Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
File: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft (raw, json)
Hash identifier: F0K6cHVEhH7mlmjQYfyKjQmhBUtFKsOGV4IAofNW4/M=
Subject key identifier: 9F:CD:C7:7B:27:E7:B5:6B:0C:71:EB:69:D4:F1:E3:21:AC:19:37:5E
Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2
Certificate serial: 019D9BF5812495EF4203F4CE58B8E0B88677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
Manifest number: 021B
Signing time: Fri 17 Apr 2026 15:00:51 +0000
Manifest this update: Fri 17 Apr 2026 15:00:51 +0000
Manifest next update: Sat 18 Apr 2026 15:00:51 +0000
Files and hashes: 1: 7cXMcUqolF5Pk9hz94-VytCkN3g.roa (hash: t6QpqggeJZGtuJ23Q1yI38nLT1KfU+pRXoYRRRNFETU=)
2: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl (hash: WWT6C6dT+me3SXXIzyRhDOegmxht4bgzTHO9XnGYxew=)
3: XRp3KtTtDAfEDM3rwrv4Nkp2Rew.roa (hash: o7R+7Elj+Gl0UPTAPP1wQMI8V6KJzZF8gTCwiml6fUk=)
4: zkiUnt3u3gM-pY3nw2418jZ96as.roa (hash: cBWCrLkL25DqG+qiWavgwQLJKknM3yr54OTG4QErhfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:81:24:95:ef:42:03:f4:ce:58:b8:e0:b8:86:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2
Validity
Not Before: Apr 17 15:00:51 2026 GMT
Not After : Apr 18 15:00:51 2026 GMT
Subject: CN=9fcdc77b27e7b56b0c71eb69d4f1e321ac19375e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ee:b6:ef:08:60:e6:4a:31:71:9f:51:a4:32:
48:83:1b:50:08:05:47:5b:24:6b:41:4b:3e:c5:f8:
e8:b8:93:2f:52:7c:45:29:3f:47:0b:f4:83:4b:2a:
dc:e7:45:a2:ff:1a:d6:b5:82:c5:b4:9a:d9:02:fd:
9d:0f:5e:d6:30:0b:d0:4c:6a:99:f0:71:08:72:21:
25:7d:ba:4b:7f:bc:c2:93:66:f0:53:5c:c1:e0:9c:
a6:08:3e:99:08:38:9e:97:64:4e:92:40:d6:63:c2:
d0:c4:e0:b7:09:96:c0:a5:10:2d:dc:9a:43:41:4e:
c7:61:09:aa:21:7f:f5:e1:ac:8c:09:18:b4:78:14:
42:8c:a2:43:a3:51:12:a2:1a:e0:39:05:71:69:52:
52:83:fc:8d:e4:46:99:a3:b1:7b:d1:a7:ff:d7:a4:
69:bd:57:0f:b8:34:a8:f4:52:2b:11:e1:ad:f1:d9:
31:fe:0d:0e:9a:1b:3b:95:49:c5:20:3f:1b:f8:ec:
c1:a7:40:b5:10:1a:fe:01:ad:80:d4:1b:74:52:e0:
86:4d:7a:11:30:cd:d0:96:f1:e6:59:3e:c9:c7:c5:
2c:f9:26:68:e4:fc:62:c4:1d:15:5b:17:ae:0f:2e:
95:a3:ba:d6:dd:f5:ea:e7:df:bf:54:63:96:65:62:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:C7:7B:27:E7:B5:6B:0C:71:EB:69:D4:F1:E3:21:AC:19:37:5E
X509v3 Authority Key Identifier:
keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ec:59:48:da:3a:4a:93:f7:75:f3:23:5b:c2:79:64:75:19:
6a:67:7e:48:4a:5a:de:ff:d2:4e:fa:f4:a4:16:2d:25:bb:6d:
fb:5a:80:d7:95:e6:13:b9:24:45:ce:22:b0:58:9b:e5:7b:97:
dd:74:10:eb:7a:d8:66:9f:be:ad:87:41:a2:69:c7:06:f0:59:
6a:d8:e2:ba:49:b1:15:8e:b8:cd:1d:4a:f9:69:9a:68:69:5a:
2d:90:59:c1:84:eb:0d:af:5a:5a:b6:6e:43:4e:74:62:90:e0:
81:b5:42:79:0e:99:65:d4:b2:24:c1:5e:dd:7b:48:8d:da:f9:
f1:cc:6a:2d:a2:12:06:e4:62:61:c3:ae:df:cc:6d:d6:bb:b6:
56:7b:ba:6c:c2:f2:ff:22:6c:61:2f:8f:3c:b9:45:f0:08:58:
1d:d9:c5:db:a4:2f:d7:53:ef:e0:d3:e9:f7:af:31:9a:71:16:
f0:2f:e6:ea:4a:14:aa:80:0c:65:e2:2a:b9:e5:f8:ed:fa:2f:
cf:18:09:46:3f:d7:19:ad:a9:e5:76:e3:59:b5:95:d7:6c:52:
2c:dd:bf:4d:da:da:b9:20:b4:68:ac:b5:79:79:24:c7:25:09:
9e:0d:2a:d8:e9:13:35:66:fc:68:15:20:0a:c7:f1:73:01:52:
c9:25:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:26 2026 by rpki-client