Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: 30oX49OOY0UI6Yan5FvXS8LmnpcBMjrVKil+ZlZ3ieg=
Subject key identifier: FB:12:6B:5B:07:D4:D7:12:0C:54:75:AE:DA:80:95:A4:14:0D:5A:54
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019EBF5AF129E7B4710EB86FBEE1A8749F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 18EF
Signing time: Sat 13 Jun 2026 05:01:08 +0000
Manifest this update: Sat 13 Jun 2026 05:01:08 +0000
Manifest next update: Sun 14 Jun 2026 05:01:08 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: L+CpGu6T9YeMEr0NWSXyGSC6ed7ZsvvpOcAieJRoo9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:f1:29:e7:b4:71:0e:b8:6f:be:e1:a8:74:9f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Jun 13 05:01:08 2026 GMT
Not After : Jun 14 05:01:08 2026 GMT
Subject: CN=fb126b5b07d4d7120c5475aeda8095a4140d5a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:b1:e7:e8:c3:cd:0e:11:88:0c:f4:17:4e:
43:f1:60:c6:a4:52:9e:69:de:96:44:ae:40:4f:f2:
8f:22:b4:6a:36:43:df:5d:38:da:40:ed:f7:35:9d:
a6:4d:cc:78:01:48:63:88:50:76:f6:8a:39:e3:12:
17:de:46:71:f9:49:88:9e:17:9b:7c:97:27:7c:c6:
e7:d5:42:a8:db:9e:ef:d7:a6:30:b9:4b:57:47:c1:
11:bd:e8:99:9e:31:ef:7c:d5:4f:6a:29:d0:a1:40:
8f:cc:ab:c0:59:fe:00:c1:13:af:e8:6f:82:73:1f:
94:72:00:8f:d8:91:80:b8:77:c4:a6:ee:d6:05:15:
8e:9d:a4:ca:f1:3c:9e:67:e0:2f:04:65:41:0e:b2:
90:49:c8:49:fe:5c:a4:fb:bd:5b:ea:7d:03:ed:ea:
4a:36:1e:d7:d5:27:d5:2a:c3:4c:90:f5:38:7f:9a:
85:61:ae:8e:6c:83:c1:ee:36:09:c1:5c:66:9d:25:
9e:33:75:fc:6e:f4:3a:35:ea:3b:bd:9d:9d:e5:c7:
16:48:ee:da:53:03:ab:12:42:2c:95:cb:b6:9e:09:
5b:0d:25:43:a2:dd:cc:2b:56:a7:2a:a8:09:04:c9:
a4:21:28:d2:1d:53:3f:8d:c1:a9:1b:98:ef:a7:05:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:12:6B:5B:07:D4:D7:12:0C:54:75:AE:DA:80:95:A4:14:0D:5A:54
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:72:c0:76:e7:5e:bc:e9:0d:46:af:03:dc:ad:e4:05:49:08:
54:16:55:d4:d1:dd:08:90:be:44:52:82:50:8d:6a:4c:6b:59:
55:fa:e0:c8:1a:a7:22:69:37:e3:cf:88:48:5a:15:54:a7:25:
65:5e:63:ea:13:cf:42:89:e0:df:40:19:97:df:77:27:4c:c3:
16:12:22:5a:55:ed:b1:0b:28:9b:93:05:8c:bd:3b:b7:a1:57:
08:a7:b9:f2:8c:27:68:be:2e:32:c3:53:b3:7e:5e:8c:41:44:
c5:8b:c5:cd:14:c9:dc:38:f6:cb:5c:92:a0:7a:20:0a:f0:f4:
c0:41:4d:81:24:f4:84:a3:07:e4:32:42:8f:16:46:9c:08:47:
77:c8:aa:ab:ec:c6:14:ec:1c:41:1e:85:7e:d1:39:85:e3:38:
a2:e2:03:9d:18:38:f6:9a:6b:b0:4a:4b:82:d0:2f:f6:ab:7e:
cf:c4:c7:e3:bd:b2:43:15:ef:34:28:28:76:08:eb:60:c7:95:
02:2d:e7:9c:bd:c3:61:2b:b3:49:68:ef:f0:9c:b8:0e:7c:41:
e4:ca:50:20:c9:9b:cc:a9:77:34:0a:6f:26:b6:24:2a:6d:42:
9d:aa:83:23:fe:c2:84:7a:ec:d8:e5:20:bf:09:1e:40:bc:44:
e0:a2:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:01 2026 by rpki-client