Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: gu1t0oIli5vABM9sF8oUt7gv5V6fIm3nHHpTv7mLhJU=
Subject key identifier: 00:7F:10:13:C3:C2:C9:54:0D:C0:2A:9A:26:AA:23:F4:8E:36:70:4D
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 019D9999A3EA1F78DD942A9AFDF7E05B365A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 04:01:16 +0000
Manifest this update: Fri 17 Apr 2026 04:01:16 +0000
Manifest next update: Sat 18 Apr 2026 04:01:16 +0000
Files and hashes: 1: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (hash: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM=)
2: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: MIRWvX6dll5LH6l7nnfbhyipD/YdM1B0uXpZMatCRFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a3:ea:1f:78:dd:94:2a:9a:fd:f7:e0:5b:36:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Apr 17 04:01:16 2026 GMT
Not After : Apr 18 04:01:16 2026 GMT
Subject: CN=007f1013c3c2c9540dc02a9a26aa23f48e36704d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:d0:47:e8:a3:d5:10:fd:23:24:fd:38:8f:
a2:78:31:30:6d:5b:1c:19:04:1b:35:68:2c:82:d7:
be:04:5f:13:7b:b6:d9:f3:17:8c:62:cf:34:21:e8:
7f:6f:69:0e:2c:ab:ad:fb:c5:20:3c:af:d4:62:89:
62:2a:a1:67:85:34:3a:00:c9:48:80:64:d4:8f:7b:
97:f1:16:b7:51:4d:b6:c9:19:03:2d:17:ac:e7:0f:
9b:2b:15:f8:45:b9:43:5c:cb:c3:43:3e:04:86:f9:
10:b4:c4:6d:18:e6:26:b1:21:a4:a5:f3:be:2a:fd:
eb:4b:ea:31:49:86:f5:ec:1c:5c:33:d6:3d:c1:91:
67:bf:97:f9:1c:fb:6a:b4:df:c3:d2:a5:25:9b:eb:
e1:ca:f8:7c:41:cf:b9:35:d3:e0:9a:9b:fb:f9:a6:
8a:a3:e8:b6:6e:99:64:02:29:ca:06:10:52:8e:f8:
4a:4e:3b:f9:26:33:56:b8:c8:07:92:a5:20:22:66:
9d:0f:05:d3:21:3c:2f:9d:d7:87:10:f0:bc:88:2d:
00:9d:ac:1f:41:67:54:b8:32:50:aa:fb:00:8a:90:
87:4e:1a:da:ea:ed:4e:ff:9a:61:29:f0:36:39:05:
69:33:9a:03:7b:9e:af:08:87:04:b6:99:d3:e6:9a:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7F:10:13:C3:C2:C9:54:0D:C0:2A:9A:26:AA:23:F4:8E:36:70:4D
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c6:86:16:ab:db:e0:c2:84:b6:c0:d3:ee:63:d9:ab:d4:2d:
df:9d:5b:4f:08:38:2f:88:2c:32:fb:86:ad:9c:02:32:14:c1:
42:8d:85:4a:47:c2:0c:a3:41:5d:a1:35:74:04:2e:6e:f8:16:
be:a8:1b:01:6a:f2:d6:c8:a3:bd:2f:23:71:44:b0:a5:2b:82:
8e:1e:97:0a:bc:be:3e:06:5f:d9:27:00:92:7a:c2:d8:65:57:
88:db:83:6e:41:f3:7a:0e:79:d2:18:2a:37:15:a4:db:f1:7f:
fc:25:a5:c9:e7:49:83:5e:9d:97:ed:9e:b0:e2:7d:7c:cc:cd:
91:1b:0e:38:94:ac:cc:b0:eb:0e:2c:61:aa:18:c8:ee:49:e4:
a6:00:9a:33:2e:fb:b1:d0:37:e3:0a:a4:d9:39:2b:9a:5e:24:
e3:b0:67:81:12:6f:76:0a:8b:2b:16:ad:ae:48:cc:f1:cc:d1:
92:83:ca:3e:5c:eb:fe:09:35:b7:89:56:6f:1f:0c:9a:0d:00:
ff:21:2b:83:e7:f6:38:cb:6f:03:b8:03:87:66:1e:d5:af:a0:
d6:b3:ce:c7:5f:05:e8:b6:01:28:09:e3:62:6a:52:77:87:7e:
b6:a5:ee:7e:2b:1b:d3:af:28:4e:f6:c2:d4:db:c5:d6:1c:81:
e5:87:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:21 2026 by rpki-client