Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: xXc5AhYgeaMkHq/LI9YIslNEwVe0O4ySmLzjL1zwPpc=
Subject key identifier: 94:E7:AF:CC:20:B6:AD:A2:3C:8F:13:FA:FC:9F:A5:E6:76:CF:2C:B8
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 019FAC760482840CC52AD5CB29D509F552C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 17B9
Signing time: Wed 29 Jul 2026 06:00:43 +0000
Manifest this update: Wed 29 Jul 2026 06:00:43 +0000
Manifest next update: Thu 30 Jul 2026 06:00:43 +0000
Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: ulTrmVzrUhSsoQRTOeWvDAHmGmWr5VhqMMxqS2IyE18=)
2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:04:82:84:0c:c5:2a:d5:cb:29:d5:09:f5:52:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Jul 29 06:00:43 2026 GMT
Not After : Jul 30 06:00:43 2026 GMT
Subject: CN=94e7afcc20b6ada23c8f13fafc9fa5e676cf2cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:9e:14:a5:b1:80:42:53:d3:29:8d:db:3e:
b3:ee:ff:5a:ef:81:39:5e:4d:3b:03:1d:1c:5f:8a:
b2:fc:1b:06:5d:28:d1:eb:38:90:f3:4e:17:a1:e6:
68:34:61:d3:df:9b:b9:d3:be:b4:7b:8a:d0:42:99:
4d:d4:42:35:c6:44:e8:1d:b8:af:4c:7e:ba:2c:66:
db:0a:b5:69:05:53:f9:c4:b4:84:ed:de:3d:cf:af:
0b:0b:0a:df:ed:fb:72:2b:0a:82:1a:83:91:29:dd:
ff:83:79:54:83:ae:0c:ae:e4:1b:2d:15:14:2b:97:
47:9d:2d:a4:11:98:d1:bd:81:7d:87:44:ef:ba:4a:
8c:00:f6:80:dc:ee:0b:eb:08:24:37:11:6f:2c:7f:
b2:17:06:fb:46:72:71:f2:8b:e6:76:d5:92:8d:37:
be:68:9a:2b:71:98:d4:38:dd:e1:41:51:96:08:0c:
78:cf:87:91:6c:58:8e:5a:cf:ee:6b:ab:f1:05:af:
08:86:29:0a:7e:aa:e7:75:ab:98:1c:10:e1:e4:fa:
f8:5a:31:21:6f:54:cb:04:ea:c3:70:ce:24:f9:c5:
ae:b2:a4:4f:67:d7:7a:c6:7f:28:bb:a0:21:b5:a7:
5a:8b:0b:4e:44:f8:87:cc:be:9e:6f:ee:d4:8a:1c:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E7:AF:CC:20:B6:AD:A2:3C:8F:13:FA:FC:9F:A5:E6:76:CF:2C:B8
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:43:76:81:8c:c1:d7:b9:fa:5c:ab:6e:31:28:3f:90:8e:2c:
3e:53:bc:e7:fe:e1:2d:94:03:df:7c:41:32:49:b5:d1:5a:81:
99:1c:9b:7e:21:48:f3:f6:fb:01:3c:cb:e9:61:41:7a:72:38:
81:22:f5:e4:e9:e0:55:16:5a:33:bb:7b:b8:72:fb:9b:e8:bd:
69:d0:28:67:05:9a:47:04:af:d4:13:3a:8f:22:8f:2b:74:06:
a5:65:54:9d:c5:4c:16:b1:40:31:cb:76:e2:fd:e0:43:44:31:
d9:f0:13:b4:c1:d3:bf:cc:9a:27:f6:1c:3b:08:f8:dc:ba:90:
95:39:10:67:8d:a0:6a:cd:79:55:8e:59:46:de:23:93:65:27:
5b:e9:3d:58:be:8b:04:4c:bd:be:e1:31:64:f1:bd:b2:69:ed:
4c:a8:f3:da:50:0a:2f:fe:81:7e:89:1b:87:37:54:b8:1f:53:
9c:8e:de:e5:ee:f2:ea:d9:7a:a2:31:ea:70:9a:56:bb:08:51:
b8:77:ce:3b:1f:84:9e:74:de:69:03:9a:13:ae:28:01:13:aa:
65:5d:44:37:5b:51:1a:bd:fd:cd:a3:2a:2b:05:25:4a:f2:f2:
25:d0:8b:0c:33:e2:32:07:3d:4c:c1:ff:b7:fc:bc:79:f5:bd:
1f:e0:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:22 2026 by rpki-client