Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: RLl64piIvPMCaOmFz3+Z4Q+lqlYdorAQfEdNbTfuqhc=
Subject key identifier: 81:10:A6:CC:50:4C:AA:E8:BF:D6:90:E7:62:E2:05:49:6E:49:AA:FE
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019FACE3B3AD7516C4B92294B2B2FCCEB539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 196A
Signing time: Wed 29 Jul 2026 08:00:31 +0000
Manifest this update: Wed 29 Jul 2026 08:00:31 +0000
Manifest next update: Thu 30 Jul 2026 08:00:31 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: dMPxP5Is3YcfVx7z8vlEykVRA0aSnisV8iwnL2hnQJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:b3:ad:75:16:c4:b9:22:94:b2:b2:fc:ce:b5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Jul 29 08:00:31 2026 GMT
Not After : Jul 30 08:00:31 2026 GMT
Subject: CN=8110a6cc504caae8bfd690e762e205496e49aafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:31:33:42:53:38:ac:d0:62:ae:74:7b:05:
6c:e9:06:99:99:5a:ad:06:b7:39:3d:b3:67:06:27:
3d:56:61:a2:b7:78:5b:d8:c3:fe:d2:7e:e5:fb:e6:
7f:ca:87:87:a9:eb:cd:55:4e:c7:ca:86:ab:0f:ed:
ac:01:1c:30:5a:c1:47:e3:2c:10:e4:cd:83:f9:e4:
14:e7:25:1b:7e:cc:17:14:6c:ae:af:8c:60:b8:7c:
51:12:eb:79:fc:1f:93:a4:8c:8f:4c:18:af:9a:0c:
c7:23:a2:b6:a8:7f:9e:0d:e4:d6:c0:52:b1:a2:19:
f9:c7:2f:83:e0:6e:38:3c:8a:8d:db:6a:85:76:67:
31:9c:62:df:f9:06:ef:60:f2:95:15:f0:81:b2:be:
57:71:c8:1f:f2:d8:72:1c:86:97:27:04:e7:5a:74:
ba:27:d5:17:8e:a0:9c:0a:48:78:aa:f4:f3:54:09:
69:b5:14:fd:6b:9e:3c:97:da:7e:2d:2c:ea:74:77:
a1:31:e9:05:56:e7:e8:ab:c7:71:cf:03:6c:48:5c:
da:4a:2d:c5:eb:d5:2d:fd:79:3d:23:20:c9:49:a3:
22:57:fe:2c:07:d4:ca:48:10:99:d5:46:8e:85:1e:
18:cf:4c:4c:62:2c:d8:7b:4d:da:08:2f:6d:c3:4c:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:A6:CC:50:4C:AA:E8:BF:D6:90:E7:62:E2:05:49:6E:49:AA:FE
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a7:b4:ba:2a:7e:08:3c:3a:6c:4b:07:1e:9d:df:23:1c:53:
96:78:6e:dc:2d:84:8e:0d:9b:1e:78:80:78:ef:07:8b:54:28:
d6:68:ff:67:7a:c6:64:a2:c4:c8:79:75:b0:b8:a4:68:16:8e:
43:d2:1a:88:63:71:33:5c:7e:88:21:33:e8:63:bb:db:d8:d9:
7c:bc:11:db:71:5c:e9:7b:d9:7d:37:9e:23:b0:6a:38:70:12:
81:74:36:c8:01:ef:12:88:40:b8:58:20:dd:8e:99:eb:2f:16:
03:a5:9e:fc:e8:d0:c4:f9:e0:46:94:b4:59:94:09:5d:32:56:
56:2b:bf:ce:dc:3e:a6:ca:42:37:0d:e9:6e:d8:2b:5c:4f:77:
16:fb:d1:2e:7c:a9:66:34:53:7a:c2:c8:16:2d:11:0d:55:65:
62:8c:fd:f8:d5:e8:5d:93:45:db:10:0f:6f:07:61:0a:13:9b:
2c:55:af:ea:bc:9f:31:50:46:6f:f2:1c:0a:ef:99:f7:b4:5c:
04:ef:d8:cc:cd:36:97:45:e1:98:ee:b6:04:f6:1b:e7:25:bc:
79:e3:46:a8:8d:89:c7:25:5b:2c:61:a0:69:e9:fe:87:f5:ab:
c6:9d:74:32:9b:a1:c8:54:a9:87:83:d8:e0:71:97:dd:d1:be:
c4:03:3a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:29 2026 by rpki-client