Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: 49kQFxtvp8nCDLQzStarC/8XziLY/uHv9xzYowJjfUc=
Subject key identifier: 74:9E:85:80:3F:D7:85:0A:FE:8C:1C:FD:40:07:95:80:CD:9C:65:65
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019D9AAC0C83915136C93D9F0AE259DF1E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 086D
Signing time: Fri 17 Apr 2026 09:00:59 +0000
Manifest this update: Fri 17 Apr 2026 09:00:59 +0000
Manifest next update: Sat 18 Apr 2026 09:00:59 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: kWj/BEz6mvHFxsXj1TBj1H5QWH2Lc9Zp4JvCY5+xmKY=)
2: UO3efIc_XfI8seJml1F-LycT9UQ.roa (hash: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:0c:83:91:51:36:c9:3d:9f:0a:e2:59:df:1e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Apr 17 09:00:59 2026 GMT
Not After : Apr 18 09:00:59 2026 GMT
Subject: CN=749e85803fd7850afe8c1cfd40079580cd9c6565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:ac:4d:a5:81:43:23:ea:92:57:6b:5f:77:
4b:64:43:1c:48:06:ff:dd:9a:b8:40:c5:0a:f1:80:
47:67:89:0e:9b:61:6a:6b:b2:01:65:ae:98:74:fc:
05:87:46:4c:a2:16:aa:82:8c:b4:f4:24:f8:c1:6f:
9f:de:fc:93:a5:79:4a:69:e6:f1:be:ab:21:54:3a:
5b:29:d5:35:16:6e:93:b6:61:a1:89:cd:db:8b:c8:
1d:7e:91:71:66:1f:33:92:3b:dd:10:80:92:28:f5:
d2:a3:d3:74:40:d8:bd:71:d4:f6:84:8c:80:d3:00:
b9:04:e6:3f:7d:74:d5:dd:28:b6:9b:25:d6:de:1d:
77:30:4c:c9:25:ab:2d:fc:fd:89:5e:96:34:76:77:
51:07:9d:7c:60:41:0c:a7:06:65:fd:69:53:fa:79:
ed:49:0e:6c:71:60:0e:7a:07:60:80:ed:50:cc:90:
22:bc:53:d5:98:cf:fb:a3:91:85:0e:f5:44:d9:40:
52:76:c7:3d:35:4e:9c:16:01:f9:b7:81:36:f8:ee:
dc:f1:50:ed:c4:8b:fe:a1:12:5b:2e:89:98:7c:ba:
80:0d:c5:33:64:90:52:9e:e1:bd:f2:9b:ec:8f:21:
f7:dc:35:54:d5:37:c0:76:a2:a3:32:e8:a0:38:bd:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9E:85:80:3F:D7:85:0A:FE:8C:1C:FD:40:07:95:80:CD:9C:65:65
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ee:e9:8e:9d:0b:7c:bb:57:aa:b8:cd:9b:13:d2:8a:b9:f0:
cc:21:38:ca:33:28:bd:67:8a:5f:c8:3a:23:9d:d3:4c:5a:c3:
64:5f:05:c4:5a:79:40:ab:8b:60:59:b6:02:b5:68:98:ec:35:
76:f3:eb:af:d8:e2:05:98:13:f6:cd:f4:39:27:08:ea:d1:d5:
79:cb:6a:76:3d:74:57:54:64:3a:1e:25:ad:0b:d2:e1:bb:d6:
5a:42:5b:e5:34:99:3e:39:ef:14:90:87:1a:06:7c:1b:3a:ad:
85:08:cd:17:d5:43:71:8b:e4:2d:c2:e9:1c:b2:91:67:7e:22:
df:07:04:be:32:7e:d9:19:6e:35:6a:26:85:83:2d:d7:68:81:
d1:1b:b9:10:28:55:33:07:f5:50:da:bb:6b:c6:22:f5:6b:d3:
2d:c7:a8:3b:c6:75:6e:67:46:8a:7c:6b:f4:93:ae:e0:87:c3:
89:10:c4:35:77:dc:fa:1a:fe:4d:56:85:cb:74:32:55:a0:47:
4d:7e:d2:97:c3:b5:8b:85:96:eb:d0:84:d0:2f:6e:d6:e3:54:
61:96:f4:11:6b:ef:f6:a0:b7:f2:e2:0e:cf:dd:ef:85:3b:a2:
1c:9d:b3:29:f5:82:e7:02:dd:67:1e:5f:75:3c:85:64:da:28:
7a:1a:32:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:05 2026 by rpki-client