Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: JmXfwHqckFoikgHRZPE3i4Km79XCunfilWXPcYs4Gcg=
Subject key identifier: 58:FC:9D:67:25:6E:00:43:D0:DF:83:13:29:C4:24:FF:4E:27:73:E4
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 019EC1EE1CB923D3A7EFA5E6FB5879604FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 07EC
Signing time: Sat 13 Jun 2026 17:01:07 +0000
Manifest this update: Sat 13 Jun 2026 17:01:07 +0000
Manifest next update: Sun 14 Jun 2026 17:01:07 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: DYs7amDqTU+d+Pj4k3ItRwNICy0jaAqUW6GLusBOm1A=)
2: XiOLVjMMRIXjDwamXxHQaw_QW5M.asa (hash: j0uAz4SCp4axiJ6lvLbL24SoF2CItfFxlFx3BSZUkLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:1c:b9:23:d3:a7:ef:a5:e6:fb:58:79:60:4f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Jun 13 17:01:07 2026 GMT
Not After : Jun 14 17:01:07 2026 GMT
Subject: CN=58fc9d67256e0043d0df831329c424ff4e2773e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:aa:72:00:ca:2e:b5:69:09:93:53:08:d1:
8d:11:c9:a0:32:58:ca:f7:f0:34:a3:fc:4d:ab:e3:
3e:88:56:15:80:65:53:67:e9:e3:f1:b8:1e:2e:a8:
69:da:5f:2b:25:bd:a2:d5:be:21:4b:53:30:ce:31:
b5:b7:16:11:b0:b5:2f:a4:a3:0b:dd:7e:c0:c5:a3:
c9:c6:c5:d5:7e:a4:17:5a:b7:64:ff:01:9a:de:7c:
33:58:23:fd:0d:70:86:10:ae:1d:d2:b8:2c:65:74:
95:65:8e:12:4b:3a:f4:20:e7:8c:4d:2f:cb:98:ca:
63:88:47:96:5f:6d:6f:55:b8:28:9e:98:c7:c3:0e:
44:ed:9d:2e:74:dd:60:72:56:58:48:24:67:d9:81:
6a:f6:83:9c:52:23:0c:28:29:e8:09:c8:91:67:ca:
ae:34:1e:dd:0c:42:5b:ec:09:f8:dc:3f:ba:2b:3d:
cb:66:d2:56:f0:ec:04:8c:6c:f3:d9:e6:79:fa:c5:
4f:8f:3a:91:73:5f:20:83:7b:98:c8:2d:78:fe:26:
55:45:a9:b6:f1:ef:75:60:04:6c:f0:f3:93:de:b0:
ca:ae:62:94:ee:dd:1d:e8:cf:91:bd:9e:fa:6c:f6:
af:95:3e:1f:c1:3e:4d:01:6c:9c:84:c6:c0:04:aa:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FC:9D:67:25:6E:00:43:D0:DF:83:13:29:C4:24:FF:4E:27:73:E4
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:14:62:95:d1:a5:12:db:eb:2e:57:8a:0e:7f:9c:4e:21:d5:
23:13:cc:20:50:41:1f:86:d1:3a:76:97:3e:0a:4f:74:0b:ac:
81:72:74:3e:f6:2b:21:2d:c3:1b:66:51:12:71:4e:c8:e7:1b:
7a:e8:1a:2a:1c:20:7e:44:35:57:ce:82:e1:07:98:12:b5:20:
c1:9b:56:cf:9c:da:5c:ba:d8:94:44:eb:69:f8:55:96:98:be:
df:91:89:2f:1c:38:9a:93:02:1f:78:d8:67:2f:b7:96:39:82:
45:d9:ad:8a:9b:30:b5:80:60:0a:5e:0f:7b:4a:86:6f:6e:51:
00:65:1a:d2:70:b5:b6:a0:53:0d:7d:d6:5d:ef:76:8d:c9:31:
db:6e:41:69:5a:61:8f:61:3c:5b:8e:b6:fc:40:e5:ba:3e:92:
2a:10:28:c1:1c:3d:c5:cb:62:28:05:a4:04:c0:c8:72:e5:38:
18:e6:3e:01:8a:3a:b6:9d:5e:9e:f9:96:1c:4b:28:3c:9b:b4:
5a:63:d2:b4:96:eb:e5:44:69:86:3d:2e:6b:ee:c4:6b:5a:20:
9a:23:8f:5e:15:1c:2a:b7:70:de:3c:3e:9c:85:c8:27:51:77:
58:73:43:ad:11:e2:92:d8:69:2f:f5:6f:88:8a:73:f9:47:51:
32:d7:0e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:25 2026 by rpki-client