Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: mIcVoZalQBdoWBKAnp4CPGh1lcUMbG/CnPwxS7Cs0kc=
Subject key identifier: 14:FF:E3:6C:AA:DE:54:D2:68:0E:70:1A:FF:0D:9F:FF:4F:C1:86:4B
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 01A0FFB55304E447E5802EA2431E085BB59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 0A2F
Signing time: Sat 03 Oct 2026 03:01:08 +0000
Manifest this update: Sat 03 Oct 2026 03:01:08 +0000
Manifest next update: Sun 04 Oct 2026 03:01:08 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: KzyIkHul+CnlMvePsytFGGKjxMYyPI9Qm3MQrMcvdE8=)
2: UO3efIc_XfI8seJml1F-LycT9UQ.roa (hash: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:53:04:e4:47:e5:80:2e:a2:43:1e:08:5b:b5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Oct 3 03:01:08 2026 GMT
Not After : Oct 4 03:01:08 2026 GMT
Subject: CN=14ffe36caade54d2680e701aff0d9fff4fc1864b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:57:84:ef:bc:98:1b:ca:60:ab:bd:10:03:
80:02:e0:96:aa:ba:e5:1a:a6:93:8d:2f:0d:b0:57:
27:e6:09:ca:b8:ba:d1:bd:34:5a:68:76:c1:71:e6:
94:2c:8a:89:bb:72:78:c1:63:df:28:c1:a3:04:aa:
c2:2f:8e:fb:64:3f:35:db:5f:8d:3f:ce:11:6d:27:
ce:11:87:1b:b6:19:32:c1:cf:4d:43:7f:46:81:7a:
3b:64:60:0e:9a:50:55:f0:8e:b2:34:20:05:aa:69:
e5:c9:ce:ac:30:c3:bb:80:33:96:a8:7f:37:49:7d:
f8:61:85:93:88:2a:c8:28:63:7b:ff:ad:71:34:bf:
42:71:ca:ed:1a:d1:fd:15:20:70:bf:78:32:04:ba:
35:4c:37:c8:85:55:5e:1f:a7:b3:5c:a8:d9:79:69:
ff:4a:81:7a:78:1e:a3:82:43:57:b9:8c:43:1f:b4:
13:3a:0b:c2:0f:51:2e:8e:d8:f6:89:fa:1e:00:b0:
ee:50:c5:3b:5d:90:b7:6a:79:2f:de:89:fd:4e:35:
2a:a1:02:b8:5e:6c:c9:86:df:c4:d0:5e:9f:cd:19:
3e:bd:e0:37:ae:22:d1:41:19:0a:18:a6:bb:97:7d:
91:97:bf:ef:01:ea:76:30:2d:2c:ef:58:c1:3c:0c:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FF:E3:6C:AA:DE:54:D2:68:0E:70:1A:FF:0D:9F:FF:4F:C1:86:4B
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a9:5d:b1:99:2f:e2:69:3f:d2:d6:d1:e6:ba:a2:ce:ce:46:
e9:2a:79:92:4c:e5:be:da:17:58:45:25:10:8b:88:d4:9e:6c:
43:15:87:f5:8c:a4:ee:17:63:e1:15:59:d4:67:d2:a7:36:52:
39:f2:16:8e:b4:ac:9f:16:96:6d:50:e6:f7:f9:5c:74:17:05:
24:ba:e3:fd:e7:07:91:52:16:eb:04:c1:3d:ba:1e:95:12:f1:
72:de:74:e7:61:29:3a:8b:48:cd:f6:89:e9:1c:57:bf:12:78:
f2:83:d2:a3:ce:41:61:77:cb:45:ce:43:fd:91:78:49:4d:fb:
66:e5:a0:06:e7:2c:7e:66:a5:64:bb:2f:ef:54:6e:f0:12:01:
7b:35:2e:d3:5d:b8:0b:95:1e:30:19:eb:18:a1:31:21:3b:1b:
25:22:f0:d4:5d:d2:a9:bb:33:ea:31:78:fe:23:5d:03:5d:eb:
93:9a:86:54:ce:60:f5:fe:85:a5:bc:35:15:b2:cf:c2:22:3a:
cd:2d:12:85:02:bc:18:a7:30:18:9b:3b:86:33:89:67:00:d6:
e3:50:7b:1b:0d:e7:96:3b:b5:3c:9e:bf:6d:48:f3:ec:a2:50:
2f:0d:c6:d0:c4:30:05:86:57:21:53:c7:77:4a:4f:3b:a8:81:
b0:7e:8c:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD/tVME5EflgC6iQx4IW7WcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YmMzYWViOGIyZjBiNDg2ZTVjOGMwYzc5Y2U5ZDhkNjhi
MThmOTYwHhcNMjYxMDAzMDMwMTA4WhcNMjYxMDA0MDMwMTA4WjAzMTEwLwYDVQQD
EygxNGZmZTM2Y2FhZGU1NGQyNjgwZTcwMWFmZjBkOWZmZjRmYzE4NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqRXhO+8mBvKYKu9EAOAAuCWqrrl
GqaTjS8NsFcn5gnKuLrRvTRaaHbBceaULIqJu3J4wWPfKMGjBKrCL477ZD8121+N
P84RbSfOEYcbthkywc9NQ39GgXo7ZGAOmlBV8I6yNCAFqmnlyc6sMMO7gDOWqH83
SX34YYWTiCrIKGN7/61xNL9CccrtGtH9FSBwv3gyBLo1TDfIhVVeH6ezXKjZeWn/
SoF6eB6jgkNXuYxDH7QTOgvCD1Eujtj2ifoeALDuUMU7XZC3ankv3on9TjUqoQK4
XmzJht/E0F6fzRk+veA3riLRQRkKGKa7l32Rl7/vAep2MC0s71jBPAxvswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT/42yq3lTSaA5wGv8Nn/9PwYZLMB8GA1UdIwQY
MBaAFAS8OuuLLwtIblyMDHnOnY1osY+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEt
ZmYyMjdlNDk5M2Y3LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEtZmYyMjdlNDk5M2Y3
LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaldsZkv
4mk/0tbR5rqizs5G6Sp5kkzlvtoXWEUlEIuI1J5sQxWH9Yyk7hdj4RVZ1GfSpzZS
OfIWjrSsnxaWbVDm9/lcdBcFJLrj/ecHkVIW6wTBPboelRLxct5052EpOotIzfaJ
6RxXvxJ48oPSo85BYXfLRc5D/ZF4SU37ZuWgBucsfmalZLsv71Ru8BIBezUu0124
C5UeMBnrGKExITsbJSLw1F3Sqbsz6jF4/iNdA13rk5qGVM5g9f6Fpbw1FbLPwiI6
zS0ShQK8GKcwGJs7hjOJZwDW41B7Gw3nlju1PJ6/bUjz7KJQLw3G0MQwBYZXIVPH
d0pPO6iBsH6MQg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:05:38 2026 by rpki-client