Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier: SyOxsuTVxl7fPSY7uiTwsLIJZHo1ibnT+cNp8Cpsszk=
Subject key identifier: 70:4C:50:F3:76:38:A3:48:03:ED:55:8B:D1:BD:0C:A3:CB:8E:50:16
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial: 019D273AFD69F75EA1A268252E4171A0018E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number: 1385
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: UloxeJvQ8mWPx1euJ85c90tRUnO+OQKAawCc8gMlZp0=)
2: DUkKAgihVQLx-9lRs9kP656LAqs.roa (hash: Q209pcJqFgT3dRAcDq1sFjsPW/cttABhC0fxm9KWWRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fd:69:f7:5e:a1:a2:68:25:2e:41:71:a0:01:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=704c50f37638a34803ed558bd1bd0ca3cb8e5016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:d0:f9:86:38:a9:2e:50:b6:4c:57:39:9a:
c5:d2:2f:5d:7c:7d:32:da:bc:a0:b6:3a:70:bc:9a:
18:63:ac:26:70:b4:a3:6a:67:3d:46:14:ed:72:3f:
75:26:db:34:4b:79:f0:8f:00:fe:5a:db:e5:cb:16:
28:e5:1b:36:56:e3:c7:de:be:88:a8:25:3a:67:38:
c4:74:54:a9:76:56:fa:c4:3f:60:bf:2c:3a:ba:3b:
85:d9:1e:62:e3:c6:a9:2b:48:bd:cf:14:39:1e:24:
ec:98:bb:1f:41:8a:41:6b:12:47:03:bf:f1:14:d3:
b1:d1:1d:eb:50:dd:17:55:0f:b4:fa:bb:58:56:1f:
cf:dd:c8:95:7c:7d:96:5e:df:eb:41:5c:18:92:70:
b3:36:9c:10:c2:ca:92:59:8b:16:f0:f3:c0:b6:39:
9d:68:31:66:6e:b1:55:fa:c3:4a:6e:6f:e4:47:3a:
ea:d9:78:15:80:fa:11:19:bf:c0:24:51:82:a2:86:
b2:a8:0d:1c:9d:55:59:ab:1c:ab:83:2d:43:c1:1a:
2a:ec:f4:63:5c:e7:18:46:4d:fc:d9:c5:08:62:df:
c7:25:ab:6b:5c:b4:4b:3c:af:8b:32:6f:37:8d:c3:
44:fb:5f:25:ee:6f:4c:a1:a2:01:b3:1f:d2:81:61:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4C:50:F3:76:38:A3:48:03:ED:55:8B:D1:BD:0C:A3:CB:8E:50:16
X509v3 Authority Key Identifier:
keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cd:f3:be:a4:a4:d7:e7:07:9c:bd:12:05:54:c6:f8:81:30:
00:33:5f:e8:6c:e6:ce:a6:76:18:23:ea:49:e6:f0:a2:91:f4:
e1:a7:1d:76:28:45:5b:b8:ac:69:14:8f:c9:44:d6:33:c4:2a:
be:ac:c4:89:09:50:d3:79:a5:27:cf:37:56:6a:03:b0:a3:07:
6a:7f:04:6e:85:6a:f4:45:66:f5:4a:88:20:4c:11:86:b9:4b:
a2:b8:72:72:ba:dc:9f:20:e5:a1:4e:0b:60:a3:81:aa:9e:50:
e7:bd:e2:a6:89:46:de:bb:63:a3:01:d8:92:12:7a:52:f0:db:
40:b1:86:59:78:2d:0a:a6:b1:67:e2:b1:dc:b3:1b:84:55:49:
10:48:2d:62:2c:fd:e8:5e:79:d6:f9:6a:13:c1:fe:bf:f9:64:
11:cb:bc:f7:56:c2:21:b1:16:46:40:8e:67:26:9e:a2:6e:46:
3e:5a:4c:15:3b:bd:05:0b:12:0f:15:39:77:95:59:4e:35:e2:
ce:e5:95:82:ad:05:dd:c2:dc:bd:45:1e:4f:9d:71:3e:f7:1f:
ab:66:c4:37:53:6c:d8:8e:d6:dd:7c:48:a3:b4:cc:28:35:c3:
89:03:aa:64:87:e5:8d:f2:08:6a:fa:d2:0b:bf:a7:db:77:aa:
b6:5d:6f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:43 2026 by rpki-client