Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File: blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier: jeQgNgpjdajbLeFIntOF2j0NmdAUw8sfp/po6pQAI10=
Subject key identifier: B3:B1:67:90:25:09:92:D6:D9:BC:4C:99:1F:66:AE:80:F2:E6:0E:05
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer: /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial: 01A0E964B6708A268948E6A03E7B0AFE5D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number: 1A58
Signing time: Mon 28 Sep 2026 19:01:26 +0000
Manifest this update: Mon 28 Sep 2026 19:01:26 +0000
Manifest next update: Tue 29 Sep 2026 19:01:26 +0000
Files and hashes: 1: b9UaPnV67jOsAzGdtv8uKu-bNPQ.roa (hash: ahTYgT5//xP68fFq93yMhJHhiYRSn6qSgnwTPWrcJ2A=)
2: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: 51WJdK83Cif8XklMdLfgcvxLM7wr1cUV1ZXLZ9UZ7Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:b6:70:8a:26:89:48:e6:a0:3e:7b:0a:fe:5d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Validity
Not Before: Sep 28 19:01:26 2026 GMT
Not After : Sep 29 19:01:26 2026 GMT
Subject: CN=b3b16790250992d6d9bc4c991f66ae80f2e60e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:49:f6:87:f5:15:74:bf:3c:cc:85:a9:ed:
94:9b:a2:7b:ec:f7:1b:79:b2:18:f5:17:a4:c3:5a:
14:07:36:58:15:35:07:4b:8d:73:37:32:e0:59:e3:
18:a6:85:ff:a4:7c:7f:44:5b:04:bb:68:ff:73:b2:
04:fb:dc:37:20:dc:fe:ee:94:dd:96:be:9b:cb:6a:
43:df:60:ea:cd:fe:f6:5a:8c:e0:3c:07:bf:2d:9c:
a2:5a:04:53:ca:95:2c:28:30:3d:98:36:43:49:07:
7b:80:56:55:33:87:fe:85:c4:f3:ce:8f:2d:57:86:
11:4f:92:91:3e:aa:6f:a7:56:fa:f3:22:56:86:f5:
41:10:4d:24:1b:fa:11:0c:d1:d3:0f:e6:7e:ed:e3:
87:8e:87:51:d5:13:8c:d4:76:6c:37:c1:2f:16:03:
b9:46:d9:e9:83:62:f1:16:e6:2b:d2:72:f4:a0:51:
3e:25:41:41:42:1a:a9:d0:62:5a:9b:86:88:f0:b3:
7e:0c:df:f6:67:a2:8c:df:6a:44:1c:ac:7a:4e:55:
3d:03:a2:5e:3e:8c:bb:0d:e4:76:81:80:58:93:00:
17:28:af:d3:74:13:15:36:51:43:43:11:13:e6:c7:
bf:09:26:df:9a:9d:25:4d:29:bc:55:cc:d3:77:ff:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B1:67:90:25:09:92:D6:D9:BC:4C:99:1F:66:AE:80:F2:E6:0E:05
X509v3 Authority Key Identifier:
keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:56:35:80:30:47:c3:17:a4:9a:29:ff:21:e1:83:5e:87:c6:
5b:a7:8c:15:53:9b:f4:4d:4e:3e:1b:16:55:0c:e8:0f:da:67:
a5:4b:8b:0a:5a:cb:5b:f3:8d:b0:5b:bb:11:67:25:3e:86:1c:
25:fc:4e:ce:90:19:e0:3d:6e:6e:02:4c:3a:be:6e:f0:4a:3a:
67:dd:60:db:29:42:cb:15:c9:a8:81:5e:35:db:bf:71:9d:63:
ac:92:3b:b0:7b:b7:ac:d0:e6:7d:d8:12:47:05:3d:6a:78:b6:
7e:49:74:04:6e:58:49:25:d0:d3:2b:28:6b:1d:19:4c:f1:56:
d3:4a:5a:34:c4:27:db:a6:02:73:6f:83:49:d1:d2:8f:21:1e:
ef:1d:44:83:33:00:74:7d:af:ab:55:c6:fe:9c:ca:5e:34:dd:
d7:da:8c:29:f3:d0:18:94:47:b6:47:b0:38:16:35:08:7f:9d:
a8:7f:e8:3e:de:80:69:af:e5:b6:d8:c8:ef:b9:74:bc:2e:0c:
3e:93:b8:c3:3e:a5:4e:87:47:80:b3:7e:af:35:ae:5c:11:00:
b7:b1:7c:ff:a6:48:be:5b:85:27:16:e0:e0:96:59:de:dc:38:
a0:7c:0b:60:25:ad:36:67:81:aa:6f:84:0c:37:33:ba:47:ec:
18:30:11:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpZLZwiiaJSOagPnsK/l1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNTQyY2VkZTUzYTBjNTcxNDVhNmFmZjJmNTgxOTZmMDJk
NGExMmUwHhcNMjYwOTI4MTkwMTI2WhcNMjYwOTI5MTkwMTI2WjAzMTEwLwYDVQQD
EyhiM2IxNjc5MDI1MDk5MmQ2ZDliYzRjOTkxZjY2YWU4MGYyZTYwZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqVJ9of1FXS/PMyFqe2Um6J77Pcb
ebIY9Rekw1oUBzZYFTUHS41zNzLgWeMYpoX/pHx/RFsEu2j/c7IE+9w3INz+7pTd
lr6by2pD32Dqzf72WozgPAe/LZyiWgRTypUsKDA9mDZDSQd7gFZVM4f+hcTzzo8t
V4YRT5KRPqpvp1b68yJWhvVBEE0kG/oRDNHTD+Z+7eOHjodR1ROM1HZsN8EvFgO5
Rtnpg2LxFuYr0nL0oFE+JUFBQhqp0GJam4aI8LN+DN/2Z6KM32pEHKx6TlU9A6Je
Poy7DeR2gYBYkwAXKK/TdBMVNlFDQxET5se/CSbfmp0lTSm8VczTd/+1lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOxZ5AlCZLW2bxMmR9mroDy5g4FMB8GA1UdIwQY
MBaAFG5ULO3lOgxXFFpq/y9YGW8C1KEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYt
MzE4YzcxYjExOWY3LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zMjE2OWEtNGE1YS00MTFiLWIwMDYtMzE4YzcxYjExOWY3
LzEvYmxRczdlVTZERmNVV21yX0wxZ1pid0xVb1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVY1gDBH
wxekmin/IeGDXofGW6eMFVOb9E1OPhsWVQzoD9pnpUuLClrLW/ONsFu7EWclPoYc
JfxOzpAZ4D1ubgJMOr5u8Eo6Z91g2ylCyxXJqIFeNdu/cZ1jrJI7sHu3rNDmfdgS
RwU9ani2fkl0BG5YSSXQ0ysoax0ZTPFW00paNMQn26YCc2+DSdHSjyEe7x1EgzMA
dH2vq1XG/pzKXjTd19qMKfPQGJRHtkewOBY1CH+dqH/oPt6Aaa/lttjI77l0vC4M
PpO4wz6lTodHgLN+rzWuXBEAt7F8/6ZIvluFJxbg4JZZ3tw4oHwLYCWtNmeBqm+E
DDczukfsGDARbQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:54:46 2026 by rpki-client