Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: Quj7WhWwyUjar0nAccjsnmUNOidnYsjsmPxWvAA4b8s=
Subject key identifier: D4:B3:4B:72:4E:90:D5:7B:8A:34:86:A8:AF:4E:C8:34:A6:AB:7A:C6
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 019CAC103612563D66F81A325870ECBF3B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 15ED
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: qWFL0jz7vZaJ50Vuu14xhVMkX9KBcWMcyjUNtBwJ4uw=)
3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:36:12:56:3d:66:f8:1a:32:58:70:ec:bf:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=d4b34b724e90d57b8a3486a8af4ec834a6ab7ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:a4:c2:1f:46:ad:bf:1e:6c:51:40:4f:72:
f3:ac:54:a0:56:66:6b:95:98:40:a1:76:b7:d4:36:
01:d4:5f:a0:6d:e6:07:3d:70:3e:62:f5:78:9b:fc:
fd:49:80:a2:65:63:6a:5c:de:17:b6:8a:01:87:01:
cf:a4:02:4c:70:1e:53:df:10:ee:68:d4:52:60:26:
b7:28:0e:df:0e:cb:94:92:a5:7c:ae:70:3f:16:58:
8f:b0:74:6b:e0:43:ed:68:b1:0f:de:64:41:cc:9f:
74:4c:cd:41:21:fd:fa:49:27:83:2c:b5:ea:1b:42:
3a:86:af:99:90:a3:02:5e:6c:33:a9:67:6c:4f:7e:
dd:50:58:17:b7:de:64:5c:97:2d:85:76:79:b1:21:
43:09:d7:91:0c:bf:2f:7d:f6:38:19:b7:3f:76:68:
bb:e8:28:3e:31:9d:6e:2b:78:f6:5c:b0:c6:8a:5c:
09:5e:c0:06:fe:cb:68:36:a1:29:a6:e0:60:ea:ef:
08:d9:1d:b3:52:40:54:54:21:5f:1f:dd:dd:9c:36:
08:ca:57:20:22:6d:59:79:8a:84:56:20:78:3d:d2:
fd:ff:72:2a:43:72:33:d6:a9:ec:83:3a:60:30:03:
cc:b2:41:61:e1:20:0d:77:bb:0a:67:fd:4e:02:41:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B3:4B:72:4E:90:D5:7B:8A:34:86:A8:AF:4E:C8:34:A6:AB:7A:C6
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b0:e9:ef:f2:39:b8:a0:70:53:5c:c2:ef:e0:8c:7d:fb:54:
ca:70:80:8e:7d:cb:3f:20:7f:51:53:71:fe:8d:61:00:33:67:
c1:49:88:fd:e0:96:4a:9c:15:d8:f1:2a:c1:12:6a:ce:36:78:
f6:3b:e8:d0:4e:61:da:b8:8f:d2:0f:99:2a:8b:c8:0a:10:b9:
50:c1:02:e4:2c:95:c1:08:c7:f8:16:a9:8e:f8:98:34:50:6e:
32:ce:c6:bd:fc:45:c9:f8:7a:ff:6b:f2:1f:71:36:65:cc:7f:
6f:24:cc:ba:24:8b:f4:7c:a2:52:d7:21:7d:fb:c9:88:38:b9:
de:f4:6d:f1:02:b1:fe:eb:35:a0:7a:a9:a5:c8:6d:4e:a0:3d:
9f:cc:d2:f9:7c:a6:3c:47:b4:c5:16:c8:25:83:9e:ed:47:f1:
63:eb:42:27:92:f1:14:3e:f5:b1:99:1a:49:c8:fb:be:4a:1f:
cc:7c:da:ac:f6:48:73:bd:13:75:01:4e:14:21:8f:a6:90:7e:
16:a0:48:58:b1:1c:f7:da:18:b0:25:b1:01:76:41:b0:ed:33:
9a:68:1f:10:85:3f:9d:a3:6f:b3:26:da:37:0b:03:ae:e1:09:
92:ca:0b:81:0e:3b:df:e3:ab:eb:99:55:f7:c7:8c:ce:93:f6:
59:6c:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:32 2026 by rpki-client