Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: ivILQ73Gs7hBI87cXKB49cFaHBGz/95wlacQNbHzXfs=
Subject key identifier: 1C:0A:12:B1:90:B8:78:3A:25:C6:30:1F:6C:64:97:6E:9C:F0:40:D3
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019EBF23DE1AB6C34244A5744BC908BFAF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 1700
Signing time: Sat 13 Jun 2026 04:00:59 +0000
Manifest this update: Sat 13 Jun 2026 04:00:59 +0000
Manifest next update: Sun 14 Jun 2026 04:00:59 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: 0WMS2U9x2aM0A1Dq+k+E6Sl0b9S/C0L7zNa1Arbedos=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:de:1a:b6:c3:42:44:a5:74:4b:c9:08:bf:af:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jun 13 04:00:59 2026 GMT
Not After : Jun 14 04:00:59 2026 GMT
Subject: CN=1c0a12b190b8783a25c6301f6c64976e9cf040d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:2a:4d:18:05:47:d6:70:9d:aa:7b:e0:7a:
6c:37:95:6f:5b:3e:5c:d5:56:80:c3:a1:f6:a5:58:
2a:ee:b8:95:1f:5a:c2:be:90:f8:d4:a0:e9:f6:7d:
27:6f:d6:58:99:09:2a:c4:87:76:4d:7d:39:e6:ed:
91:f7:bc:18:65:31:9f:78:f8:96:2a:62:39:9d:c3:
77:56:3c:11:8e:b0:99:b4:8d:9e:64:06:13:41:97:
64:26:52:3a:e2:b6:9f:55:58:18:da:0c:d1:4a:24:
43:27:a3:a3:ed:eb:7a:ad:a2:c4:cd:c9:f6:0c:85:
ed:85:33:63:d3:89:9e:d5:91:8a:34:9e:4f:6d:41:
bc:56:29:db:f9:60:2e:39:06:9f:ba:e8:9a:b0:56:
ab:4e:b4:3c:9d:61:a0:0c:aa:82:6f:ab:52:3e:d2:
f6:8e:25:44:97:d5:dd:83:c2:2c:cb:04:22:80:cf:
d0:fc:47:06:95:ea:f8:ee:5e:70:1a:91:94:ae:95:
37:e4:f5:06:81:e8:c2:f8:eb:2d:98:95:9f:62:f0:
f3:2d:0a:e3:f7:23:1e:be:0a:e9:5c:47:8b:1d:a7:
5b:ed:26:08:da:55:c0:4a:f1:05:76:5b:df:3d:cb:
0a:80:05:cb:5f:75:1f:68:f4:b2:51:b2:65:72:54:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0A:12:B1:90:B8:78:3A:25:C6:30:1F:6C:64:97:6E:9C:F0:40:D3
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:22:e9:b5:4a:3b:44:8a:c0:cc:ea:95:f2:49:b8:a3:de:1c:
65:b3:af:f9:f0:e5:8a:61:8c:e8:44:96:d6:17:d8:cb:f1:8c:
c8:85:5b:25:e5:99:3b:66:9c:20:ad:be:59:e8:38:60:90:e6:
1b:e6:d8:09:57:06:f1:a6:c1:ab:ad:89:f4:18:8f:0e:d5:a8:
f1:2a:da:92:1f:35:7d:8b:76:28:bc:eb:f8:4e:7e:5b:77:a9:
57:b4:09:99:00:94:0c:8c:c7:80:f0:4f:bd:09:77:ab:f3:e1:
34:15:f5:16:80:ad:e2:96:f3:80:8d:da:f2:91:36:05:a1:41:
f8:9f:ca:75:bf:d6:b2:20:c8:23:d5:f9:43:c2:e8:be:b4:09:
9d:25:db:a1:a2:12:37:d5:03:94:c4:a6:0a:87:c1:8a:cf:3a:
17:39:de:ae:fd:d8:cb:09:ee:29:25:f8:eb:58:c6:c0:f3:ee:
03:47:53:0f:fd:cd:fa:6a:6b:07:23:ef:9b:74:00:2a:fc:fd:
f8:8a:bf:4e:fd:4a:e2:92:7c:3f:da:d9:93:8c:62:ec:f8:68:
c4:60:6d:35:e2:22:b6:43:d2:06:43:36:74:85:df:3e:62:c0:
91:5b:7f:a7:33:81:0e:9a:41:15:6a:b3:26:53:ee:40:0e:ef:
c3:20:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:51:09 2026 by rpki-client