Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File: Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier: ETs3D52eR6vcFIjJMYOXjH/C2qZPleyA5wLcaVpA7SA=
Subject key identifier: 1D:DB:64:BD:1F:E0:E3:7B:97:18:0B:4B:30:A3:57:85:E0:25:DF:D4
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer: /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial: 01A0C40DA7988B9EE9718DFD210C5606109F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 13:00:24 +0000
Manifest this update: Mon 21 Sep 2026 13:00:24 +0000
Manifest next update: Tue 22 Sep 2026 13:00:24 +0000
Files and hashes: 1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: 9YdxKu7bvhF995p9vbbPxJnOAx1BycY3EbtOKG+32kM=)
2: yko62gQUpDznk6pbTXdM7BFWgrg.roa (hash: 4X0+42FTN6ZFQiCpU0LUUz9jtfGgyphhCU+pgUNgAQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:a7:98:8b:9e:e9:71:8d:fd:21:0c:56:06:10:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Validity
Not Before: Sep 21 13:00:24 2026 GMT
Not After : Sep 22 13:00:24 2026 GMT
Subject: CN=1ddb64bd1fe0e37b97180b4b30a35785e025dfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:58:04:85:7e:17:12:b2:4f:77:e9:f1:82:54:
bf:9c:f6:73:2f:dc:8d:66:65:39:48:1b:4f:fe:97:
8c:a4:9c:e9:b6:9f:8f:33:83:39:44:08:33:bb:5f:
14:49:b8:f9:f2:09:57:62:d4:1d:42:a0:cd:1a:1d:
3b:63:82:25:68:4c:e4:58:bb:ae:9a:73:b5:0a:e2:
71:33:01:ef:8b:4e:bf:8d:d5:48:a7:55:76:bc:6d:
85:83:56:a8:2c:aa:16:dc:bf:fc:e0:31:59:14:4b:
a3:93:73:40:84:08:bd:f1:20:ef:2f:b1:ce:4f:05:
1c:89:4e:76:3e:05:d9:48:b4:f5:b6:7b:1f:a5:b4:
6c:15:f7:b8:50:ed:18:da:83:de:82:bc:13:20:7b:
f7:c0:b6:c3:cd:0e:37:db:c7:36:21:e2:ac:0f:b2:
37:09:23:e7:c5:54:89:94:cc:a8:96:70:5a:50:aa:
0e:e0:a5:e3:62:fe:aa:04:77:80:3a:eb:ae:f7:2f:
92:30:83:0d:0d:70:32:ff:fe:e0:c6:38:b5:d4:25:
42:92:f9:1c:89:24:ae:5d:42:41:f9:ba:7a:3f:50:
9e:d4:9c:4b:ba:af:b8:f5:6f:38:b8:17:fa:e4:78:
6b:fb:df:a9:d7:6e:23:f7:71:34:ed:ca:23:51:38:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DB:64:BD:1F:E0:E3:7B:97:18:0B:4B:30:A3:57:85:E0:25:DF:D4
X509v3 Authority Key Identifier:
keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1e:96:f6:f7:00:f9:ce:7c:6e:54:5f:5e:c2:70:5e:38:76:
bb:97:fd:3d:50:ed:91:a2:06:12:1c:8b:64:f9:09:fd:b5:22:
f6:3e:85:d9:29:b3:64:13:25:94:81:a6:8f:ac:7d:1d:50:dd:
f1:24:de:4f:7e:18:03:3f:0c:d1:96:49:62:00:cb:2e:b7:64:
c7:f9:8a:10:27:3c:30:fb:67:80:0c:f9:6a:0d:8e:59:4c:fc:
7e:5f:da:c2:6c:72:f2:b3:ce:33:4c:46:37:cf:75:4a:e7:48:
8c:a5:d3:e3:8b:f2:4d:90:54:74:7b:01:82:6a:96:a4:14:da:
e8:f3:78:12:6c:03:24:7f:61:31:6f:3e:e8:1d:74:91:52:55:
d3:20:bc:74:84:d0:f4:09:9a:91:84:b2:aa:12:3f:16:e8:3d:
44:c4:36:d6:f8:2f:4a:91:db:03:43:de:4f:d8:91:46:e8:7d:
ff:06:3a:1f:2a:7f:7b:16:ff:8f:dc:b1:e0:da:15:52:03:09:
80:eb:95:89:37:4c:ec:4b:5c:7a:89:66:d9:9a:e7:3a:22:30:
22:c1:86:56:7a:7a:d4:f9:28:ae:a6:31:91:34:40:be:2a:2c:
ad:d2:b5:84:3e:9f:66:4d:9f:cd:8f:75:fa:8e:4b:df:ad:2c:
18:56:61:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDaeYi57pcY39IQxWBhCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NWM5ZmVkYjViNTQ0ZjY5NmVkNGRhZjEzNWIwMmRlZTZk
OTdhZjYwHhcNMjYwOTIxMTMwMDI0WhcNMjYwOTIyMTMwMDI0WjAzMTEwLwYDVQQD
EygxZGRiNjRiZDFmZTBlMzdiOTcxODBiNGIzMGEzNTc4NWUwMjVkZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilgEhX4XErJPd+nxglS/nPZzL9yN
ZmU5SBtP/peMpJzptp+PM4M5RAgzu18USbj58glXYtQdQqDNGh07Y4IlaEzkWLuu
mnO1CuJxMwHvi06/jdVIp1V2vG2Fg1aoLKoW3L/84DFZFEujk3NAhAi98SDvL7HO
TwUciU52PgXZSLT1tnsfpbRsFfe4UO0Y2oPegrwTIHv3wLbDzQ4328c2IeKsD7I3
CSPnxVSJlMyolnBaUKoO4KXjYv6qBHeAOuuu9y+SMIMNDXAy//7gxji11CVCkvkc
iSSuXUJB+bp6P1Ce1JxLuq+49W84uBf65Hhr+9+p124j93E07cojUTjz1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3bZL0f4ON7lxgLSzCjV4XgJd/UMB8GA1UdIwQY
MBaAFAZcn+21tUT2lu1NrxNbAt7m2Xr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTkt
MThkNjkwMzY3NTNiLzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84MWIyNzYtZTczNi00MTcyLTgwYTktMThkNjkwMzY3NTNi
LzEvQmx5ZjdiVzFSUGFXN1UydkUxc0MzdWJaZXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsR6W9vcA
+c58blRfXsJwXjh2u5f9PVDtkaIGEhyLZPkJ/bUi9j6F2SmzZBMllIGmj6x9HVDd
8STeT34YAz8M0ZZJYgDLLrdkx/mKECc8MPtngAz5ag2OWUz8fl/awmxy8rPOM0xG
N891SudIjKXT44vyTZBUdHsBgmqWpBTa6PN4EmwDJH9hMW8+6B10kVJV0yC8dITQ
9AmakYSyqhI/Fug9RMQ21vgvSpHbA0PeT9iRRuh9/wY6Hyp/exb/j9yx4NoVUgMJ
gOuViTdM7Etceolm2ZrnOiIwIsGGVnp61PkorqYxkTRAviosrdK1hD6fZk2fzY91
+o5L360sGFZhjg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:39:55 2026 by rpki-client