Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: lAk7FaTfS0Fw1+qQ8FMwlw0C4FnbOXooZqo7ihdpQfM=
Subject key identifier: 56:5F:F0:4C:34:F4:09:EE:D0:75:0D:98:85:BE:9A:DA:7C:38:FF:60
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 019CAC10658BE34173D647B0C830897390B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 01:01:21 +0000
Manifest this update: Mon 02 Mar 2026 01:01:21 +0000
Manifest next update: Tue 03 Mar 2026 01:01:21 +0000
Files and hashes: 1: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (hash: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM=)
2: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: 0doIIoyW13KCiGiMdqiFb7KG0+oTVrkgydVlg2swQjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:65:8b:e3:41:73:d6:47:b0:c8:30:89:73:90:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Mar 2 01:01:21 2026 GMT
Not After : Mar 3 01:01:21 2026 GMT
Subject: CN=565ff04c34f409eed0750d9885be9ada7c38ff60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:58:4b:58:c0:e8:85:39:35:26:8d:e8:f4:
c4:32:65:2f:2f:f8:7d:0d:e1:6d:0e:eb:18:99:94:
56:41:7a:71:b1:bb:48:30:db:9b:b6:54:31:97:1f:
a6:25:8d:24:d4:0b:dc:4c:d3:81:b9:f4:63:af:85:
91:47:f5:b8:4b:57:37:e2:dc:30:7e:44:86:d6:f6:
db:0a:f9:db:02:f7:d6:21:e4:8a:6f:d6:95:a9:79:
f7:f8:39:c6:c0:0e:3f:b1:6d:bb:3b:63:b3:74:0c:
0f:c3:68:33:c4:d6:62:8a:59:71:f6:cb:42:a1:51:
74:33:63:4d:90:b2:08:e7:40:8e:36:6c:ef:87:6e:
3d:3e:e2:e6:80:a3:43:41:f9:ba:69:c1:5f:97:14:
8d:0d:b1:b9:87:26:5a:97:5d:81:9e:79:11:d5:f4:
d5:12:9d:20:67:ed:8a:71:7c:1e:69:5b:e5:2d:91:
68:c2:a0:e8:63:46:f2:87:a7:14:3b:e8:93:cb:6f:
6d:13:d6:1d:dd:c9:f2:b2:f6:39:ce:a1:b1:49:68:
82:3d:6b:05:4b:5c:2a:8e:1c:2c:eb:bc:43:3a:ff:
a2:d5:9f:52:c8:46:c6:a7:97:3c:32:65:0a:61:2c:
18:2e:dc:55:c3:a6:38:56:a3:63:3b:82:5a:88:73:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5F:F0:4C:34:F4:09:EE:D0:75:0D:98:85:BE:9A:DA:7C:38:FF:60
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:73:a3:97:ab:4d:12:ae:49:41:5e:d5:ef:8a:e2:eb:94:5f:
79:c3:e3:86:5f:3c:d0:a0:f5:73:51:8c:26:e9:f1:b5:d3:cb:
e8:cc:c1:2b:72:de:ce:8d:28:8f:66:97:fc:b9:1c:00:c0:86:
a1:f8:a6:b7:97:f0:45:34:15:23:43:07:f9:27:ad:a8:58:f9:
57:41:a6:7e:a0:65:27:9d:df:64:59:83:46:e3:e2:78:38:92:
75:39:09:1f:84:92:0b:9b:8e:98:f3:1a:f3:58:1e:f5:9c:50:
1a:d3:83:00:73:af:c6:67:36:96:f2:55:1e:d5:71:f4:34:57:
8f:5a:00:72:22:58:5c:ec:38:db:fe:ee:1e:d7:dd:f0:26:e0:
51:fa:da:dc:bf:84:07:3d:e8:12:76:9b:2e:01:e7:0f:67:ff:
32:bf:eb:32:80:eb:91:d9:93:81:7e:ac:48:ab:35:1e:55:cb:
57:36:5b:73:65:71:4f:db:4e:0c:11:fc:9b:72:ef:92:77:9a:
39:2c:9d:ee:9f:0c:92:ef:9d:02:56:3d:06:85:b3:32:17:54:
10:04:5a:29:2b:a9:cd:f9:71:87:1e:06:f8:3a:ce:42:9f:1c:
b9:62:02:3b:95:ce:24:24:07:cd:1f:da:d3:f0:8c:f0:f2:27:
ea:95:e1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:05 2026 by rpki-client