Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier: 7lCG6A6E0VYFhVpL9cxSr+hRcrDSKEQ0BxthrtFtHos=
Subject key identifier: E5:72:DA:87:A3:EC:5E:45:38:C9:6E:8D:55:21:C5:CC:2B:65:89:34
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 019FAA87A5FDED515E1F4CE41ABE790EA864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number: 057C
Signing time: Tue 28 Jul 2026 21:00:44 +0000
Manifest this update: Tue 28 Jul 2026 21:00:44 +0000
Manifest next update: Wed 29 Jul 2026 21:00:44 +0000
Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: kNL1YrzpMZ1bNZqnZPx42CzJC7+S/rU8drk6j8QlwME=)
2: Fb3aBBcJ_RU5gPWUY71udWZuQ_o.roa (hash: VnpK440llW/db9ofXXkT+hMi7FL519qaQ5nOCrY4q+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:a5:fd:ed:51:5e:1f:4c:e4:1a:be:79:0e:a8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: Jul 28 21:00:44 2026 GMT
Not After : Jul 29 21:00:44 2026 GMT
Subject: CN=e572da87a3ec5e4538c96e8d5521c5cc2b658934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:58:d7:e0:7a:3b:66:04:87:3b:47:2d:c3:
33:37:a1:2b:1f:5b:c0:57:1b:00:04:b9:cc:39:2b:
cf:51:2e:fc:42:ac:fe:23:60:2c:7d:5b:75:8d:92:
b4:11:f3:88:f7:bb:5e:63:4a:7b:4c:74:3b:0c:c2:
85:3f:2d:d3:03:b3:b0:a6:d3:0a:51:2d:6e:ba:71:
5d:ed:a7:60:44:23:14:e2:30:6b:95:77:99:34:64:
d8:58:8d:f7:c1:12:68:fd:c4:b4:32:c5:8b:7b:8d:
bf:20:85:50:0d:87:b7:7b:0d:d6:ef:ac:a9:ae:bf:
fe:7e:14:e9:0e:bd:ae:37:c9:51:db:7f:e8:92:ce:
8b:98:b4:50:be:72:59:91:dc:1b:83:c1:3c:f0:68:
de:21:53:47:6a:ea:d7:27:f5:c5:fe:f0:da:68:43:
41:ac:5d:cb:92:48:3f:cf:ce:08:5a:4e:fd:cf:68:
dd:a3:27:fd:b8:2c:85:73:7c:a4:6a:1c:73:09:6c:
1a:88:b3:83:72:00:98:3f:1d:01:0d:31:86:88:87:
8c:e9:b7:4b:59:17:0b:b0:a6:6b:da:2b:57:90:fc:
36:bb:98:1c:d2:a0:fe:1b:d4:3e:55:6a:dd:e6:f4:
94:f1:2f:d8:56:54:a5:f7:17:de:9c:16:9b:9e:73:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:72:DA:87:A3:EC:5E:45:38:C9:6E:8D:55:21:C5:CC:2B:65:89:34
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:37:63:ee:7e:3d:95:40:e5:ea:26:a9:a2:df:27:e4:d7:d9:
19:e1:d2:d7:bb:12:aa:c6:97:e8:10:74:95:a8:97:40:c9:db:
c4:0c:0a:ed:01:27:5b:78:2a:11:6e:f0:9c:6a:3c:e4:87:f3:
95:2a:64:0d:09:38:34:f1:1a:b2:a6:21:a1:1b:18:23:1d:0e:
b0:76:b5:34:ea:fd:e0:6d:c8:fa:f5:c2:16:ce:8e:3c:04:dd:
b7:8b:7b:b5:d5:05:cc:0b:7c:0a:7f:03:b2:62:94:66:10:77:
d0:ef:73:0f:7b:cf:8b:bd:75:26:96:f5:35:49:e4:d8:2b:ee:
87:30:a4:02:27:56:b0:a9:7c:2a:0b:5c:92:c5:8a:f2:3b:65:
79:7a:2a:c2:b5:e6:bd:31:e7:47:c3:66:c3:82:39:5e:35:fd:
3c:50:83:b2:71:44:85:aa:c0:a6:1d:bf:b5:69:b2:c5:92:9d:
d3:38:79:ab:01:48:79:ea:b3:bb:4c:78:7e:c4:f0:89:ab:83:
2e:ab:76:cf:78:7c:f9:56:5c:7b:c6:ab:d3:2b:8b:de:97:e0:
73:25:77:1d:ac:6e:b8:37:f0:4a:93:89:21:08:c8:af:d8:d0:
87:48:11:15:65:e2:c5:06:56:11:9f:11:13:21:ca:3b:5e:fa:
43:83:b3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:59 2026 by rpki-client