Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: vbBRgzDtjWeyHwSjeKhRcTKPCsteFXBrIdbqL8Z3zDo=
Subject key identifier: 7C:8A:56:83:8C:24:AD:41:02:95:A1:7B:B7:67:7B:C9:FB:31:55:F7
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 019CAF10ED65C1242ACEC6A510691857BEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 07F3
Signing time: Mon 02 Mar 2026 15:00:47 +0000
Manifest this update: Mon 02 Mar 2026 15:00:47 +0000
Manifest next update: Tue 03 Mar 2026 15:00:47 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: nyu8wLlFDZKtB0IE+A/eNAlp/8T03R/4yIUYIENcxnw=)
2: UO3efIc_XfI8seJml1F-LycT9UQ.roa (hash: WYOrYWzE4q8B0N8jKOx1Idbj+VGx29/9UmEd7EBF0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:ed:65:c1:24:2a:ce:c6:a5:10:69:18:57:be:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Mar 2 15:00:47 2026 GMT
Not After : Mar 3 15:00:47 2026 GMT
Subject: CN=7c8a56838c24ad410295a17bb7677bc9fb3155f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4e:ef:ab:ab:3f:01:e2:06:1f:15:a0:df:12:
28:b3:0e:ec:2a:47:34:ab:6e:28:b6:0f:91:31:e3:
27:ee:d4:b7:01:ea:47:6e:b7:88:53:60:7c:aa:c4:
1d:9a:9c:cb:74:a0:47:e7:82:a1:f5:59:26:d7:aa:
c0:56:2d:e9:79:db:a6:53:e0:f5:56:2e:54:1d:3e:
a7:49:92:c8:d3:f1:b1:57:f7:02:a7:b5:7d:74:39:
2d:e3:49:23:3a:06:9f:d4:bb:aa:06:fc:86:dd:df:
28:bf:69:d1:49:54:aa:30:84:ce:f3:ee:8a:ea:81:
31:25:bb:76:bc:f8:c7:07:91:28:60:1a:14:61:3c:
e0:30:07:89:4f:80:16:6a:9b:57:4f:ea:3c:b5:23:
51:56:eb:15:6a:e7:6b:9a:2c:df:9c:7a:9e:04:59:
2d:43:a6:09:58:70:3c:1d:b4:bd:52:9a:8e:2f:55:
48:36:20:85:31:94:82:69:76:3f:8a:5f:2c:d7:cb:
f3:a7:85:51:2c:37:36:0d:2a:9c:45:d2:8a:18:5c:
d9:5e:7f:3a:e7:54:20:ad:73:6a:5b:11:65:97:43:
ff:fc:11:e8:ef:0c:62:c1:c5:3a:c6:ab:32:76:62:
5f:02:c4:61:82:7c:e2:cc:a4:3c:e9:af:4a:85:4a:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8A:56:83:8C:24:AD:41:02:95:A1:7B:B7:67:7B:C9:FB:31:55:F7
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c0:81:91:e9:be:69:0d:84:bd:1d:6b:9c:8b:36:a3:da:0d:
e6:a2:00:cb:3e:2f:f5:96:03:ff:70:5e:63:20:1a:bd:30:12:
50:68:fc:02:3b:a5:b0:f3:34:6a:6d:01:79:3e:aa:0e:78:f8:
5d:4d:e0:40:9e:e8:0c:02:24:6e:4c:50:da:dc:8e:47:e9:3d:
06:15:5a:60:56:0c:83:f8:08:74:9d:1e:f2:f9:95:5b:e3:8e:
c8:b9:05:49:2c:eb:a9:15:bb:6d:d3:36:c0:a6:8f:ff:5e:ba:
61:24:cd:74:33:8f:a1:d2:fe:f4:17:25:19:ca:7b:b5:3c:5e:
0a:9b:d5:83:9d:2b:dc:d3:19:c3:ee:cf:28:e4:46:8b:0e:9a:
e6:0e:44:51:22:98:b5:f2:50:ff:1d:38:9e:03:4b:d5:c5:4b:
5d:4f:76:04:2c:5a:7b:8b:f8:cc:ce:42:4a:55:77:d5:0a:e9:
d1:32:81:28:f5:0d:f7:2f:92:5b:0c:fb:bc:e1:5f:51:9c:bb:
fa:f0:c9:62:f3:5d:1a:c2:bb:5f:58:d9:b7:17:74:3e:2e:9e:
7f:7c:09:96:2b:f8:1e:1b:eb:7a:c9:32:74:68:e3:8b:7a:0a:
07:8f:c7:5c:cb:67:c5:8b:43:00:f0:8b:b3:ab:63:5f:c2:3d:
38:da:07:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEO1lwSQqzsalEGkYV77nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YmMzYWViOGIyZjBiNDg2ZTVjOGMwYzc5Y2U5ZDhkNjhi
MThmOTYwHhcNMjYwMzAyMTUwMDQ3WhcNMjYwMzAzMTUwMDQ3WjAzMTEwLwYDVQQD
Eyg3YzhhNTY4MzhjMjRhZDQxMDI5NWExN2JiNzY3N2JjOWZiMzE1NWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6E7vq6s/AeIGHxWg3xIosw7sKkc0
q24otg+RMeMn7tS3AepHbreIU2B8qsQdmpzLdKBH54Kh9Vkm16rAVi3pedumU+D1
Vi5UHT6nSZLI0/GxV/cCp7V9dDkt40kjOgaf1LuqBvyG3d8ov2nRSVSqMITO8+6K
6oExJbt2vPjHB5EoYBoUYTzgMAeJT4AWaptXT+o8tSNRVusVaudrmizfnHqeBFkt
Q6YJWHA8HbS9UpqOL1VINiCFMZSCaXY/il8s18vzp4VRLDc2DSqcRdKKGFzZXn86
51QgrXNqWxFll0P//BHo7wxiwcU6xqsydmJfAsRhgnzizKQ86a9KhUrYYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyKVoOMJK1BApWhe7dne8n7MVX3MB8GA1UdIwQY
MBaAFAS8OuuLLwtIblyMDHnOnY1osY+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEt
ZmYyMjdlNDk5M2Y3LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iMmJkZDAtZjM4My00YTVmLWI2NWEtZmYyMjdlNDk5M2Y3
LzEvQkx3NjY0c3ZDMGh1WEl3TWVjNmRqV2l4ajVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8CBkem+
aQ2EvR1rnIs2o9oN5qIAyz4v9ZYD/3BeYyAavTASUGj8AjulsPM0am0BeT6qDnj4
XU3gQJ7oDAIkbkxQ2tyOR+k9BhVaYFYMg/gIdJ0e8vmVW+OOyLkFSSzrqRW7bdM2
wKaP/166YSTNdDOPodL+9BclGcp7tTxeCpvVg50r3NMZw+7PKORGiw6a5g5EUSKY
tfJQ/x04ngNL1cVLXU92BCxae4v4zM5CSlV31Qrp0TKBKPUN9y+SWwz7vOFfUZy7
+vDJYvNdGsK7X1jZtxd0Pi6ef3wJliv4HhvreskydGjji3oKB4/HXMtnxYtDAPCL
s6tjX8I9ONoHMg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:49 2026 by rpki-client