpki-client