Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: /6ozUwrOjlDe6R3D/pScB292i7RG2/ytRh5WtAmV3uY=
Subject key identifier: 98:F6:A9:45:33:92:89:83:9F:DE:1B:BB:1B:8C:63:17:F5:D7:11:58
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 019D9A3EC3263203717FDDD3D20CDBC152A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 0752
Signing time: Fri 17 Apr 2026 07:01:37 +0000
Manifest this update: Fri 17 Apr 2026 07:01:37 +0000
Manifest next update: Sat 18 Apr 2026 07:01:37 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: UFc4aaQp1S8vh/r+KR2D5oLXMpgic+e1CiPKBXRnag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:c3:26:32:03:71:7f:dd:d3:d2:0c:db:c1:52:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Apr 17 07:01:37 2026 GMT
Not After : Apr 18 07:01:37 2026 GMT
Subject: CN=98f6a945339289839fde1bbb1b8c6317f5d71158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:a8:ed:52:cf:67:de:b2:bc:03:e9:25:cb:
36:4a:cc:a4:2c:88:7a:fb:6c:66:4f:a1:0e:54:eb:
3d:a0:39:e4:b3:b5:87:84:e6:8b:12:93:e3:27:ed:
cf:48:b5:5d:70:3f:e4:d2:29:ab:96:0e:22:9d:80:
ab:0f:d4:02:a2:9b:95:5e:56:8b:2f:25:e8:85:ec:
2f:d0:b8:68:53:af:40:a2:82:10:1c:55:4e:ce:69:
fb:30:f9:b7:0e:2b:d5:75:5d:0b:4f:47:64:c8:9a:
bb:b8:2d:2a:8d:5a:3e:db:67:e2:8b:1d:90:78:1c:
66:55:82:03:31:c7:28:22:75:cb:55:09:fd:95:e5:
43:77:83:ec:b7:07:f9:2a:01:54:c4:ab:31:08:18:
b6:4f:dc:95:29:2a:c1:6f:1c:d2:e5:11:3f:ed:66:
07:36:77:f2:0c:2f:65:3b:2f:f0:b4:d8:5b:44:ff:
41:29:4b:a5:e6:f9:76:f4:d6:23:fa:82:84:da:d5:
91:67:7f:88:42:8b:b7:7e:04:c3:fe:3f:a0:12:c9:
27:ce:b5:7f:f1:29:29:56:80:c3:dd:69:ee:35:66:
7e:90:04:23:87:3e:b6:0e:4e:8f:fb:6a:34:20:cc:
fc:41:f4:80:be:a5:24:78:95:84:ae:fa:cc:e1:45:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F6:A9:45:33:92:89:83:9F:DE:1B:BB:1B:8C:63:17:F5:D7:11:58
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ed:1f:91:12:c5:59:1f:6f:9a:96:27:db:d8:73:61:5d:d5:
80:16:32:65:9f:ec:59:e2:3c:42:83:99:3e:9a:7d:10:9b:62:
46:6a:de:ed:1e:83:da:3c:b8:9f:6c:42:95:03:51:21:93:56:
7f:fe:a7:1c:e0:e4:01:cb:6d:04:66:ee:00:4a:7a:fd:be:3a:
ad:4c:3d:3d:f4:1f:6b:e2:3a:ee:8b:89:d7:47:4e:c4:f4:fd:
4f:f6:ad:cb:cc:26:4f:f3:ed:9f:ba:39:60:c4:23:4c:e3:ae:
dc:33:85:72:19:ec:36:1f:69:3d:14:42:ca:15:f9:bc:95:d1:
51:4d:60:c5:73:3d:f8:cc:b5:c6:f6:f1:b1:6b:3d:40:8c:44:
e8:f3:0d:77:06:6e:6c:6b:67:fa:70:32:c5:62:c8:aa:66:56:
f7:62:56:99:f9:e9:01:ab:4f:45:88:0f:08:72:7d:05:40:50:
02:03:31:42:c5:81:71:33:18:d2:fd:e5:5e:2e:9e:93:11:7a:
7d:4d:3c:05:4c:4e:be:e7:4a:e8:a6:c4:62:2d:77:96:16:cc:
19:40:01:9f:16:d7:84:60:e8:55:e5:5d:0e:fd:a0:be:bd:5b:
2d:5b:de:42:ce:a4:c1:9e:90:63:d8:e2:e1:33:7a:5b:b2:91:
6c:b8:fc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:04 2026 by rpki-client