Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: SVFWMQr+pg6NKsbK2M/9utZLzJSCFoFhjFCnCTr2Hlg=
Subject key identifier: C3:30:EB:48:C3:99:C1:F9:AB:F0:EB:60:46:02:CE:E4:C2:E2:CD:2A
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 01A0F71FF5A1428B4572E5B621F8D1186245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 1A7D
Signing time: Thu 01 Oct 2026 11:01:01 +0000
Manifest this update: Thu 01 Oct 2026 11:01:01 +0000
Manifest next update: Fri 02 Oct 2026 11:01:01 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: PYIWEIjHm2dQBmriI75Wlqyh1qapfGXFWgCMS/RZcLM=)
2: y30i-bTM-2qoblFhqBBAe9ul310.roa (hash: VSrKRNqpStfrax2Fv8Y8tuF7RlQyE1r/jQmHGDdOng8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:1f:f5:a1:42:8b:45:72:e5:b6:21:f8:d1:18:62:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Oct 1 11:01:01 2026 GMT
Not After : Oct 2 11:01:01 2026 GMT
Subject: CN=c330eb48c399c1f9abf0eb604602cee4c2e2cd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:fa:e6:93:06:25:9e:5e:3b:d4:77:fe:23:
db:70:bf:42:d7:78:76:e4:cd:86:0d:f7:83:4d:29:
60:d8:40:8c:6b:2e:bd:15:50:cf:70:f1:d6:07:07:
9c:35:85:cd:dd:78:bd:fd:35:85:5f:ec:a7:20:00:
56:9c:fe:82:e4:5a:de:7e:57:17:ff:d4:1e:98:a1:
50:7a:82:39:62:14:5d:82:14:15:02:c4:c2:42:3b:
c8:37:05:85:29:46:1f:31:5d:a6:ea:bd:97:88:76:
81:e8:45:59:ec:ed:a7:0f:dc:de:47:20:f0:69:e7:
a3:2e:04:cf:95:e0:92:8f:90:9d:f5:6f:f0:91:7c:
43:38:04:da:14:95:9a:50:c6:d1:cc:2b:7d:47:70:
b4:b9:c6:e9:2c:0f:28:d2:47:c2:ab:e3:06:89:8a:
34:43:02:83:50:ea:63:92:3c:60:05:70:c6:00:e1:
08:bb:4a:97:78:aa:2d:5c:0b:6d:e0:70:15:bc:e6:
9c:80:6f:9f:ec:5d:0e:f8:8c:9a:e4:86:9f:72:ab:
ed:c9:5e:6b:2d:70:18:4e:03:3b:f8:36:0c:5e:64:
d2:be:ec:ee:63:f2:d1:c4:52:77:9a:9d:b4:0f:01:
b4:bd:d3:63:d6:d9:4e:a9:cd:41:98:56:13:ec:89:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:EB:48:C3:99:C1:F9:AB:F0:EB:60:46:02:CE:E4:C2:E2:CD:2A
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:17:19:e9:28:7d:7a:8f:0d:09:23:fc:02:57:1d:8c:be:f7:
93:13:96:88:95:da:00:60:03:ac:af:4a:e4:7d:04:9f:20:c2:
50:7b:de:b6:05:bf:ab:5a:f0:51:bd:e5:95:b9:1d:a5:40:3c:
99:0e:a3:53:8c:fc:c4:09:30:87:f4:8b:52:98:f0:65:5d:b3:
61:49:76:05:b1:47:3e:96:0c:87:45:0e:96:21:28:37:cf:ae:
b3:a6:69:c8:78:c6:91:bb:1e:21:5d:ae:0b:3e:9e:85:cb:14:
62:82:ad:4f:67:5b:32:87:cb:06:0a:13:da:44:79:ae:ea:8f:
25:95:9a:a2:c9:77:06:43:5f:fb:c9:be:55:24:f6:6c:a3:c8:
3d:b2:80:c9:f4:f0:ef:0e:3d:40:5c:8b:ec:e7:8c:74:ca:dd:
7d:da:3a:71:04:aa:ac:22:37:9f:a4:89:95:b7:5b:1a:65:30:
17:8f:2b:ca:51:33:d5:f7:1f:f8:20:4d:ba:c1:c2:70:56:b9:
5f:5f:d7:63:7d:bf:25:8b:10:21:78:5b:f7:1a:85:4a:a5:8c:
dd:b1:4b:2d:ae:e9:1c:7e:f6:a2:c6:ac:ac:13:83:ac:a2:a8:
02:b9:3a:87:fc:47:2a:73:c0:fd:67:0f:53:7f:49:fa:9c:e3:
58:97:88:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD3H/WhQotFcuW2IfjRGGJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOGI3OTgxMGNlYmM1YmEyYTUyZjdhMDhkNTE5NmQzM2U4
Y2RjZTcwHhcNMjYxMDAxMTEwMTAxWhcNMjYxMDAyMTEwMTAxWjAzMTEwLwYDVQQD
EyhjMzMwZWI0OGMzOTljMWY5YWJmMGViNjA0NjAyY2VlNGMyZTJjZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8T65pMGJZ5eO9R3/iPbcL9C13h2
5M2GDfeDTSlg2ECMay69FVDPcPHWBwecNYXN3Xi9/TWFX+ynIABWnP6C5FreflcX
/9QemKFQeoI5YhRdghQVAsTCQjvINwWFKUYfMV2m6r2XiHaB6EVZ7O2nD9zeRyDw
aeejLgTPleCSj5Cd9W/wkXxDOATaFJWaUMbRzCt9R3C0ucbpLA8o0kfCq+MGiYo0
QwKDUOpjkjxgBXDGAOEIu0qXeKotXAtt4HAVvOacgG+f7F0O+Iya5IafcqvtyV5r
LXAYTgM7+DYMXmTSvuzuY/LRxFJ3mp20DwG0vdNj1tlOqc1BmFYT7ImJQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMw60jDmcH5q/DrYEYCzuTC4s0qMB8GA1UdIwQY
MBaAFG+LeYEM68W6KlL3oI1RltM+jNznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kZTY3NTktMDkxOS00ZTVjLThhY2Et
NDQzNTUzMjhiN2IwLzEvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kZTY3NTktMDkxOS00ZTVjLThhY2EtNDQzNTUzMjhiN2Iw
LzEvYjR0NWdRenJ4Ym9xVXZlZ2pWR1cwejZNM09jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRcZ6Sh9
eo8NCSP8AlcdjL73kxOWiJXaAGADrK9K5H0EnyDCUHvetgW/q1rwUb3llbkdpUA8
mQ6jU4z8xAkwh/SLUpjwZV2zYUl2BbFHPpYMh0UOliEoN8+us6ZpyHjGkbseIV2u
Cz6ehcsUYoKtT2dbMofLBgoT2kR5ruqPJZWaosl3BkNf+8m+VST2bKPIPbKAyfTw
7w49QFyL7OeMdMrdfdo6cQSqrCI3n6SJlbdbGmUwF48rylEz1fcf+CBNusHCcFa5
X1/XY32/JYsQIXhb9xqFSqWM3bFLLa7pHH72osasrBODrKKoArk6h/xHKnPA/WcP
U39J+pzjWJeIOA==
-----END CERTIFICATE-----
Generated at Thu Oct 1 19:06:16 2026 by rpki-client