Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: 3XfcDErHZ0szLv1yLwEM3iq2v+Seb6EpF9nlw9WmAIE=
Subject key identifier: 38:5E:2F:D5:57:FB:55:D9:80:D9:45:F1:E9:8A:2B:F2:69:B9:2B:F6
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 01A0D0ED45BE4B5BB61977905348EDE5E060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 01:00:05 +0000
Manifest this update: Thu 24 Sep 2026 01:00:05 +0000
Manifest next update: Fri 25 Sep 2026 01:00:05 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: K5jV1MpbwKxWoxSwKZsZ/PqDra4lbGj9djDlkedAKiY=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:45:be:4b:5b:b6:19:77:90:53:48:ed:e5:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Sep 24 01:00:05 2026 GMT
Not After : Sep 25 01:00:05 2026 GMT
Subject: CN=385e2fd557fb55d980d945f1e98a2bf269b92bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:27:35:26:fa:e2:7b:f1:36:06:37:70:de:c8:
5f:3a:7f:fa:72:42:67:00:b3:86:d7:97:64:24:c2:
9a:c0:88:31:08:29:58:84:f7:0a:bf:2c:73:3a:53:
fa:bb:92:e6:7d:e6:44:09:9d:4a:c0:39:ff:32:13:
a4:36:4a:62:0e:ce:33:87:ff:b6:32:7d:14:68:b3:
c0:02:cd:19:16:0c:9a:78:56:ad:dc:ef:ae:48:1b:
04:9b:ea:cd:70:7f:4f:6f:53:e2:f2:0a:04:e7:23:
c6:78:10:4f:ac:26:08:de:89:95:3b:ef:0d:d0:bf:
c6:26:a4:35:b2:1c:8a:54:93:3c:f0:c4:34:a7:a8:
c6:37:71:0d:27:2b:76:a3:86:cd:54:df:7f:c2:a5:
b5:4c:d5:9e:d7:01:a6:0f:d5:73:88:ae:fd:f6:1c:
e0:73:f1:04:a4:18:1d:99:92:a1:df:56:b4:2c:f2:
1f:f9:83:1c:ed:9d:18:52:9f:e5:c9:d8:22:32:75:
3c:9c:62:5b:38:81:64:b3:78:8f:ba:9d:14:f4:bd:
d0:33:89:a4:e0:fb:85:47:74:74:73:05:c0:60:60:
88:3a:6d:b0:3f:d8:95:36:2f:a3:d9:47:16:91:d4:
f1:3e:60:17:06:c7:6c:8b:4a:84:d2:00:9a:4c:3e:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5E:2F:D5:57:FB:55:D9:80:D9:45:F1:E9:8A:2B:F2:69:B9:2B:F6
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:95:7d:96:5f:1b:23:09:71:85:02:42:5c:ea:0a:c0:20:cf:
b2:03:9a:ae:3c:08:5f:52:29:0c:2a:55:a8:a9:b1:46:7e:27:
30:b1:ec:33:82:0d:53:29:cd:90:fa:02:02:61:7b:d7:fe:d5:
cf:b9:94:56:de:3f:ae:b1:ad:b2:c4:56:89:7f:b1:d6:f8:95:
ce:7a:75:25:6d:55:b9:a5:55:1c:f6:95:52:f7:15:4c:16:3b:
35:74:df:fc:0e:f0:7a:69:ef:e7:b4:db:4b:0d:2f:a1:fc:ed:
3f:18:7f:ba:19:72:c6:48:c5:92:71:ae:08:32:70:24:00:ed:
2f:a1:4d:1b:4d:4d:80:68:0b:6e:07:f9:d7:8a:33:6c:48:5d:
a5:6a:c6:5b:67:cd:6b:f1:df:32:8c:1a:6e:52:00:af:5b:fd:
2f:81:3f:eb:79:de:63:35:73:c3:9e:74:67:b7:7e:f4:d3:ee:
64:eb:2e:27:91:e2:d6:3e:0f:ff:e7:ad:86:d9:33:bf:db:b7:
5e:16:c7:7b:c9:a3:db:41:3b:71:c2:41:29:dc:cc:23:2f:29:
d3:e8:34:6c:dc:d3:dc:08:80:a9:87:5c:ce:f8:5c:f4:2b:80:
e6:d3:54:2f:7d:82:e9:26:72:cd:46:73:93:43:8a:9f:89:1a:
76:de:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:54:12 2026 by rpki-client