Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: Y/4nefvcM9aZb8JOhLTve/Itf1hihbYOmsBUCKlKo28=
Subject key identifier: A7:4C:E2:A8:2F:64:AA:DB:2C:97:F9:C8:9B:94:DC:B0:81:F5:BA:91
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 019FAA874B6DEA2C39ED5BFE483EFA4EA8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 17B8
Signing time: Tue 28 Jul 2026 21:00:21 +0000
Manifest this update: Tue 28 Jul 2026 21:00:21 +0000
Manifest next update: Wed 29 Jul 2026 21:00:21 +0000
Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: 6GQto5w1oiyt4XpTnVvl4oSoHBfO5N/YbqogIEtvXWk=)
2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:4b:6d:ea:2c:39:ed:5b:fe:48:3e:fa:4e:a8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Jul 28 21:00:21 2026 GMT
Not After : Jul 29 21:00:21 2026 GMT
Subject: CN=a74ce2a82f64aadb2c97f9c89b94dcb081f5ba91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2e:13:cb:2e:32:24:32:62:3c:98:fc:7e:63:
14:47:0b:d2:7d:a4:6d:13:66:b9:eb:45:89:b1:27:
de:26:f6:bf:ac:00:37:ac:87:e2:e1:3f:46:68:42:
a6:de:0d:b5:6f:70:5b:94:7c:96:59:06:a6:20:e7:
fc:2d:a5:df:b3:21:2d:7d:d4:a9:d4:c0:3e:6f:07:
00:59:78:fe:7f:60:de:64:7e:d9:17:ee:88:84:81:
81:3c:f8:01:24:39:6a:0d:d7:4a:99:58:dc:3c:7c:
b3:9d:a0:0c:a6:d3:f5:d0:6d:51:51:7a:e6:e3:fa:
da:04:26:d7:3e:b2:b6:b7:76:17:50:75:0d:05:5c:
f7:d7:a5:34:92:55:dd:2f:9e:90:27:65:66:75:93:
4b:ea:ce:1b:a4:af:99:0b:45:62:3e:28:80:0a:f5:
45:8d:d6:a6:4f:23:08:8a:a4:53:e2:d9:b7:ec:eb:
b1:31:52:b0:49:9c:06:bb:cf:d9:90:70:c5:5c:ca:
0e:0f:76:5c:10:34:6d:3d:18:f5:1a:96:3d:11:9b:
6f:51:49:0e:77:5d:f1:44:15:37:c3:13:88:b9:29:
43:0b:3d:f2:06:0f:ad:77:67:79:c6:5b:04:56:d7:
76:80:a5:63:c8:49:08:20:2a:d4:1e:d7:1b:3e:e1:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:E2:A8:2F:64:AA:DB:2C:97:F9:C8:9B:94:DC:B0:81:F5:BA:91
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0f:27:d3:4b:c3:78:95:ba:b7:58:7f:42:1c:3c:ff:c2:e8:
d8:16:12:a6:12:73:83:ec:57:e3:59:0d:18:dd:dc:bd:67:70:
b7:60:69:49:43:04:56:31:eb:54:1f:12:5d:81:02:15:14:39:
88:30:1a:ed:a0:1f:6a:81:b3:5c:1b:5f:38:d1:d5:e7:36:db:
7a:e1:07:e3:09:71:8a:01:17:b4:a2:e1:bb:d0:b3:03:51:ee:
8c:f7:21:44:65:9e:fe:7d:2d:af:0b:61:b3:e1:5b:2e:4b:8c:
ac:1d:56:ea:6e:22:c5:8a:35:2d:f3:4e:0e:d7:4c:ef:bf:93:
4b:39:fb:9a:82:56:62:1a:d2:bb:37:7e:4e:35:40:f4:41:74:
54:9a:94:79:9c:82:46:1e:85:33:ee:15:5e:55:35:b3:cc:4f:
d4:d3:5a:63:05:69:8a:d0:ca:85:a4:a8:36:5f:4b:ae:19:27:
41:8c:be:9e:b6:1a:a4:5f:82:18:96:5b:12:3d:46:54:41:4c:
85:0e:92:e0:92:2e:47:48:90:9e:ff:8e:30:01:41:bb:b1:ff:
ff:3e:5c:ce:3a:13:f0:62:aa:02:b3:3d:6e:41:ac:d3:dc:32:
b3:3c:37:1c:0e:52:4c:87:87:30:4d:06:12:4a:3b:05:30:99:
f2:c2:24:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:15 2026 by rpki-client