Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: wWoTvmwK034dKi5+naUc2EXVwJuoH0VaG+2ArlDtRzU=
Subject key identifier: F0:B2:30:14:F5:DA:A7:FF:11:6A:BC:BE:32:2C:CC:BF:B1:54:1A:77
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019D9998EACBC9245DBA41F4E3F8DA18E015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 1668
Signing time: Fri 17 Apr 2026 04:00:28 +0000
Manifest this update: Fri 17 Apr 2026 04:00:28 +0000
Manifest next update: Sat 18 Apr 2026 04:00:28 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: yJzwaOWC62BjPJUGZDCoNeCJjr1iI9NLL5MmSH28YVU=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ea:cb:c9:24:5d:ba:41:f4:e3:f8:da:18:e0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Apr 17 04:00:28 2026 GMT
Not After : Apr 18 04:00:28 2026 GMT
Subject: CN=f0b23014f5daa7ff116abcbe322cccbfb1541a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:8d:7b:0d:55:40:76:f0:66:8e:ac:74:8c:
0c:1a:e7:46:3c:b1:6d:2b:f7:fa:69:8c:2f:c7:04:
6a:7e:c8:4b:c2:62:b2:4a:87:f9:a3:27:24:b5:62:
52:1a:02:99:3c:cd:e7:cf:dc:3d:f6:0f:47:e0:bb:
43:b8:fc:cf:41:2f:b7:4f:81:fe:ea:e0:a9:e7:75:
a2:06:c1:34:4d:15:0c:7c:a1:0f:f1:dc:df:0d:39:
dc:9a:fe:76:08:b6:bb:d8:c9:fe:30:87:d6:a7:6d:
a0:fc:b4:67:26:7f:47:ca:bb:0f:ab:8f:42:b5:ab:
b4:11:54:d2:c2:0a:f7:e4:c7:b2:13:fc:0e:c3:6b:
62:29:b1:94:39:38:65:d5:3a:0b:d6:db:be:92:aa:
c0:6f:0b:6b:af:02:58:72:16:1c:e6:2c:03:58:ba:
d7:30:47:8a:2e:36:dc:80:f8:bc:2a:4c:95:1f:71:
e9:ce:e0:04:70:09:39:b9:c7:a4:58:03:20:e2:33:
10:bb:22:02:3e:40:6d:e5:c8:1b:76:66:06:d9:b6:
79:96:fd:68:73:c4:ae:3c:4b:cf:cc:32:da:0a:9c:
c6:e2:eb:6e:77:a8:9e:6e:66:07:76:a7:4d:da:e7:
e0:74:4a:88:c0:6a:dc:a6:f4:24:df:8d:0c:21:43:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:30:14:F5:DA:A7:FF:11:6A:BC:BE:32:2C:CC:BF:B1:54:1A:77
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a2:78:f2:6b:e2:e5:7b:6b:b2:fd:ac:a8:1b:7d:ab:1e:84:
c2:a9:bf:2c:47:c8:e1:ef:31:6b:f2:e8:51:69:06:b6:8d:5d:
31:d7:a0:71:d9:20:48:90:84:18:d4:d7:b5:06:73:0b:51:d9:
32:6c:83:b2:91:9e:03:b7:e7:6f:25:1f:c8:27:95:5a:7b:ce:
40:5b:35:4b:f0:a0:bb:5a:bb:9e:38:dd:81:2e:67:8f:94:d2:
d7:f8:bf:09:96:2b:08:2b:ff:4d:49:9f:04:a9:76:75:b4:a5:
7d:5f:c5:c9:fb:7a:31:b2:0f:bc:70:ae:da:63:79:b0:8d:72:
09:1f:c7:cf:57:4e:a6:87:04:fd:c6:cb:fe:e5:49:bc:2d:02:
2e:1a:c3:1c:34:ca:ba:8a:9c:12:c2:f4:a6:1a:94:5f:2b:6f:
c8:d9:f7:31:2d:be:92:15:9a:60:be:d3:8d:b0:60:9a:15:5e:
e2:c0:52:19:11:01:5b:47:b4:21:1b:5b:e9:2b:5b:92:51:50:
9e:ad:72:e1:bc:5e:fe:50:b2:9b:27:7a:b8:3b:1a:3c:cf:85:
cb:5b:8e:0b:93:76:b7:aa:88:71:d0:6f:ad:15:34:62:78:37:
d4:70:37:c9:b0:9d:3e:58:ac:e7:8f:07:53:42:11:c3:ce:11:
20:7b:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:41 2026 by rpki-client