Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: D01R1xxexVkbffqD5xS++xGX0b3GD8gxinKjibAuAmQ=
Subject key identifier: 92:D9:31:63:DE:F4:95:DA:DE:89:BC:B1:50:6A:AA:7A:7A:6C:D1:90
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019CAA5859255FAB835F4F2364EA37DFBA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 17DB
Signing time: Sun 01 Mar 2026 17:00:42 +0000
Manifest this update: Sun 01 Mar 2026 17:00:42 +0000
Manifest next update: Mon 02 Mar 2026 17:00:42 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: yGIrIKPBI6d8IVBkB/g3MhLiHo/FqaX7YOua/iTlHys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:59:25:5f:ab:83:5f:4f:23:64:ea:37:df:ba:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Mar 1 17:00:42 2026 GMT
Not After : Mar 2 17:00:42 2026 GMT
Subject: CN=92d93163def495dade89bcb1506aaa7a7a6cd190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:8d:83:98:44:8e:31:19:40:64:fd:b0:06:
71:a2:56:52:9c:01:4a:2c:c0:52:1d:d7:07:05:73:
cb:4e:17:a8:60:3d:41:da:c3:f8:15:ed:db:60:58:
25:8a:41:5f:59:ee:38:de:d9:ae:64:4c:02:0c:83:
47:92:f7:61:31:5b:84:0f:db:5b:de:38:dd:7e:51:
29:ac:8b:ab:0e:48:6a:bb:22:48:5a:65:a9:ad:51:
7c:9d:0c:90:6b:ed:04:29:57:50:c8:b8:10:93:fb:
9b:4a:e4:3c:9a:91:75:f0:29:d3:42:9b:54:25:c4:
77:52:59:8b:8f:32:a5:e4:a4:23:d9:21:bb:36:55:
a7:a0:01:7d:7e:f2:2a:95:e0:af:a9:72:78:e6:b7:
bb:7a:7f:dc:c5:ab:c5:50:8b:a5:34:eb:3e:70:b0:
98:e9:66:73:0e:38:c5:58:e9:50:f9:8c:78:0e:b8:
40:e5:5d:83:d5:a2:84:11:21:20:70:cc:1f:59:26:
f2:8f:f0:69:89:9b:69:ac:8b:c1:35:bf:a1:67:5e:
02:cb:04:96:6d:1c:d2:a8:8e:80:87:ac:10:25:25:
65:ff:94:38:e7:00:a0:3a:4a:eb:29:dc:6c:d3:ad:
f9:7e:fa:7c:15:79:6c:07:f0:98:6c:40:90:ae:9a:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:31:63:DE:F4:95:DA:DE:89:BC:B1:50:6A:AA:7A:7A:6C:D1:90
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:06:c1:61:e7:ad:f2:a4:ce:79:43:fe:21:73:8b:cf:04:ff:
28:6a:20:74:fa:a4:70:86:05:f7:8a:6a:ee:f6:fd:30:54:49:
bc:41:76:52:8f:3e:3e:05:03:dd:79:41:0e:e9:1d:6d:ec:da:
6c:c0:7d:3e:31:1a:df:15:ce:c9:c1:eb:7d:8a:d1:f6:0b:83:
91:f9:be:17:21:14:b7:0e:57:83:2d:5d:b7:e0:0d:a1:f5:a3:
11:17:af:1a:a3:0d:0a:80:5e:78:ce:04:69:33:7f:cc:87:7c:
53:6f:44:f5:50:b5:a4:4c:1d:4a:e1:2a:60:5a:f3:bc:30:57:
ba:64:5c:bb:0f:ee:69:8b:ff:8a:b9:ee:f6:ae:cc:b6:f0:7e:
0a:a1:2a:7a:20:3f:58:09:f9:44:be:22:49:f9:03:66:a3:b9:
6e:c0:10:6e:ad:bb:da:42:f3:d1:10:3c:59:3b:4f:d0:b3:95:
b0:8a:9a:7f:c2:f0:eb:34:9f:5c:8d:35:4c:dd:89:46:5d:4c:
02:21:23:ba:9f:f6:3e:67:c3:2a:ad:b9:9e:86:18:39:5b:84:
bd:a3:3a:dc:3c:ed:66:6c:7d:7f:eb:df:cc:02:b1:f3:62:d9:
69:79:98:4d:6b:e8:2e:80:c2:44:77:9b:ef:24:50:f3:14:98:
7d:ef:55:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:10 2026 by rpki-client