Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: 1AO+Vdu74AFny7GAeXXFLk5uuVGtKTHwOH/uB226XSU=
Subject key identifier: A5:C7:9E:BC:8E:9F:A0:6F:56:D6:71:85:9E:64:E8:F2:FA:30:12:9C
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019DA37822C21FABE73CFE395AF6FABAC8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 185C
Signing time: Sun 19 Apr 2026 02:00:52 +0000
Manifest this update: Sun 19 Apr 2026 02:00:52 +0000
Manifest next update: Mon 20 Apr 2026 02:00:52 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: +lz2RmsW9PjUsXXWl8ASU/iPBDhRCCPEHXY2lImH4Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:22:c2:1f:ab:e7:3c:fe:39:5a:f6:fa:ba:c8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Apr 19 02:00:52 2026 GMT
Not After : Apr 20 02:00:52 2026 GMT
Subject: CN=a5c79ebc8e9fa06f56d671859e64e8f2fa30129c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:0a:96:bb:d2:45:48:08:e7:74:a2:fe:5e:
30:1b:53:de:a7:26:75:84:4f:26:fe:c7:ea:13:a7:
d3:55:18:50:07:fa:84:eb:15:c5:46:bc:c1:ff:07:
e7:12:e7:d3:9c:16:97:a5:21:cd:a3:b9:02:57:fe:
9d:71:61:76:cc:18:ff:b2:38:03:4d:bc:a8:73:d5:
9c:36:34:a9:b6:6e:94:cc:02:b6:e1:02:9c:74:cf:
d0:c3:b5:7d:da:91:60:a3:fd:3a:53:ab:34:4a:81:
4c:14:3d:57:eb:47:09:90:ae:c6:22:2f:74:0d:29:
4f:06:c1:0d:89:96:e8:3c:f2:88:b8:48:69:e2:de:
9b:ab:84:32:62:76:b7:54:d7:c4:90:0b:07:d2:c1:
65:11:be:f4:fc:4d:53:c4:e4:f8:5f:17:5e:15:93:
17:a6:0e:07:af:92:2d:fa:83:2d:cf:82:e0:38:59:
10:d8:70:4a:69:5f:82:60:f7:6b:c5:c4:81:ba:74:
a5:b6:88:f2:cf:11:e2:f8:a1:9b:09:72:4e:35:e5:
3d:12:f8:21:b1:37:e8:fd:7d:f8:dd:d2:27:34:06:
db:f3:0e:55:8b:94:d7:08:d4:58:b5:e8:3f:25:cf:
55:da:59:a1:90:ca:12:4f:53:77:1e:94:dd:17:41:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C7:9E:BC:8E:9F:A0:6F:56:D6:71:85:9E:64:E8:F2:FA:30:12:9C
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1f:bd:78:d1:c3:71:62:0c:32:1b:90:0b:31:0f:3e:30:21:
09:da:19:8c:ee:fd:02:61:5d:4c:19:ad:93:bd:a9:fe:0e:1b:
18:2e:48:71:72:a9:5e:e0:43:8c:1d:47:11:df:51:e7:a0:b2:
be:cb:b0:84:1d:24:f4:2b:63:3d:b6:0b:49:7d:01:98:e7:8e:
46:17:92:4b:13:0f:f7:75:76:45:93:ce:bf:c1:b6:cd:33:60:
9b:44:0d:3e:0e:a8:b5:de:bc:4f:71:ad:d9:25:02:9f:7c:cd:
f0:ea:8a:15:26:33:9d:f8:e9:87:79:1b:18:85:37:7a:eb:f7:
50:70:c0:8f:e8:e4:2e:6c:c6:58:6e:5b:82:54:48:d2:ee:77:
1f:65:04:be:7d:84:02:29:be:32:5f:5b:e7:35:7a:b3:25:09:
39:c3:b4:19:18:2f:0d:62:2d:7f:79:c2:db:5f:d1:d1:c5:b6:
ad:89:c7:a3:cd:5b:ea:09:08:4c:e2:1a:0d:7d:40:4b:b5:63:
f0:34:54:7f:ff:b2:76:83:d3:c1:c9:39:fb:01:ca:e1:a3:09:
f1:bb:93:e7:ad:d9:ab:49:e5:fb:96:8b:7b:5c:63:6a:f8:b5:
e4:27:a9:21:6d:c9:2e:9d:70:bb:60:35:21:bb:bf:d5:c1:ac:
21:d5:1e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:32 2026 by rpki-client