Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier: pNoobyh3DfLiSvIUQEW5fLo8bpX/jclhaeG3cAgqSiQ=
Subject key identifier: 84:2C:35:77:A6:B6:0F:2C:CE:B4:43:B9:DF:3C:E6:49:2F:6E:5C:97
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 01A0CEFEF4B2599BF5F5392ABF40D5D8F4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number: 0B42
Signing time: Wed 23 Sep 2026 16:00:10 +0000
Manifest this update: Wed 23 Sep 2026 16:00:10 +0000
Manifest next update: Thu 24 Sep 2026 16:00:10 +0000
Files and hashes: 1: 5sr_tmVIe_M0JW4wdYFpjoaZGuw.roa (hash: 38smcDw7DmiaLV5Ct4qOokRzF5bM7bVQS48BSQwDUec=)
2: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: JQVKvHPzL75DjsJAH9rZyLGdj1QRam05u/sibSCaBxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:fe:f4:b2:59:9b:f5:f5:39:2a:bf:40:d5:d8:f4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Sep 23 16:00:10 2026 GMT
Not After : Sep 24 16:00:10 2026 GMT
Subject: CN=842c3577a6b60f2cceb443b9df3ce6492f6e5c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:49:ce:97:00:09:57:88:83:8e:56:bb:dc:
64:75:00:b4:21:1f:05:aa:dc:7a:39:12:f1:63:ff:
d1:20:eb:fa:53:15:43:c5:24:e0:8c:88:45:aa:d9:
b9:13:3a:db:3b:79:43:f9:e0:68:b7:1c:5f:63:f7:
9c:36:8e:b8:d7:d8:88:48:0f:db:4d:01:79:f3:5a:
a5:35:f4:61:4c:00:f1:eb:b2:aa:45:db:ce:f5:ae:
fb:1a:55:61:af:55:eb:67:a5:16:18:e5:72:59:74:
d3:5a:60:ad:45:ec:c6:cc:43:b1:7d:2d:19:f0:7e:
d6:45:da:cb:52:56:22:2a:60:89:13:23:ce:d8:56:
b6:b6:b3:04:88:e4:a7:97:0e:9f:b6:c6:ea:f3:4e:
4d:f0:27:7a:78:f3:88:89:0f:5f:28:e7:30:f1:68:
6f:9f:67:53:a4:62:94:5f:0c:2c:b0:96:08:82:e9:
fd:24:64:25:ed:de:ea:17:69:eb:70:8d:8a:c5:7c:
81:bd:39:07:3e:56:fe:6c:c1:b9:c8:d2:d0:a1:63:
05:41:44:67:19:a8:3c:26:91:f8:5e:a4:05:95:b9:
7f:f0:46:c1:1c:4f:07:08:25:76:c9:f5:1b:a5:29:
5a:14:aa:c7:b7:f6:a9:f3:d3:16:0f:d8:9f:45:c9:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:35:77:A6:B6:0F:2C:CE:B4:43:B9:DF:3C:E6:49:2F:6E:5C:97
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f8:42:5e:1c:c5:1c:38:bf:47:1e:22:43:64:9c:8d:13:e2:
7b:ef:9e:f4:10:88:d5:49:05:17:87:0e:4e:b6:12:0b:ec:d0:
cc:00:f6:cc:72:1a:f4:7b:a7:b9:cc:34:bf:5b:06:26:83:f9:
ea:57:ef:ce:3b:1c:ac:1c:f3:1f:14:2e:c8:78:6f:f2:12:4a:
c7:71:6d:71:f2:a1:5b:81:3e:94:da:3d:7a:ca:f3:d1:4d:67:
e8:4f:7e:d7:2f:66:b3:8b:0c:24:dd:43:1c:2a:7e:85:cc:ae:
42:da:b4:70:4a:90:1c:b3:42:c3:34:de:3c:1b:c4:72:7f:b3:
c7:ed:ff:0f:94:a7:74:13:79:6b:4f:fe:02:dc:15:5c:13:bf:
aa:1e:53:61:71:56:83:47:2a:f1:c2:70:5b:89:bb:d5:a4:11:
6c:0d:bf:8c:82:8b:5c:f5:8b:60:2d:c0:2e:11:01:6d:67:fe:
38:7d:b6:d4:5e:81:47:0b:77:67:68:4a:73:7b:ef:d4:f0:cc:
8e:63:2e:66:2d:f0:63:88:8d:d2:a6:c7:83:46:59:a4:ae:17:
86:36:07:6c:e0:bd:ac:d1:96:7e:6c:09:6e:42:b4:84:4b:65:
af:a5:42:db:d1:06:e4:1d:a2:3e:fe:d4:10:bf:70:d6:35:0c:
89:ac:ff:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/vSyWZv19Tkqv0DV2PTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl
ZmE1MGYwHhcNMjYwOTIzMTYwMDEwWhcNMjYwOTI0MTYwMDEwWjAzMTEwLwYDVQQD
Eyg4NDJjMzU3N2E2YjYwZjJjY2ViNDQzYjlkZjNjZTY0OTJmNmU1Yzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn1JzpcACVeIg45Wu9xkdQC0IR8F
qtx6ORLxY//RIOv6UxVDxSTgjIhFqtm5EzrbO3lD+eBotxxfY/ecNo6419iISA/b
TQF581qlNfRhTADx67KqRdvO9a77GlVhr1XrZ6UWGOVyWXTTWmCtRezGzEOxfS0Z
8H7WRdrLUlYiKmCJEyPO2Fa2trMEiOSnlw6ftsbq805N8Cd6ePOIiQ9fKOcw8Whv
n2dTpGKUXwwssJYIgun9JGQl7d7qF2nrcI2KxXyBvTkHPlb+bMG5yNLQoWMFQURn
Gag8JpH4XqQFlbl/8EbBHE8HCCV2yfUbpSlaFKrHt/ap89MWD9ifRck+/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQsNXemtg8szrRDud885kkvblyXMB8GA1UdIwQY
MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt
MDExNzg0MWQyNTViLzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi
LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/hCXhzF
HDi/Rx4iQ2ScjRPie++e9BCI1UkFF4cOTrYSC+zQzAD2zHIa9Hunucw0v1sGJoP5
6lfvzjscrBzzHxQuyHhv8hJKx3FtcfKhW4E+lNo9esrz0U1n6E9+1y9ms4sMJN1D
HCp+hcyuQtq0cEqQHLNCwzTePBvEcn+zx+3/D5SndBN5a0/+AtwVXBO/qh5TYXFW
g0cq8cJwW4m71aQRbA2/jIKLXPWLYC3ALhEBbWf+OH221F6BRwt3Z2hKc3vv1PDM
jmMuZi3wY4iN0qbHg0ZZpK4XhjYHbOC9rNGWfmwJbkK0hEtlr6VC29EG5B2iPv7U
EL9w1jUMiaz/fA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:28:32 2026 by rpki-client