Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft
File: b4F55dBS0rDksngcPxxkBb6UIJs.mft (raw, json)
Hash identifier: Zn/oS0uTcuLh3fn7xaCL3Y1T6Wb0UfnTFPOeuwjiCeI=
Subject key identifier: BA:75:9F:9D:E9:CD:6D:E7:71:7B:6B:83:34:A4:E9:47:3A:DD:C4:BA
Authority key identifier: 6F:81:79:E5:D0:52:D2:B0:E4:B2:78:1C:3F:1C:64:05:BE:94:20:9B
Certificate issuer: /CN=6f8179e5d052d2b0e4b2781c3f1c6405be94209b
Certificate serial: 019D337644E38CA7884AF2C1C07B654ACA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4F55dBS0rDksngcPxxkBb6UIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft
Manifest number: B5
Signing time: Sat 28 Mar 2026 08:01:21 +0000
Manifest this update: Sat 28 Mar 2026 08:01:21 +0000
Manifest next update: Sun 29 Mar 2026 08:01:21 +0000
Files and hashes: 1: b4F55dBS0rDksngcPxxkBb6UIJs.crl (hash: gT1BttprRJbGQdIKNvvD1eVJQcrEgg3mhW0EwjGGOqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4F55dBS0rDksngcPxxkBb6UIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:44:e3:8c:a7:88:4a:f2:c1:c0:7b:65:4a:ca:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8179e5d052d2b0e4b2781c3f1c6405be94209b
Validity
Not Before: Mar 28 08:01:21 2026 GMT
Not After : Mar 29 08:01:21 2026 GMT
Subject: CN=ba759f9de9cd6de7717b6b8334a4e9473addc4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:e9:5c:cb:51:d6:21:34:40:6a:f1:76:f2:
6d:90:99:5b:3a:81:ab:c9:7c:52:84:16:17:73:f5:
51:64:2e:c7:5e:3c:1e:77:0e:d6:9b:1b:4c:10:42:
5c:1e:19:16:c5:af:4a:69:f8:25:a5:e0:ea:bd:ff:
bd:e9:cd:10:fd:b0:02:de:2b:47:c1:6c:33:24:d5:
60:f5:b4:ea:ae:28:b4:c3:7a:bf:98:90:04:62:d7:
93:c3:1a:ee:52:52:d1:07:a8:be:f3:17:22:eb:85:
3a:01:47:30:fe:47:5d:fd:21:b9:b9:fb:00:72:9c:
44:a0:5c:15:4b:0e:96:e4:30:c4:11:ea:bf:f8:55:
8c:2c:bb:de:ad:54:ac:f0:54:89:44:a7:e3:0b:e9:
0e:e5:a0:50:10:11:bb:eb:d8:fc:4f:51:cc:2d:d3:
a8:20:e3:d3:f7:42:27:00:1a:4f:08:fe:05:46:64:
07:a8:ae:88:ec:16:26:4f:4c:a3:86:02:1d:f7:4c:
2d:4f:31:4a:1b:22:c9:91:8f:54:43:ba:7b:54:99:
38:40:47:ad:69:cf:da:4e:7a:5c:64:97:78:2b:b1:
ef:39:12:74:3b:c3:03:87:2e:26:24:8f:68:48:8c:
ec:48:eb:17:08:91:1f:d1:55:11:c2:2c:82:da:9a:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:75:9F:9D:E9:CD:6D:E7:71:7B:6B:83:34:A4:E9:47:3A:DD:C4:BA
X509v3 Authority Key Identifier:
keyid:6F:81:79:E5:D0:52:D2:B0:E4:B2:78:1C:3F:1C:64:05:BE:94:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4F55dBS0rDksngcPxxkBb6UIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:09:fb:b0:43:8b:3d:36:d0:ff:c7:d5:59:28:9c:c4:5f:
2c:44:71:2f:3b:fc:9c:6f:5b:47:00:2f:ee:e2:f1:91:1a:8a:
78:4a:db:30:17:7e:82:bb:50:70:c8:dd:18:91:d8:56:26:01:
c4:1a:ca:a7:f2:06:45:e7:b2:b5:d8:6f:92:83:e9:21:eb:0f:
09:64:cc:f2:90:dc:d1:7f:24:63:0a:a1:60:f9:de:6f:b8:02:
14:68:58:49:5d:74:dd:ad:9e:fa:64:aa:03:e4:b1:c9:1a:a9:
6a:ac:19:2e:90:cf:1f:d1:b9:67:90:54:30:47:ae:e0:d5:81:
42:54:b2:a9:a4:73:62:06:ab:70:96:f4:79:4e:18:93:99:ef:
12:75:9c:07:00:e0:f4:06:5a:7c:74:0f:66:8f:8c:b4:f6:7d:
05:23:04:e9:bd:bc:d9:a0:77:39:15:af:c1:7a:22:83:32:fb:
b2:73:70:f3:aa:1a:b8:62:7f:61:71:ed:8c:94:f1:c5:00:74:
62:8e:2f:5c:88:b9:16:56:69:61:d2:ed:a2:68:95:ad:74:20:
de:ca:f9:6c:cf:e7:39:6b:6f:ee:eb:a9:6b:09:04:7b:11:9d:
94:e7:49:65:4e:7b:bb:62:17:13:de:87:5b:3f:09:93:27:58:
b0:dd:d9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdkTjjKeISvLBwHtlSsoEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODE3OWU1ZDA1MmQyYjBlNGIyNzgxYzNmMWM2NDA1YmU5
NDIwOWIwHhcNMjYwMzI4MDgwMTIxWhcNMjYwMzI5MDgwMTIxWjAzMTEwLwYDVQQD
EyhiYTc1OWY5ZGU5Y2Q2ZGU3NzE3YjZiODMzNGE0ZTk0NzNhZGRjNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg/pXMtR1iE0QGrxdvJtkJlbOoGr
yXxShBYXc/VRZC7HXjwedw7WmxtMEEJcHhkWxa9KafglpeDqvf+96c0Q/bAC3itH
wWwzJNVg9bTqrii0w3q/mJAEYteTwxruUlLRB6i+8xci64U6AUcw/kdd/SG5ufsA
cpxEoFwVSw6W5DDEEeq/+FWMLLverVSs8FSJRKfjC+kO5aBQEBG769j8T1HMLdOo
IOPT90InABpPCP4FRmQHqK6I7BYmT0yjhgId90wtTzFKGyLJkY9UQ7p7VJk4QEet
ac/aTnpcZJd4K7HvORJ0O8MDhy4mJI9oSIzsSOsXCJEf0VURwiyC2pqIwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp1n53pzW3ncXtrgzSk6Uc63cS6MB8GA1UdIwQY
MBaAFG+BeeXQUtKw5LJ4HD8cZAW+lCCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRGNTVkQlMwckRrc25nY1B4eGtCYjZVSUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNmMwODktMjFlYy00MTExLWE1ZDQt
MzU5MDA1ZDE1NzM4LzEvYjRGNTVkQlMwckRrc25nY1B4eGtCYjZVSUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNmMwODktMjFlYy00MTExLWE1ZDQtMzU5MDA1ZDE1NzM4
LzEvYjRGNTVkQlMwckRrc25nY1B4eGtCYjZVSUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMUJ+7BD
iz020P/H1VkonMRfLERxLzv8nG9bRwAv7uLxkRqKeErbMBd+grtQcMjdGJHYViYB
xBrKp/IGReeytdhvkoPpIesPCWTM8pDc0X8kYwqhYPneb7gCFGhYSV103a2e+mSq
A+SxyRqpaqwZLpDPH9G5Z5BUMEeu4NWBQlSyqaRzYgarcJb0eU4Yk5nvEnWcBwDg
9AZafHQPZo+MtPZ9BSME6b282aB3ORWvwXoigzL7snNw86oauGJ/YXHtjJTxxQB0
Yo4vXIi5FlZpYdLtomiVrXQg3sr5bM/nOWtv7uupawkEexGdlOdJZU57u2IXE96H
Wz8JkydYsN3ZkQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:49 2026 by rpki-client