Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: FEK9yAKmYzdlQCJ72OqYa1+xuotB4LrGRzT/5Q1jSJU=
Subject key identifier: 54:24:FD:C0:13:32:4B:EF:32:03:40:9E:7F:37:17:23:89:DD:4B:8A
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 019D9962B0D0CBF0B65ACA41740D99399EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 17F8
Signing time: Fri 17 Apr 2026 03:01:15 +0000
Manifest this update: Fri 17 Apr 2026 03:01:15 +0000
Manifest next update: Sat 18 Apr 2026 03:01:15 +0000
Files and hashes: 1: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: M+TMVI391z3OXEPOovF05PHuIZvhkhy1B6nhRtSjQQ0=)
2: dfPlqF5Bgqr59PJATwAemysagHg.roa (hash: we4+dkipExQhf3pWjEb2Oj5eVIkZ4cWsxikVfB+DTTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b0:d0:cb:f0:b6:5a:ca:41:74:0d:99:39:9e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Apr 17 03:01:15 2026 GMT
Not After : Apr 18 03:01:15 2026 GMT
Subject: CN=5424fdc013324bef3203409e7f37172389dd4b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:a5:08:ff:4b:74:ee:b9:9a:02:7b:a1:ed:
ba:aa:48:25:0e:41:07:07:c9:10:54:4b:48:bf:61:
d5:13:f4:57:7a:6d:13:8b:1b:bf:b6:37:33:11:10:
1b:a4:ed:c1:8b:1c:a7:ad:c5:13:69:f0:ba:57:95:
08:1c:67:55:fa:a8:c5:14:07:54:60:c8:b3:0f:55:
57:b5:73:d6:fa:42:09:bc:39:8b:3f:12:fa:7b:b2:
87:2f:94:44:d8:b6:38:db:74:3d:06:72:17:73:a3:
20:2f:b2:43:6b:1c:aa:68:14:b1:ab:6b:63:f9:03:
ac:42:d0:db:de:96:7b:af:c7:21:8b:bb:72:ca:95:
2c:40:a5:99:42:90:29:2d:02:84:04:20:63:6d:c6:
33:9c:7b:5e:eb:d3:0d:f7:e0:53:40:2d:45:df:9a:
0b:3a:79:9b:bc:27:46:1c:3a:89:3d:5b:65:7b:d1:
8f:a0:ae:69:2e:31:8e:e1:20:68:a9:fd:09:61:04:
29:b3:71:92:fc:0c:11:6f:a7:6e:10:ee:d0:21:b4:
d1:b4:3d:9f:7f:46:86:2a:f4:7b:18:84:1c:7b:fe:
45:c1:79:24:bb:98:99:29:4e:47:58:8b:73:bc:19:
63:2f:da:00:29:30:88:c6:0e:3d:3b:77:3d:06:c3:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:24:FD:C0:13:32:4B:EF:32:03:40:9E:7F:37:17:23:89:DD:4B:8A
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:14:03:fd:cc:46:65:3c:2e:cd:12:6d:21:55:e6:93:df:6b:
ad:65:6b:3d:14:54:b1:68:a0:fb:41:3b:62:b4:73:f0:61:da:
87:71:9c:5d:1d:37:6c:0c:12:f1:70:38:34:3f:4a:94:3c:0b:
c9:6f:dd:de:66:3c:e4:37:aa:1f:1c:4d:10:8a:1b:5b:6a:29:
82:be:a6:92:9f:26:60:3d:dd:03:c2:55:e9:0f:ec:18:52:4e:
1f:b2:4f:30:c9:01:51:5a:a9:d6:88:b5:d3:69:38:ff:ed:eb:
6b:f4:e2:a9:32:fe:1b:5d:e0:35:33:a5:71:7a:6b:88:fb:f0:
0c:b2:fc:83:c9:e9:96:8b:d9:ad:85:b6:2a:0d:63:02:f7:6f:
cb:3c:9d:eb:89:db:e6:bb:10:81:01:09:24:62:9d:99:ec:97:
0b:d6:54:d4:99:0d:43:e9:83:5e:f2:0a:59:22:c4:3f:0b:23:
de:3f:ed:19:f9:d7:39:ee:c0:9b:ba:b0:96:89:ea:c4:2a:ff:
fd:5f:49:a0:86:99:b9:76:8a:5e:6c:1f:61:66:41:93:84:74:
76:6a:94:26:f0:cd:94:d2:a5:c6:03:f0:e5:db:21:d6:25:b0:
d7:d5:70:63:47:e2:84:75:c8:95:10:76:b2:f8:21:cf:b4:a4:
5d:56:93:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:37 2026 by rpki-client