Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier: iZn6E7WpUQA9GhYPk3GsTRTB1LRpOKpgkBguiidEkLQ=
Subject key identifier: 67:CD:B9:DA:E3:2F:11:88:23:F7:ED:A5:06:09:07:08:E9:24:89:46
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial: 019D2884668AA100D1C5C54E43BE259B8359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number: 13F4
Signing time: Thu 26 Mar 2026 05:00:58 +0000
Manifest this update: Thu 26 Mar 2026 05:00:58 +0000
Manifest next update: Fri 27 Mar 2026 05:00:58 +0000
Files and hashes: 1: VjVnMCIpJllowS-mUdPKmibH_s4.roa (hash: RkAjCgTxoEP9Ub/dSw/Wwxp7BKhfppLg+6NL3UVv1Zg=)
2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: P/zn9PEsUbkPx3rN673VpECfEEum3aihs5GO60AkVOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:66:8a:a1:00:d1:c5:c5:4e:43:be:25:9b:83:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Validity
Not Before: Mar 26 05:00:58 2026 GMT
Not After : Mar 27 05:00:58 2026 GMT
Subject: CN=67cdb9dae32f118823f7eda506090708e9248946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:64:07:ed:15:a6:0d:e4:0a:17:3c:d4:4d:
17:ca:63:2c:10:4f:bf:9d:ae:e3:46:fb:4f:d0:7b:
d0:6c:75:df:4e:91:f8:5d:c9:7a:cd:f4:bd:b0:09:
7f:65:4e:86:95:eb:5d:3b:59:60:c2:26:65:1a:1e:
10:be:f4:2e:d9:56:87:19:19:44:a6:9a:1e:fe:a1:
63:94:6c:e8:a7:61:ae:68:57:d6:c3:f8:2b:b2:b6:
85:d3:87:9a:0f:9a:1f:67:ff:31:e9:ec:df:68:e2:
05:54:8e:6c:e5:9b:82:5e:6c:15:cb:bb:60:3b:68:
1d:d2:24:ab:6a:52:37:ec:b3:91:ab:0b:5a:f5:a1:
39:f0:cc:ff:2b:81:66:d9:ce:0d:a6:09:01:69:a2:
82:5a:0d:cf:4f:e4:7f:5f:5e:2f:e4:38:2d:48:c4:
00:23:1f:80:8c:ae:96:11:69:01:d9:34:a9:41:a8:
e3:84:4f:cf:c0:70:1a:38:8a:f5:0a:67:7f:91:26:
bd:3b:3c:90:4d:b2:e6:6a:f4:8a:ff:6f:58:fe:21:
16:57:8c:07:c0:cf:78:0f:5d:97:cc:de:fa:4f:7e:
b2:70:9c:9c:56:d8:ef:ae:a4:01:84:40:a6:23:ee:
42:ac:93:2c:dd:fd:b5:a6:94:22:58:2e:f5:3d:90:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:B9:DA:E3:2F:11:88:23:F7:ED:A5:06:09:07:08:E9:24:89:46
X509v3 Authority Key Identifier:
keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:eb:a8:02:df:be:14:8f:9d:ab:a2:53:98:2c:d1:46:69:95:
c8:35:fd:de:8a:9d:c5:40:49:cb:14:e4:1e:4d:36:85:d4:41:
73:6b:e3:0f:a9:ad:21:32:1b:e8:5c:12:d8:a0:ec:ef:fd:13:
85:bc:cd:cf:2f:5f:eb:10:ff:96:f9:86:ab:f2:55:67:5b:fa:
a0:ae:1a:63:8b:14:4d:79:af:e6:89:50:4b:01:fb:60:d7:06:
e3:65:51:a7:a4:3a:51:82:cd:1a:85:5d:9d:a7:5c:51:fd:dd:
7f:65:f2:1b:c3:62:7b:bc:3a:77:a0:92:c2:6c:26:26:1e:2d:
1a:ba:c1:65:6f:85:c1:6e:ac:0b:8a:f8:e4:94:6b:0b:dd:fc:
e9:f5:2b:03:6c:b1:c1:f7:ce:24:13:fc:09:dc:98:1c:5c:0e:
1e:14:d3:b1:1a:a3:7d:08:90:51:18:4c:c6:65:96:9e:c8:d6:
2f:5d:b6:dd:b3:7d:ee:7e:63:61:e7:26:6a:65:a8:01:74:0d:
46:2a:32:4f:f1:85:7d:07:91:a7:3d:dc:2f:45:ed:87:a9:5d:
27:39:af:4e:4f:8c:7a:09:dd:72:5f:ef:2a:25:4d:67:ce:ee:
f0:54:64:e8:31:74:12:7c:54:33:3f:c4:91:87:b2:09:9b:b0:
3a:87:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:32 2026 by rpki-client