
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
File: bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json)
Hash identifier: yiSboE3vNWMaiIfI0HyGflMgSpggBg5ATO2a+x7epCA=
Subject key identifier: 37:ED:E6:E8:DA:E0:1B:F2:40:66:E7:77:56:24:AC:FE:A3:9A:02:BB
Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
Certificate issuer: /CN=6cb9bfe9336da055790608a77a58ccabc4968694
Certificate serial: 019CABD9C0B3B9FC3B29329A30BE19703772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
Manifest number: 0EEB
Signing time: Mon 02 Mar 2026 00:01:40 +0000
Manifest this update: Mon 02 Mar 2026 00:01:40 +0000
Manifest next update: Tue 03 Mar 2026 00:01:40 +0000
Files and hashes: 1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: ujL+pCd6czIayoe7c2uHfsIz0Q70ei+3plitPmccQ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c0:b3:b9:fc:3b:29:32:9a:30:be:19:70:37:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694
Validity
Not Before: Mar 2 00:01:40 2026 GMT
Not After : Mar 3 00:01:40 2026 GMT
Subject: CN=37ede6e8dae01bf24066e7775624acfea39a02bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:7c:f6:2d:07:31:51:8d:8a:63:2d:19:0c:
08:df:85:21:50:48:b0:d4:78:3e:ed:e9:09:f1:24:
bc:21:24:71:ea:e8:d3:fa:f7:d7:23:d2:2f:fa:c2:
a0:c4:fb:3b:ac:1b:de:ad:e5:02:1f:cb:33:94:b1:
d5:9b:2e:85:00:5a:29:17:97:62:88:dc:46:e4:b1:
8c:c8:bf:34:58:a1:a8:a5:b4:f5:66:1d:8e:a9:3c:
3d:47:ab:39:a3:b8:94:d4:94:84:13:07:82:af:ef:
31:01:7b:7e:e9:5e:42:da:2b:a7:b1:21:89:29:a2:
59:7c:e4:1a:c2:98:50:5c:82:e6:17:81:62:b8:3f:
08:18:ec:67:84:7e:e7:2a:f9:b4:f5:de:ad:10:88:
9a:8c:71:15:0e:dc:58:ce:03:ea:b9:3f:04:95:bc:
41:d5:c5:fd:3a:12:2d:5a:bd:17:bb:0d:5d:7e:5a:
c0:a1:16:0e:0e:27:ea:85:1d:ed:8b:7e:1d:61:7c:
c2:de:b5:eb:48:6f:66:7e:d4:be:24:b2:0c:5e:b9:
2e:dc:eb:03:af:89:18:03:67:ae:14:1c:3e:3b:dd:
44:78:c0:c5:98:09:51:d9:ba:9c:e4:25:74:40:ae:
e1:8d:3a:e2:5c:74:00:14:26:96:23:5b:e0:74:94:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:ED:E6:E8:DA:E0:1B:F2:40:66:E7:77:56:24:AC:FE:A3:9A:02:BB
X509v3 Authority Key Identifier:
keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2f:47:c6:93:55:42:cb:98:02:55:ac:67:f0:39:40:ce:01:
62:aa:77:e0:a2:75:4f:e5:e5:2b:24:27:f7:33:80:35:c6:df:
e0:06:15:a1:33:86:89:3e:ce:f2:28:59:a7:aa:f0:77:f9:13:
f5:74:3f:c6:62:e2:22:a0:95:6e:61:e2:94:0d:b0:01:c5:18:
83:6e:3c:4d:82:cb:91:6f:dc:27:74:59:3b:df:1c:1f:61:5b:
ee:ce:7e:ac:98:8b:a5:d6:c6:71:45:86:ff:c2:84:72:e1:4e:
fc:a5:d8:f5:b0:76:ad:cd:f7:c8:8c:33:8c:54:96:52:72:5b:
e7:7d:4c:0d:e9:e6:5d:ae:04:6d:e0:36:a0:8e:47:b4:12:30:
74:ca:28:cd:28:b7:86:31:53:ef:49:18:1e:8b:5a:55:73:30:
05:ad:56:a4:12:8c:ca:f9:cb:d9:44:93:30:78:78:a7:49:09:
e9:af:9c:7b:6d:e7:3b:bf:7c:c3:14:85:b9:76:43:75:11:6e:
2a:e4:c3:52:b6:64:6c:0a:83:c2:be:70:25:be:0c:49:c5:41:
a9:8c:25:7e:ba:1e:45:5d:76:d9:40:b8:94:b5:8e:45:e1:3b:
09:df:fc:c2:da:63:e3:3b:da:92:48:8d:f4:3f:a8:79:3e:26:
1e:9a:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:57 2026 by rpki-client