Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: l/vupCYFd5972ZjRwrEaVQwcJypaFCGYM9K/YFjqjyY=
Subject key identifier: C4:A2:CC:44:C7:F4:11:A6:6F:00:92:30:35:9B:D3:3F:30:6D:98:06
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019FAABE8218EA04E00F0C81FBCEA6E1B295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 177A
Signing time: Tue 28 Jul 2026 22:00:39 +0000
Manifest this update: Tue 28 Jul 2026 22:00:39 +0000
Manifest next update: Wed 29 Jul 2026 22:00:39 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: 06DjbfADWefg7e+uMhekFlRaAh4cLP3AhlMlWDY98Vk=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:82:18:ea:04:e0:0f:0c:81:fb:ce:a6:e1:b2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jul 28 22:00:39 2026 GMT
Not After : Jul 29 22:00:39 2026 GMT
Subject: CN=c4a2cc44c7f411a66f009230359bd33f306d9806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:7e:96:fd:fa:6c:0b:7d:51:10:59:78:9c:
13:c5:a1:42:8e:77:e2:c9:a5:a5:fd:75:a9:cc:0b:
e1:59:56:b1:9e:d7:6f:b0:50:9c:61:14:39:4b:fa:
c5:0a:05:31:94:b5:d2:9b:47:e8:25:66:e3:34:7b:
71:56:7e:de:55:6f:16:f9:45:8f:2d:5e:68:f0:b3:
ef:bc:06:44:ec:da:24:32:33:cb:78:67:ec:ba:fc:
bc:a9:9b:9a:74:03:38:a9:30:f2:b1:b5:68:5f:e7:
a3:23:c7:6e:dd:0d:3c:e8:75:2a:36:ed:7a:d4:19:
d3:03:b9:30:d0:73:3a:b4:9d:db:2a:88:88:ea:64:
31:bf:a7:73:3b:b8:c8:6c:ab:9f:e3:eb:c9:1e:03:
0b:0c:cc:e2:ae:aa:9a:a4:1b:1c:90:12:d8:a9:8c:
b6:1c:4c:dd:01:ad:84:99:94:92:30:4b:83:9f:b6:
8b:17:22:d8:e6:a2:84:8e:44:55:f7:4c:e2:ad:d9:
e9:84:7a:c8:00:a7:a4:4c:e8:7c:c5:9c:b7:a8:5e:
6b:8c:a6:b8:e7:c4:91:19:2f:4e:0f:39:33:aa:68:
88:e1:70:ff:c2:8c:91:42:40:8e:a8:0b:f0:f2:e4:
22:3f:95:a2:6d:de:cf:71:ad:b5:d7:b7:30:1f:7d:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A2:CC:44:C7:F4:11:A6:6F:00:92:30:35:9B:D3:3F:30:6D:98:06
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ae:f1:5f:1e:21:8d:8f:7d:27:ee:88:11:34:76:a6:95:84:
c4:d6:9e:88:7a:ba:51:e0:ad:de:cf:81:8c:60:de:3f:e2:6f:
3b:33:4a:54:ab:42:53:3f:53:15:4b:ac:0f:ce:02:28:be:20:
2c:b4:2d:f3:24:25:68:d7:05:05:d1:70:83:d3:79:14:9b:43:
27:9a:42:20:c2:8f:71:7b:83:01:9c:c5:ab:36:bb:cb:ef:67:
14:95:6b:37:65:f0:dd:cc:0e:f8:fc:13:7c:ae:73:f9:37:96:
93:88:80:24:b9:da:5f:31:94:16:31:5d:8b:e3:35:36:fb:96:
b3:93:9c:f5:e1:70:1f:6b:4f:75:bd:e6:f1:1b:12:46:66:e1:
0a:7d:2b:74:71:86:2f:9c:a9:e6:05:15:df:ec:7c:6d:35:bd:
43:ae:e2:90:92:fa:be:af:2b:b2:dc:76:31:75:2d:10:6b:bd:
17:c4:44:ba:e0:f1:18:ab:43:6e:4c:f6:ad:ba:1a:06:72:71:
42:74:fd:9f:8f:f4:5a:36:04:d9:59:ec:01:1f:88:ef:f2:71:
01:da:7c:90:56:50:b0:fa:e6:39:9c:0d:88:8c:f5:e3:fe:cc:
7f:2a:b5:3f:54:c8:c0:e9:95:9c:1b:23:2d:48:ed:97:0a:3b:
ea:66:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:12 2026 by rpki-client