Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
File: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft (raw, json)
Hash identifier: Bdh9FmT/JcpAwRw/gEBmfXSg+q6eU4xML1TQIt1eFWY=
Subject key identifier: D4:79:55:CD:4B:A8:39:9B:7E:E2:E8:E3:AD:15:0D:13:B5:22:E2:C5
Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2
Certificate serial: 01A0EA76EA8FA43E8E0A71C58E0ABAA7F1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
Manifest number: 03D3
Signing time: Tue 29 Sep 2026 00:00:56 +0000
Manifest this update: Tue 29 Sep 2026 00:00:56 +0000
Manifest next update: Wed 30 Sep 2026 00:00:56 +0000
Files and hashes: 1: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl (hash: G0ulqoX6wrb3ni7+K+onDpFl9yEO/8vpHDjRBYnKCtU=)
2: zkiUnt3u3gM-pY3nw2418jZ96as.roa (hash: cBWCrLkL25DqG+qiWavgwQLJKknM3yr54OTG4QErhfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:76:ea:8f:a4:3e:8e:0a:71:c5:8e:0a:ba:a7:f1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2
Validity
Not Before: Sep 29 00:00:56 2026 GMT
Not After : Sep 30 00:00:56 2026 GMT
Subject: CN=d47955cd4ba8399b7ee2e8e3ad150d13b522e2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:00:4a:79:9a:fc:dc:ad:c8:18:ca:01:5b:ca:
54:a6:51:96:96:9d:b5:85:ac:bf:8c:cd:84:60:f1:
91:89:aa:90:c3:62:f9:4e:7d:7b:57:3b:2c:95:ab:
aa:33:bb:34:6e:4e:7b:82:49:95:a7:d3:06:38:05:
95:df:a5:ee:6c:a9:b3:50:7f:09:44:c8:71:dc:c5:
f2:2a:43:85:18:bb:e8:d7:0e:f7:af:31:44:88:cf:
33:d7:4b:49:0a:0f:39:8f:ba:74:ee:2c:72:3f:9e:
d7:56:44:67:6f:fd:e9:38:b9:47:4e:6a:34:a6:dd:
89:e4:a4:38:f1:8a:6b:58:b3:88:9e:64:d5:86:77:
a8:ab:31:23:3d:bf:23:e9:cf:24:f3:76:54:d2:db:
9f:82:25:55:0b:8e:4f:62:4d:34:90:96:24:88:6b:
d0:bd:0e:3e:17:24:b9:0d:48:f4:c2:64:50:fd:1d:
4f:8a:81:bd:74:cc:03:7d:b1:90:d2:87:1b:16:44:
a8:07:4f:05:3d:0c:cf:88:c3:27:0f:da:93:a7:ee:
6d:fe:81:87:31:98:49:66:05:0b:35:f9:80:31:eb:
7f:a4:36:a1:72:72:d2:03:87:cf:70:62:73:30:2c:
75:7c:0c:1b:77:71:fc:e1:1d:c1:dd:14:95:63:9e:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:79:55:CD:4B:A8:39:9B:7E:E2:E8:E3:AD:15:0D:13:B5:22:E2:C5
X509v3 Authority Key Identifier:
keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:88:d6:22:eb:d8:4d:3c:fa:c1:5b:9c:3b:fa:28:a8:c2:a7:
0a:f3:87:ea:a6:ec:a2:02:44:89:d1:aa:fd:cb:c6:eb:6e:79:
21:01:fb:c2:17:f8:93:d6:ad:4f:6f:c0:f6:44:97:fa:fa:e0:
aa:f8:ef:5a:48:ea:c8:a3:dc:7b:80:93:c1:a0:a9:cd:47:ec:
57:a3:32:54:a6:64:8e:b7:9d:65:f6:82:39:39:7d:ea:26:27:
5b:21:d1:c9:8b:b0:a8:70:87:b4:27:d7:9f:d0:ef:0b:14:5d:
d2:0c:ea:a1:3e:01:32:e1:3e:88:57:b7:c8:7d:11:f5:b6:ea:
fe:26:1c:8e:23:df:e6:72:c4:e3:77:5a:39:e5:30:ae:76:56:
b5:8b:a8:5e:6b:8d:1a:6f:05:7b:59:c7:74:b5:09:ad:8a:4b:
5c:62:a9:4c:2b:28:d3:6a:13:66:ae:f3:25:df:87:b1:64:73:
a6:87:e4:4f:ae:90:37:1a:fc:43:c1:b4:ff:82:f5:42:70:80:
d9:97:db:e5:7a:0b:aa:10:b7:da:b1:9b:81:70:ff:75:e3:31:
53:e4:bf:d7:9d:dd:fa:d0:ae:ca:8f:12:2c:74:15:1f:e7:c4:
96:9e:aa:ae:6e:32:07:24:6a:80:e7:5f:4a:97:23:0c:34:bd:
c6:93:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:50:02 2026 by rpki-client