Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
File: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft (raw, json)
Hash identifier: FtzASua/V6BcThWYrL5k4dXVB9DaiHWVIXvYj82jk5o=
Subject key identifier: 42:35:25:B9:59:94:22:B0:C2:F9:51:03:EA:40:D7:FE:15:B7:A2:97
Authority key identifier: 6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
Certificate issuer: /CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Certificate serial: 019D98F41C91DF10D5955E67C392D696E549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
Manifest number: 064E
Signing time: Fri 17 Apr 2026 01:00:28 +0000
Manifest this update: Fri 17 Apr 2026 01:00:28 +0000
Manifest next update: Sat 18 Apr 2026 01:00:28 +0000
Files and hashes: 1: Je_y8wxQvqCgs-B_X_JDDy6e4N4.roa (hash: EsZORo0khgTEum2xHY+MdLQ0jyUTYVdE3AQ38NpK21M=)
2: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl (hash: g4OkHhfvyppamZMPd9g790rE4RpoE2as7sd0BOAjUZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:1c:91:df:10:d5:95:5e:67:c3:92:d6:96:e5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Validity
Not Before: Apr 17 01:00:28 2026 GMT
Not After : Apr 18 01:00:28 2026 GMT
Subject: CN=423525b9599422b0c2f95103ea40d7fe15b7a297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:ad:60:c6:27:73:7c:72:fa:ab:d4:84:d8:
0a:44:78:bf:4e:64:40:16:dd:14:a1:26:f8:45:35:
c2:ea:12:04:54:be:0a:74:82:59:8f:02:b6:24:56:
21:3a:a4:bf:16:df:97:e5:cd:a3:08:66:a7:ae:c7:
fd:6d:50:bb:1a:f4:8d:17:5b:85:6b:72:4a:98:86:
ee:99:4f:f0:e6:a2:7c:22:93:1f:ca:0d:16:4a:0f:
41:fa:3d:c4:b1:37:2f:a7:86:e8:ce:ab:6d:56:30:
9a:96:47:30:13:a4:f1:4e:c9:e9:bb:a3:b2:b6:56:
c2:1f:f2:73:ad:af:71:be:a4:99:69:d9:0f:1c:76:
75:ee:49:b0:e3:16:be:8c:26:ff:31:93:93:f7:58:
0d:14:5c:cb:14:f5:4a:53:78:c2:c3:b9:9f:81:76:
82:f5:80:49:ba:9d:a0:e1:b5:47:bf:53:7e:26:5e:
ee:2f:ee:ac:b0:e3:43:b1:08:71:09:95:9a:7b:5c:
74:f0:00:a3:27:c8:60:0c:ec:f6:b6:10:21:6c:e0:
ee:02:9c:f1:1b:d6:ac:8f:49:57:f0:db:e5:02:6f:
01:c4:4e:e8:b0:f3:a7:1b:89:ef:2b:30:90:fc:4c:
a1:a0:e8:0a:16:65:26:15:0b:54:7c:2b:94:1c:2f:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:35:25:B9:59:94:22:B0:C2:F9:51:03:EA:40:D7:FE:15:B7:A2:97
X509v3 Authority Key Identifier:
keyid:6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:56:71:a1:46:69:0a:42:43:30:6e:68:bf:3e:33:80:99:a1:
b1:a9:86:8b:86:5b:77:81:f9:50:9b:27:08:56:91:15:66:66:
6a:a6:82:8b:47:68:1f:b2:b8:cd:c8:5a:55:6c:da:cd:21:bd:
01:2b:7e:f3:be:6b:9b:51:dd:2a:22:b8:6f:99:e4:22:cb:27:
f5:d1:c4:fd:72:c3:00:75:b9:f3:13:1e:4b:a0:e7:36:6d:f5:
e2:83:a4:27:cb:65:c3:d7:66:97:41:50:d3:24:13:50:ee:b3:
cd:5e:60:ee:e7:33:57:c4:74:d3:13:58:d6:b2:cc:5d:95:75:
b2:f9:23:a1:06:a2:15:d7:fc:e2:d8:82:7e:5a:96:a4:74:d8:
5a:c3:db:88:f8:4d:c5:c2:d8:6d:57:61:3c:29:fa:16:52:30:
b4:43:8f:32:91:c5:a9:8b:78:9f:1f:20:77:d7:5a:cc:8a:c7:
93:ea:8c:8f:d9:98:bc:7f:8b:4e:b7:ec:e7:33:6c:d5:8c:5d:
a5:c4:f6:42:d2:14:43:74:ae:e6:56:f2:a0:6a:90:7d:80:46:
d3:d0:26:85:f9:f1:a4:bd:cb:9a:62:f3:30:64:58:c5:bc:0b:
36:b1:a6:86:d8:81:b1:da:0a:ea:01:f4:ea:e9:fb:9b:ee:9e:
d4:b8:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:29 2026 by rpki-client