Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: JoYQG2DAWOvg/S/eHlarr1oGbZO9PpMnNOLEu+nOoBk=
Subject key identifier: F8:18:34:DB:D9:5D:A6:03:8C:36:88:6D:8B:C7:D3:6A:70:16:71:18
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019FACACE0514BACADDC7EF4A04BAF2BCBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 177B
Signing time: Wed 29 Jul 2026 07:00:38 +0000
Manifest this update: Wed 29 Jul 2026 07:00:38 +0000
Manifest next update: Thu 30 Jul 2026 07:00:38 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: mjhUeAeF2T/yjquaMu9/khJvGywXD3Pofi+bqIqPZGo=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:e0:51:4b:ac:ad:dc:7e:f4:a0:4b:af:2b:cb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jul 29 07:00:38 2026 GMT
Not After : Jul 30 07:00:38 2026 GMT
Subject: CN=f81834dbd95da6038c36886d8bc7d36a70167118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:e1:d2:68:f0:8b:fd:c9:bb:9b:3b:f2:6a:
b6:9a:82:05:f2:d3:14:4a:fd:d5:7d:dd:bc:a7:48:
fb:1f:ef:fe:24:13:0d:b8:d4:32:dc:10:81:56:61:
86:99:da:43:02:57:6e:46:61:18:fb:93:63:b1:4e:
e6:f5:c4:7b:ef:cc:4c:4d:f0:bf:fa:e4:27:08:b7:
fb:71:a6:44:5c:a1:fd:49:00:06:e4:82:6d:68:bf:
06:05:06:6a:06:f7:44:ab:eb:19:f0:c7:e8:83:b1:
0b:07:50:c0:03:3f:34:80:1d:a6:89:e1:30:6d:14:
07:1e:26:57:ee:1a:b1:09:c6:87:e3:b6:a8:67:e9:
ec:06:18:c2:68:bd:80:ff:e2:3a:d7:89:fa:33:db:
22:5e:41:2a:0a:a6:ab:47:aa:6f:96:70:4f:49:1a:
6b:e4:89:2c:9d:44:fc:13:f3:33:86:e7:46:d5:07:
40:d6:f4:40:4e:12:b1:50:be:66:45:b7:da:b4:1b:
fc:6f:91:c4:c8:08:03:5d:62:c3:a9:31:11:c1:5a:
ee:05:8d:2c:ea:00:4c:d6:a4:ab:40:13:08:b6:45:
78:ad:ae:7c:4a:35:10:65:ca:43:44:94:a7:f2:e4:
16:16:70:28:ea:58:5d:6a:fa:5e:6c:a0:a2:90:a7:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:34:DB:D9:5D:A6:03:8C:36:88:6D:8B:C7:D3:6A:70:16:71:18
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0f:5f:72:44:46:a8:d8:35:12:6a:25:c6:65:ae:ef:91:1a:
e9:46:82:cd:a0:90:a7:09:67:52:4a:46:a1:71:70:0b:11:52:
92:f0:24:2b:0e:8b:29:e6:48:cb:85:94:eb:6f:28:df:6a:5d:
d6:a8:9c:68:84:d6:5c:ac:08:1a:75:94:b8:eb:bb:d5:33:0c:
f6:f4:53:94:5d:80:52:ce:b8:29:82:a2:02:56:f9:e4:b5:c3:
38:21:91:24:bf:97:fa:c8:5f:fb:75:f5:d5:1b:f6:f6:81:07:
31:89:e6:9f:87:f3:18:82:16:c1:51:37:44:17:75:24:58:6a:
0f:5f:14:df:c5:74:2e:5b:34:65:82:cb:c1:eb:a1:b4:f7:d1:
4c:de:17:e8:cd:76:4b:6f:fc:bc:7e:40:03:6c:f5:bc:6f:4d:
ed:e1:89:f7:b8:4c:a8:f7:bd:74:93:b6:b8:19:93:da:49:88:
c4:88:b1:b3:f6:d1:58:8d:34:fa:78:4a:c9:0d:62:aa:c3:8b:
fd:61:54:10:55:cc:4f:4c:d6:5f:2c:65:b8:3d:11:8e:d3:07:
fe:0d:46:da:e1:6f:d8:6b:37:19:94:d7:df:c0:6b:03:f9:87:
3b:22:55:3c:f2:c2:94:fa:67:00:81:46:93:b9:3d:43:94:e9:
43:3e:0d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:56 2026 by rpki-client