Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: YAdi5j4M1hg1f4pLkQL+YidOxHpa4RW29VIlZiU/y7c=
Subject key identifier: 5A:AE:B0:35:F7:6C:64:C5:43:2E:07:C3:BC:42:18:C2:44:F2:81:A6
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019EC112355C6AC74C592AD3AA0162C8B600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 1701
Signing time: Sat 13 Jun 2026 13:00:56 +0000
Manifest this update: Sat 13 Jun 2026 13:00:56 +0000
Manifest next update: Sun 14 Jun 2026 13:00:56 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: oZ0oXLJ/dzAdOChA6PMoxyv3f0d0ShoXQRxXXvjr6Bw=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:35:5c:6a:c7:4c:59:2a:d3:aa:01:62:c8:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jun 13 13:00:56 2026 GMT
Not After : Jun 14 13:00:56 2026 GMT
Subject: CN=5aaeb035f76c64c5432e07c3bc4218c244f281a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:58:42:77:f5:5f:ce:28:38:f9:22:fa:6a:1f:
b6:ed:86:61:a4:05:37:b0:e6:25:d1:42:2e:d7:38:
fd:98:66:6a:fd:45:1e:5d:71:7f:a6:ea:dd:0a:ec:
a4:54:42:ec:d1:04:b8:2c:3d:8c:70:f0:c3:29:7b:
0d:c9:5b:24:6b:b6:65:07:05:60:42:07:e9:4a:e2:
ca:a9:43:fb:64:f5:61:c6:e5:19:ab:f2:b2:35:b2:
78:e7:8f:5b:df:6d:a9:0c:9c:e0:64:37:e9:9d:77:
c6:da:d6:ca:f0:c5:c2:4c:ca:d5:5b:9b:0a:16:4e:
c3:31:c5:88:ab:9b:f9:2f:26:9f:a2:f1:df:b6:00:
3e:90:c4:f1:65:74:b6:53:46:db:5b:a6:61:82:cb:
ee:6a:f5:d2:0b:2b:38:76:89:d7:98:06:c4:3d:b9:
d7:31:b6:60:c1:b7:4c:97:7f:ee:a3:f3:b2:a5:9e:
5d:8a:52:54:cd:c6:f2:8a:ae:60:ba:49:0d:28:64:
d7:63:ab:83:da:d9:6d:df:25:66:88:41:af:0a:82:
77:6c:0f:87:7c:6a:87:d6:30:85:e1:64:c0:5b:a4:
c4:57:9b:14:68:71:ac:16:d7:b8:47:43:0e:30:b6:
eb:15:91:15:35:ee:38:32:9d:17:ae:89:22:fa:4d:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AE:B0:35:F7:6C:64:C5:43:2E:07:C3:BC:42:18:C2:44:F2:81:A6
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9f:7d:ca:6d:ba:0a:97:dc:de:14:c2:21:ba:b3:0f:73:b7:
78:18:84:0f:3f:ef:1b:b0:d8:a9:c2:74:05:d8:64:a2:32:58:
52:d1:2a:32:ec:d9:99:53:65:ac:34:82:22:10:3d:a4:7a:b9:
bb:a7:5f:ec:c8:25:45:40:c5:74:4b:4f:d9:ba:20:06:87:0d:
ad:95:8a:47:16:80:a4:5d:67:8c:88:12:10:59:99:58:86:2a:
cd:99:82:1e:ba:1b:d8:1a:2f:80:98:9c:39:51:66:d2:94:59:
7d:e3:ee:e9:cc:51:88:21:2c:41:8d:a2:64:97:25:42:12:88:
29:8a:ac:50:ee:a5:b7:4c:7b:78:fa:39:09:24:67:39:88:4e:
9b:f0:45:cf:a9:0d:e3:cc:95:d2:5e:f0:ea:ff:c3:2d:97:bf:
e6:a0:91:a6:de:75:84:48:e2:4a:10:b8:19:77:20:34:34:2d:
64:00:23:c3:ce:12:f6:83:bf:dc:ab:6b:e9:11:d4:90:a9:14:
f0:13:62:57:7d:6f:3b:1e:de:6b:cc:18:1b:6d:27:a6:8a:c6:
f8:4e:e5:79:0c:56:23:e7:ad:de:82:81:8b:34:1d:27:60:b2:
37:57:79:fd:e2:71:85:85:da:1e:e6:56:e4:7f:30:1a:f9:29:
77:83:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:56 2026 by rpki-client