Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: 0NIAqxPg9XsFaxwDag0TMl9OPXPDvG68WbxQOGHphxA=
Subject key identifier: EC:5C:DD:D7:F2:3B:1F:6F:66:09:7E:46:DE:7B:11:A9:67:CD:D6:9C
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 01A0C6A1675AA505E586D70E627A6EF7D8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 180D
Signing time: Tue 22 Sep 2026 01:01:01 +0000
Manifest this update: Tue 22 Sep 2026 01:01:01 +0000
Manifest next update: Wed 23 Sep 2026 01:01:01 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: fQ+bb7xkDl6cd/eT0GtoB4jC3KTu8od+0gOo7Ab4BlY=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:67:5a:a5:05:e5:86:d7:0e:62:7a:6e:f7:d8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Sep 22 01:01:01 2026 GMT
Not After : Sep 23 01:01:01 2026 GMT
Subject: CN=ec5cddd7f23b1f6f66097e46de7b11a967cdd69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:b4:b0:e9:0a:12:b2:27:24:8a:bb:f5:9d:
85:52:1a:cd:71:22:e7:29:34:91:b6:2a:30:d0:c4:
0c:f2:c7:0c:cf:f8:ea:7f:40:fe:13:5e:d4:0b:65:
57:75:c0:82:56:af:80:64:0d:a3:53:8d:07:f0:6f:
32:87:3e:d0:7c:c3:b4:6a:8f:d3:c4:5b:5c:e6:76:
52:ca:f3:98:39:b1:c9:f3:c4:e6:91:9e:aa:04:50:
32:66:ae:b5:7a:81:30:69:5c:2a:34:f6:23:e4:e3:
88:aa:8c:5a:b4:51:70:34:06:d8:bf:23:f3:4d:33:
72:bd:9e:00:8a:ab:84:60:60:2f:ec:24:bf:cf:8f:
3b:c1:ad:ab:fc:1e:c1:4d:22:0e:55:01:b0:49:58:
7a:fc:0e:b7:55:51:5c:0d:21:66:2e:a6:df:26:63:
6f:4c:d1:f8:64:bf:6f:2a:4b:26:68:0f:7b:57:1a:
f8:c5:6a:6e:a0:9b:fc:be:33:d3:77:23:05:b0:9f:
8f:be:98:3c:3d:43:83:fe:67:d4:96:fd:55:66:d5:
cf:fb:d6:0f:d3:3f:95:25:0d:12:e5:e6:d6:df:1a:
ef:76:90:68:a0:76:30:1e:20:58:af:f1:57:1c:e7:
8b:f4:f4:7c:6e:61:4f:62:51:50:a5:9a:43:9b:a8:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:DD:D7:F2:3B:1F:6F:66:09:7E:46:DE:7B:11:A9:67:CD:D6:9C
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:07:81:63:69:df:dd:9c:91:b5:78:39:97:d7:49:ad:e0:43:
38:f4:3a:a0:32:c4:5b:37:82:64:e1:98:00:51:88:47:07:1a:
2e:7e:64:51:e6:64:a3:53:15:56:36:9d:74:c0:ec:18:b7:f6:
78:e7:12:2c:08:79:4c:64:14:46:8d:68:40:0d:fb:bd:ee:eb:
b9:ee:7b:01:c6:2b:9a:8f:ea:aa:6b:b2:db:75:a4:61:26:c4:
fa:34:fa:d4:7c:7d:4f:bd:e5:2e:6c:40:ca:4d:dd:1c:6a:a5:
60:d2:0a:12:67:f8:1f:51:1f:35:5e:5d:95:47:15:51:59:db:
89:fc:ce:3f:8c:03:45:90:a7:09:2b:3e:b8:d6:2a:db:ca:4c:
a7:96:d7:f1:21:f9:4b:6e:64:ab:cc:d0:1b:69:a3:30:66:d4:
29:c0:1a:d3:1f:a6:ae:38:5a:94:3f:16:bd:41:95:7f:02:bd:
64:90:14:23:9c:48:64:36:cf:b8:0e:90:d0:d6:2f:4c:1e:3b:
a0:88:9b:39:d5:4d:58:7c:02:67:01:33:a0:19:61:34:96:d3:
f0:a3:d7:c9:f5:91:c2:d0:2d:75:bd:cd:cb:39:30:ea:1e:ff:
dc:d7:e9:06:fa:ec:5a:8a:8f:64:4f:86:ed:c5:55:0c:1c:13:
2f:4b:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:54:19 2026 by rpki-client