Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: xsQhiaA5NsDE61G/LvA7rbcXgghMHqiylfXq0LP7m7M=
Subject key identifier: 12:92:EC:2B:77:8A:B7:97:2B:83:52:F8:C3:CA:49:32:19:B1:D3:7B
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 019D2960B9A9F0ECE08A472C3BDAB6033A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 09:01:37 +0000
Manifest this update: Thu 26 Mar 2026 09:01:37 +0000
Manifest next update: Fri 27 Mar 2026 09:01:37 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: JC1hCQOV3zVCYkC/VX8SKatSBhQG+RNaz7C1pY2dnKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b9:a9:f0:ec:e0:8a:47:2c:3b:da:b6:03:3a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Mar 26 09:01:37 2026 GMT
Not After : Mar 27 09:01:37 2026 GMT
Subject: CN=1292ec2b778ab7972b8352f8c3ca493219b1d37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:4c:6f:56:81:5c:92:cc:ee:cd:29:a7:70:
05:68:8d:0b:bb:2e:43:55:f7:a6:59:fc:af:70:bd:
15:d9:ba:b8:00:94:8a:f9:9a:73:4d:17:d3:0c:37:
b8:5b:f4:d4:9c:16:4b:8a:6d:37:57:9d:e4:f1:8b:
f9:20:5c:fa:53:70:b4:a0:87:ba:f8:23:62:55:4b:
54:61:e0:e8:9d:19:83:c4:36:b4:81:76:bf:ec:c9:
c0:55:0f:fd:60:7a:97:88:7f:40:39:ba:0e:7d:c1:
dc:2a:2e:4f:43:ec:10:10:4c:ba:cd:30:09:28:3a:
10:92:54:3f:70:9c:19:2c:fc:a6:74:d4:13:28:08:
e0:e5:76:f9:b0:d5:17:38:bc:e4:3f:aa:28:52:02:
58:9d:18:e7:97:68:67:0d:d8:1b:97:06:b4:a9:98:
b5:bd:8c:34:d1:44:81:d1:2d:4e:e6:c7:42:df:16:
99:06:fe:6f:6a:b7:de:9c:62:a8:bf:2e:da:02:9d:
39:9e:cd:b2:09:fa:c4:7c:18:8c:03:8e:2b:ec:7a:
08:d5:ef:4c:72:cf:0b:b5:2c:8c:95:ea:22:36:e7:
e1:ab:b9:d1:21:fe:d6:68:49:48:e0:40:f7:af:b0:
81:3f:1c:73:40:84:b1:f7:37:e0:36:21:2a:f4:a6:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:EC:2B:77:8A:B7:97:2B:83:52:F8:C3:CA:49:32:19:B1:D3:7B
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ae:0e:5b:f8:36:2f:36:0f:5e:8a:13:42:34:76:c2:e2:66:
83:f8:24:75:70:9f:b4:08:ed:8f:1d:c3:f0:c8:ed:96:c9:1b:
8f:b4:c1:9b:3a:ce:b1:be:18:cf:24:0a:9d:94:cd:69:c8:ff:
48:79:90:b4:25:81:26:84:4d:00:37:4a:51:48:1f:e7:ad:fa:
bc:71:2a:ad:37:21:20:b9:fa:f8:77:a4:59:2f:d8:17:2e:67:
c3:af:d6:71:80:2c:0c:d9:3f:69:c3:7a:a1:8e:dd:65:7d:29:
2f:0c:36:ba:61:d2:23:70:cc:de:f4:f8:f1:fe:1f:33:ad:94:
da:a2:8b:e1:4d:b3:eb:16:3c:b8:86:5d:11:0c:5c:40:01:ac:
c4:97:da:ae:e6:97:8f:53:26:3d:a5:d8:6f:61:a6:c8:a8:1b:
87:fe:dd:97:58:b4:93:fd:a4:8f:0b:de:13:f7:bb:bd:87:4b:
21:5d:70:8d:ec:2a:d5:8b:10:00:21:7d:43:3d:cf:f4:d7:ea:
fd:ab:5e:d5:f0:93:c2:ce:38:ca:aa:bf:90:2d:34:5a:6c:08:
3e:f8:79:84:82:fe:8f:f6:39:7b:1f:c1:41:8a:62:90:ee:df:
88:7b:ba:6b:61:b1:16:13:19:ca:16:48:d2:7e:7a:48:75:a8:
e9:14:35:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYLmp8OzgikcsO9q2AzpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODJjOGFlNzk2NzBiZmFmM2FjOGRhODg3NDg1ODFlMzk5
NzJiZWIwHhcNMjYwMzI2MDkwMTM3WhcNMjYwMzI3MDkwMTM3WjAzMTEwLwYDVQQD
EygxMjkyZWMyYjc3OGFiNzk3MmI4MzUyZjhjM2NhNDkzMjE5YjFkMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua5Mb1aBXJLM7s0pp3AFaI0Luy5D
VfemWfyvcL0V2bq4AJSK+ZpzTRfTDDe4W/TUnBZLim03V53k8Yv5IFz6U3C0oIe6
+CNiVUtUYeDonRmDxDa0gXa/7MnAVQ/9YHqXiH9AOboOfcHcKi5PQ+wQEEy6zTAJ
KDoQklQ/cJwZLPymdNQTKAjg5Xb5sNUXOLzkP6ooUgJYnRjnl2hnDdgblwa0qZi1
vYw00USB0S1O5sdC3xaZBv5varfenGKovy7aAp05ns2yCfrEfBiMA44r7HoI1e9M
cs8LtSyMleoiNufhq7nRIf7WaElI4ED3r7CBPxxzQISx9zfgNiEq9KZRyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKS7Ct3ireXK4NS+MPKSTIZsdN7MB8GA1UdIwQY
MBaAFG+CyK55Zwv686yNqIdIWB45lyvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYt
YTM4NjdkNTM5MDBjLzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYtYTM4NjdkNTM5MDBj
LzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANa4OW/g2
LzYPXooTQjR2wuJmg/gkdXCftAjtjx3D8Mjtlskbj7TBmzrOsb4YzyQKnZTNacj/
SHmQtCWBJoRNADdKUUgf5636vHEqrTchILn6+HekWS/YFy5nw6/WcYAsDNk/acN6
oY7dZX0pLww2umHSI3DM3vT48f4fM62U2qKL4U2z6xY8uIZdEQxcQAGsxJfaruaX
j1MmPaXYb2GmyKgbh/7dl1i0k/2kjwveE/e7vYdLIV1wjewq1YsQACF9Qz3P9Nfq
/ate1fCTws44yqq/kC00WmwIPvh5hIL+j/Y5ex/BQYpikO7fiHu6a2GxFhMZyhZI
0n56SHWo6RQ1Xg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:01 2026 by rpki-client