Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: N4p835XbPcZVw3jkL19EytygLWVC5ImVNXUr8Wi0VKc=
Subject key identifier: 82:DC:36:B6:37:30:3D:DA:5C:7C:D8:09:96:90:00:A1:7F:75:11:82
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 019D284E38765D729B330B899B2F351C476E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: 0461
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: PeY6_L-X-zspT56i1C5OrFfnugg.roa (hash: 6ufhim7uAO49+RCgSfwQkljsubk6/U5duEsADbT1o7c=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: NvlUPS+nxE42boUBqibWLyVX86pOig1b6eNxb4ZBdC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:38:76:5d:72:9b:33:0b:89:9b:2f:35:1c:47:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=82dc36b637303dda5c7cd809969000a17f751182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:bf:23:a9:77:23:9d:4a:e9:2d:97:ee:9d:
d5:ef:d0:51:49:6e:77:53:8f:29:b8:01:63:64:55:
2c:29:4d:47:a5:60:37:29:ab:c0:c1:b3:53:c0:a2:
60:ff:ce:c1:df:66:79:d3:9d:da:59:3f:ad:70:37:
c6:dd:87:0d:86:5a:b1:ab:f3:e2:70:26:53:03:24:
68:fc:1a:b8:ad:a0:62:4e:12:9e:5b:b2:5b:83:88:
a0:d1:d9:69:b7:e4:47:1e:aa:89:a1:c6:23:f3:a1:
1b:92:ce:8c:ee:36:93:7e:fe:9a:7f:6b:83:1f:08:
9e:2e:54:ec:4c:43:90:71:d4:4f:70:98:6f:77:90:
e3:c0:ad:05:6c:d8:59:df:d0:2a:67:d9:c7:9f:78:
a9:87:1f:cf:fc:5e:dc:01:e4:bb:9b:a7:cf:89:c4:
fb:93:3d:57:ea:31:cf:2d:33:e7:25:46:e1:a6:c6:
63:c1:e2:2e:a0:64:01:ce:b3:ab:07:f4:73:a4:ba:
c0:c2:ae:b0:8f:a2:d7:e4:c3:17:b8:0d:57:2f:7e:
ea:48:d4:74:fc:8b:bc:55:21:b4:c7:1a:27:3d:a5:
a1:ba:4f:47:f4:0f:09:d7:e2:58:6a:ab:26:8a:d1:
9e:24:a2:59:a4:d6:b9:6c:73:24:36:d2:e9:26:c2:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DC:36:B6:37:30:3D:DA:5C:7C:D8:09:96:90:00:A1:7F:75:11:82
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c2:57:f7:df:1e:4d:5a:b7:fb:98:e4:7c:a9:92:9a:c1:30:
33:14:55:a5:0a:be:68:46:75:ec:b9:9c:b5:86:83:6a:ff:42:
a1:25:23:81:b5:ba:bb:2f:6e:54:66:00:b6:cc:41:b6:77:4a:
62:94:52:d4:43:b2:f3:b8:e1:20:02:85:bc:d7:fb:d4:15:82:
a6:d5:fc:81:0c:70:8a:03:65:f4:ac:6b:2c:cd:d6:f7:d0:15:
22:9a:f3:e0:2e:b7:c5:d9:e9:01:c6:6e:86:cc:b4:a9:c7:f4:
05:43:09:65:4e:d7:fb:a9:b3:36:2a:9d:fe:40:ca:95:57:72:
0b:0d:ed:3d:b6:ca:bb:83:ae:af:e7:5f:e8:57:0a:3a:e2:0a:
6f:7c:4b:eb:56:b6:e9:77:9c:2c:97:b2:73:02:a0:97:69:62:
85:ff:61:ed:c8:a1:bc:a0:d6:9d:53:95:fe:36:21:90:5e:f9:
15:5a:17:ce:b7:46:91:2a:6f:9f:12:d1:e0:bc:3e:18:31:a2:
2c:8a:b4:3f:c1:e8:a4:79:04:51:61:66:a8:a2:5d:f3:78:59:
2d:b3:10:28:c8:93:7a:05:6a:36:85:b3:57:68:f8:32:e8:d3:
c3:45:91:40:7c:3c:35:2c:3f:d3:98:17:0c:71:8d:51:5d:89:
0d:d7:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:59 2026 by rpki-client