Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: sH/WZAegHNSpwWGnOazsMh+9oSdXd/b51Ic4aC648UA=
Subject key identifier: 60:99:3B:35:5C:21:EB:6A:FF:1C:35:4B:66:3E:97:EF:45:96:BB:00
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 01A0D0ED86EAB8181E5B587A66AF25F3C7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 01:00:22 +0000
Manifest this update: Thu 24 Sep 2026 01:00:22 +0000
Manifest next update: Fri 25 Sep 2026 01:00:22 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: GJp5gIUaFgsPrrmpMboSASMDyPDFwY+lwNKSECF+m0Q=)
2: KTuFHNmNqOQcqGkD0_LLHcb3LD8.roa (hash: xsj6ZBhPayD1o1vBeEH4YfY+jj4U4fktOZ+HokJunGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:86:ea:b8:18:1e:5b:58:7a:66:af:25:f3:c7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Sep 24 01:00:22 2026 GMT
Not After : Sep 25 01:00:22 2026 GMT
Subject: CN=60993b355c21eb6aff1c354b663e97ef4596bb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:23:b7:e8:c8:a4:a7:1c:25:29:7d:2b:8d:
cc:41:d2:6d:c7:7c:05:92:7f:4e:48:f9:00:f9:86:
11:b9:f2:d3:cb:8c:3e:b3:a1:4c:a7:5c:9c:20:a4:
9f:97:d1:a6:15:b7:55:10:7a:6d:58:16:e0:c6:d8:
87:69:14:b7:86:fe:c2:e5:02:62:52:f2:16:9f:03:
e4:92:a1:ed:ee:50:51:6d:d7:e3:01:62:ca:65:98:
fc:91:86:c1:10:85:3c:8c:c5:71:7b:30:4e:80:da:
cc:7f:ce:4e:f6:61:4c:ff:fd:15:6b:6b:cc:ef:08:
0e:8d:38:3d:a8:45:5b:aa:0a:93:5d:2a:76:86:3f:
3e:41:3e:69:67:72:29:00:05:3b:f5:77:ca:d0:64:
12:2f:f0:4a:63:6e:3d:6b:2d:11:6f:2c:84:5d:0b:
4e:01:0f:c4:28:6f:1f:f4:02:f2:d1:20:c1:1e:79:
1d:24:ef:6e:b2:fb:5d:ea:16:10:dc:e6:fc:78:cd:
65:31:44:c6:b2:ba:e3:0b:e9:d0:46:03:15:00:9d:
18:1e:25:3f:48:30:fd:84:05:0a:f3:24:4c:e8:95:
fe:e3:8a:bf:37:08:64:f6:ef:5f:69:9e:12:0c:bf:
4e:0a:d0:5c:5f:d3:a4:7c:dc:65:b7:d9:5a:53:a6:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:99:3B:35:5C:21:EB:6A:FF:1C:35:4B:66:3E:97:EF:45:96:BB:00
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d4:c8:c8:a3:46:9d:ad:56:ba:77:a8:23:4a:df:19:10:67:
db:c6:4d:f3:68:dd:83:46:91:62:c5:34:ff:2b:80:3f:8f:4c:
e2:c0:34:53:ec:c4:66:21:cf:28:ab:d9:0f:79:69:6b:63:86:
90:75:b6:e6:3a:c7:4a:5f:9b:ca:41:63:86:45:4e:ba:0f:2b:
50:aa:85:59:0c:1c:7a:36:de:df:ff:54:68:d9:e8:3c:59:93:
9d:5e:02:b9:21:a7:89:cf:41:12:2a:bc:9d:cf:f8:a4:84:74:
4a:4b:a5:de:85:ae:00:15:e0:36:27:08:21:c0:1d:6b:81:00:
65:0d:fd:d5:c9:bb:53:a9:34:ba:0d:80:05:4f:f9:d7:1a:95:
3f:32:b9:97:d7:b9:48:2d:8f:37:1a:a1:6d:46:7b:34:63:35:
b6:e6:b6:a5:2f:51:3b:a4:fb:f4:4c:4d:95:35:36:87:ff:da:
1c:70:bd:bd:a0:80:46:6b:f3:c2:cb:4b:d7:07:fd:1b:98:f4:
68:ca:1a:a5:36:81:48:8f:99:f6:af:a7:8c:51:ab:4a:69:7f:
36:62:c2:fe:35:b0:45:fe:8c:67:f1:0a:7f:9a:06:77:25:c7:
c5:25:ee:ee:33:d7:a3:60:2d:65:24:08:7b:6d:5b:62:bb:08:
57:b4:79:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7YbquBgeW1h6Zq8l88elMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ODg3Y2ViMWNiZDEwMjllZjhhNzZkZjc3ZjExNTJiYjQ3
M2I2NDMwHhcNMjYwOTI0MDEwMDIyWhcNMjYwOTI1MDEwMDIyWjAzMTEwLwYDVQQD
Eyg2MDk5M2IzNTVjMjFlYjZhZmYxYzM1NGI2NjNlOTdlZjQ1OTZiYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIAjt+jIpKccJSl9K43MQdJtx3wF
kn9OSPkA+YYRufLTy4w+s6FMp1ycIKSfl9GmFbdVEHptWBbgxtiHaRS3hv7C5QJi
UvIWnwPkkqHt7lBRbdfjAWLKZZj8kYbBEIU8jMVxezBOgNrMf85O9mFM//0Va2vM
7wgOjTg9qEVbqgqTXSp2hj8+QT5pZ3IpAAU79XfK0GQSL/BKY249ay0RbyyEXQtO
AQ/EKG8f9ALy0SDBHnkdJO9usvtd6hYQ3Ob8eM1lMUTGsrrjC+nQRgMVAJ0YHiU/
SDD9hAUK8yRM6JX+44q/Nwhk9u9faZ4SDL9OCtBcX9OkfNxlt9laU6byAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCZOzVcIetq/xw1S2Y+l+9FlrsAMB8GA1UdIwQY
MBaAFAeIfOscvRAp74p233fxFSu0c7ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUt
MzRmN2Q1MTMxMzY3LzEvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wMjQ0NWMtODFmOS00N2IzLTkzODUtMzRmN2Q1MTMxMzY3
LzEvQjRoODZ4eTlFQ252aW5iZmRfRVZLN1J6dGtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdTIyKNG
na1WuneoI0rfGRBn28ZN82jdg0aRYsU0/yuAP49M4sA0U+zEZiHPKKvZD3lpa2OG
kHW25jrHSl+bykFjhkVOug8rUKqFWQwcejbe3/9UaNnoPFmTnV4CuSGnic9BEiq8
nc/4pIR0Skul3oWuABXgNicIIcAda4EAZQ391cm7U6k0ug2ABU/51xqVPzK5l9e5
SC2PNxqhbUZ7NGM1tua2pS9RO6T79ExNlTU2h//aHHC9vaCARmvzwstL1wf9G5j0
aMoapTaBSI+Z9q+njFGrSml/NmLC/jWwRf6MZ/EKf5oGdyXHxSXu7jPXo2AtZSQI
e21bYrsIV7R5lQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:09:31 2026 by rpki-client