Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: n/ojDmieRADs9RoADL/B9dWNBkypVlU/m3r+40LCixM=
Subject key identifier: 6A:FA:D0:EE:71:F0:F3:66:7B:10:0B:88:8C:BA:A4:B1:45:C5:40:76
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 01A0F1551FC0893A3ED031B04051C3CAA456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 1A7A
Signing time: Wed 30 Sep 2026 08:01:22 +0000
Manifest this update: Wed 30 Sep 2026 08:01:22 +0000
Manifest next update: Thu 01 Oct 2026 08:01:22 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: OVc8HazZ4a8t7BvRqczIcVFVjbWroxI05EG61ZyONN0=)
2: y30i-bTM-2qoblFhqBBAe9ul310.roa (hash: VSrKRNqpStfrax2Fv8Y8tuF7RlQyE1r/jQmHGDdOng8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:55:1f:c0:89:3a:3e:d0:31:b0:40:51:c3:ca:a4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Sep 30 08:01:22 2026 GMT
Not After : Oct 1 08:01:22 2026 GMT
Subject: CN=6afad0ee71f0f3667b100b888cbaa4b145c54076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:2b:00:fd:f8:24:66:83:1d:5c:ba:fe:3f:
b9:8c:b6:d0:2b:33:d6:50:30:7f:6b:94:dd:01:f4:
78:9a:72:f3:29:85:b9:37:0e:2f:dd:3e:e3:6f:88:
c3:3c:89:53:8f:bf:62:8e:49:3a:22:a0:f8:8b:fc:
7d:ef:82:d3:06:4d:c0:28:45:ad:a6:5c:68:c7:5f:
23:7e:c6:52:ae:e6:65:86:eb:df:12:c3:2a:93:77:
2e:0f:60:39:2d:b7:4e:a2:c3:d8:85:70:70:76:12:
0f:79:53:d1:3a:1e:67:77:2a:f9:df:5d:30:21:dd:
e2:f6:75:d9:9b:dc:80:51:bc:f8:b2:eb:d9:21:bc:
b9:c6:5f:7b:c2:bc:62:2e:a8:0b:9e:5d:96:01:68:
f2:55:61:b3:4f:67:72:8a:b2:10:bc:53:aa:2a:22:
6b:da:27:88:1f:ca:f7:f9:cd:50:31:37:f8:ac:3b:
4d:00:02:53:c8:94:db:5a:12:8c:73:0a:30:88:7c:
72:27:80:20:14:c3:24:bb:dd:e4:68:8a:c1:fb:0f:
c5:a2:6f:a7:e3:bd:09:f3:bd:75:af:2b:57:57:e6:
68:01:e3:92:0c:73:eb:87:67:53:fa:c6:c1:f0:d6:
c3:97:ff:1a:bd:8b:e1:fb:fd:a8:6c:5c:98:5c:97:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FA:D0:EE:71:F0:F3:66:7B:10:0B:88:8C:BA:A4:B1:45:C5:40:76
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d2:37:d8:d3:3a:9c:7f:a6:2f:df:a5:fb:91:b5:f7:98:6f:
7b:82:79:6d:91:e2:75:20:c3:90:de:66:23:36:97:81:9b:27:
dd:cc:1b:19:5d:f7:6d:75:99:c2:c7:ea:3c:12:16:c3:03:69:
84:f8:f8:d8:ca:11:6b:bd:48:94:90:8f:53:43:ed:a0:29:4b:
65:d5:51:00:f8:08:50:ee:cb:89:2e:3b:09:bc:b6:a5:31:c8:
eb:55:f7:43:14:c5:16:d2:34:60:58:29:f7:aa:53:38:37:af:
18:81:cd:02:ed:57:79:50:53:7d:a0:20:34:58:6e:0d:13:d6:
33:c6:df:12:14:ca:b1:ca:59:d2:5a:89:fd:6d:1e:64:07:b0:
c8:e7:94:01:31:2a:36:24:14:c1:d4:22:6d:6d:6d:33:8b:fb:
7f:5a:e9:fd:99:17:e1:5d:dc:64:f5:78:5b:3a:32:8e:2a:e6:
5f:d2:2c:8a:d6:49:d2:79:f1:de:a1:71:cf:ff:2e:81:94:a2:
e2:1e:da:79:13:4f:8f:1e:3d:a3:1a:01:17:8f:60:00:06:ce:
97:b1:d0:43:a8:92:74:42:34:ae:88:c8:46:77:8d:f4:d0:46:
ff:9d:65:5a:df:cc:14:11:d6:7b:13:f8:83:94:58:d8:ca:42:
a9:80:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:44:54 2026 by rpki-client