Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: Z6qCTIS5oRO0tn0K3tEyWGkS1jlN2mOTzCDpuqdI0t4=
Subject key identifier: 5B:44:1D:A9:3A:EB:68:62:5D:46:75:CB:9B:D2:8D:53:83:B8:9B:7A
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 019D29CE793EE81D1DB14C6DCC352F666A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 11:01:30 +0000
Manifest this update: Thu 26 Mar 2026 11:01:30 +0000
Manifest next update: Fri 27 Mar 2026 11:01:30 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: hUFlOd6TUFCO21yr12ioeCZTtzQwGKSQm2A7GaVTo0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:79:3e:e8:1d:1d:b1:4c:6d:cc:35:2f:66:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Mar 26 11:01:30 2026 GMT
Not After : Mar 27 11:01:30 2026 GMT
Subject: CN=5b441da93aeb68625d4675cb9bd28d5383b89b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:03:ee:8d:02:71:f5:47:9c:dc:88:87:7d:
8e:85:e6:56:36:57:8d:37:97:a2:43:66:8b:bb:77:
25:95:be:18:24:b8:d6:32:39:97:19:e7:c1:8e:df:
67:eb:d1:38:9d:f8:a4:28:3e:99:50:ce:0a:cb:a2:
e2:d6:a8:98:99:d0:cd:44:db:72:4b:07:04:a8:24:
1a:94:a6:5f:8a:a7:77:f4:70:92:7b:3f:62:a6:4c:
4c:84:ef:65:7e:ae:f3:e1:6f:e4:0e:87:88:01:0f:
60:4b:ba:6d:14:fa:56:12:2a:d0:3a:d3:4f:ec:72:
8f:85:6a:ac:46:de:54:1d:3d:36:36:c4:ab:5f:29:
e9:bb:4b:63:e3:ef:23:5e:e2:d2:70:da:08:5a:fc:
0c:db:1f:da:e9:9c:62:70:a3:dd:a2:9a:01:c7:34:
44:b4:0a:d8:46:48:ff:d3:43:08:f3:a8:33:40:6c:
b2:96:c6:9b:11:86:c2:bd:f3:d3:d2:4a:15:ef:2e:
e8:0a:8a:8a:f1:ef:30:42:c1:99:cb:25:6d:94:d8:
f8:1f:2f:fc:fb:c5:0c:4e:02:46:0a:cf:50:d3:5c:
9b:20:8e:c4:1a:cc:52:b4:c8:da:64:8d:58:59:a3:
6b:7d:03:11:c2:e4:dd:f9:69:ba:7d:4b:49:4f:dd:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:44:1D:A9:3A:EB:68:62:5D:46:75:CB:9B:D2:8D:53:83:B8:9B:7A
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e4:11:4f:25:f4:69:c0:5a:22:c9:51:79:77:30:ee:da:bd:
9a:4c:82:de:72:98:18:08:2f:b9:92:e3:05:8e:96:60:06:71:
5b:3e:84:da:e9:3b:8f:1d:91:18:a6:e3:9a:9a:d1:72:98:66:
11:39:41:ef:90:32:1d:46:ac:63:d8:89:e5:da:4e:29:c0:31:
53:c8:ed:2a:75:42:b5:a9:d4:da:e1:35:c4:95:ab:4d:f2:db:
2e:5e:4e:0c:b4:3d:d6:91:3d:24:bc:77:1a:7f:ad:30:f4:a0:
d4:b1:a2:2f:cf:53:3c:c6:66:0f:db:a3:cc:71:fd:6c:04:73:
c0:b4:7e:a2:ef:3f:cf:b0:13:94:3c:49:d1:cb:dc:0d:af:1e:
98:b5:05:4b:74:ec:e2:47:da:6e:8e:6d:ba:94:c0:0e:40:4e:
aa:ad:37:11:62:0c:cb:51:35:f3:df:42:ed:e1:d7:df:88:07:
1f:bc:49:7c:3e:a1:25:98:8b:6c:65:c3:37:79:fe:82:c8:1c:
88:c2:09:92:97:87:df:44:83:86:a3:15:67:ef:8c:6a:e8:b6:
79:9b:9d:ed:06:4e:2f:72:ab:7d:cd:3b:3e:04:64:33:84:08:
22:d5:4a:95:d7:55:5e:f1:6d:15:6f:0c:28:2b:56:8c:4c:4f:
0d:ee:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:05 2026 by rpki-client