Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: Z6LTlGFxB77zSBnVZgo/N/8SieHgsAz6d+hVmubi3YU=
Subject key identifier: 61:90:92:A5:A9:EC:38:C5:79:A8:F7:1C:9C:4F:4E:52:C1:C5:B3:01
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 019CA9EA9A1AC15E60AE9A4813B3F74A6046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 177C
Signing time: Sun 01 Mar 2026 15:00:50 +0000
Manifest this update: Sun 01 Mar 2026 15:00:50 +0000
Manifest next update: Mon 02 Mar 2026 15:00:50 +0000
Files and hashes: 1: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: Ar2N/yCAWsVbYBzQd5F3MKIDYX8teisxxoIOWwPVVZo=)
2: dfPlqF5Bgqr59PJATwAemysagHg.roa (hash: we4+dkipExQhf3pWjEb2Oj5eVIkZ4cWsxikVfB+DTTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:9a:1a:c1:5e:60:ae:9a:48:13:b3:f7:4a:60:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Mar 1 15:00:50 2026 GMT
Not After : Mar 2 15:00:50 2026 GMT
Subject: CN=619092a5a9ec38c579a8f71c9c4f4e52c1c5b301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:36:50:88:ba:e1:dc:bd:15:2f:bf:39:03:
96:f5:2f:1e:00:f0:96:16:67:11:54:cd:1a:e7:3b:
c5:b3:41:36:f0:87:b4:c6:c0:07:02:21:d5:c8:60:
23:d9:56:d7:51:42:45:a8:82:56:2d:e1:94:a0:8e:
02:06:4f:67:a1:ea:a7:7f:fc:30:ec:b0:4a:0a:27:
e3:27:ef:0d:d2:42:b1:95:40:ca:7a:5f:d3:76:fb:
4b:b1:62:cf:63:4f:9a:9a:3d:a7:bb:41:e6:ff:d2:
11:bc:b8:40:a8:84:6b:6c:aa:57:d6:7c:b3:b7:93:
3e:fc:b0:16:90:f1:67:10:4f:0b:da:7b:84:43:88:
b3:64:ce:72:1a:e7:f8:40:e9:14:48:1c:24:bd:a5:
03:15:d8:8d:e4:b4:fa:a0:3c:22:52:ca:a3:47:35:
82:19:5b:82:46:ba:bb:41:26:8c:79:40:f1:38:24:
f4:49:14:19:6a:8d:88:00:a3:f7:8b:b5:eb:69:e8:
15:fd:aa:91:16:77:b7:da:75:b9:6a:20:b2:62:10:
c6:55:6b:fa:68:28:41:c9:9f:f1:29:73:af:fd:13:
5a:17:32:6e:aa:c0:fe:66:3d:53:a0:08:84:a2:55:
1c:50:fa:1f:aa:cf:9f:56:5d:24:50:8c:50:21:00:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:90:92:A5:A9:EC:38:C5:79:A8:F7:1C:9C:4F:4E:52:C1:C5:B3:01
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:44:ae:64:da:b6:0d:a2:94:29:36:75:b2:e7:5a:d8:98:b3:
77:28:6f:40:49:ad:89:95:d8:65:7c:82:65:f1:f0:4d:c5:16:
c0:87:7f:d5:d4:c0:78:d5:a6:9f:c0:7e:07:31:64:b0:4a:b4:
01:1e:fa:33:3a:86:52:7b:37:59:a3:f9:b4:13:61:5f:f0:d4:
fc:72:5c:14:f6:94:67:92:58:40:32:e8:ef:32:1b:51:29:86:
21:b2:3c:69:a5:cc:05:c8:dd:0d:7c:c2:20:be:25:99:d4:49:
8e:8f:54:11:03:20:a3:8a:a9:5d:65:c2:32:78:55:fd:9b:af:
23:f0:47:c9:b8:90:f9:20:17:de:14:c5:c8:06:6a:e5:f4:cb:
86:8c:a0:6b:fa:e0:ae:cc:e3:49:3f:63:61:94:e3:1b:22:18:
38:24:c4:31:93:50:58:7b:b8:a7:4c:4d:b0:44:9c:97:cf:2e:
a4:fc:b6:05:1c:6b:09:bc:94:9b:e9:16:c6:d8:7d:32:df:cc:
48:f6:00:69:f0:b8:fd:2a:bf:e5:a6:85:c9:ce:fa:56:ce:16:
50:92:e1:da:6b:04:34:c5:fb:66:04:af:e7:d2:dc:e9:48:d0:
7d:e0:f8:85:e7:c2:dd:5c:93:0a:95:d3:04:dd:c2:0a:62:be:
fb:4d:5f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:46 2026 by rpki-client