Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: gKcrIK21U73dqmLJZ4cnsHc+z4DTLLs57pZiuBu0VdY=
Subject key identifier: F2:83:58:4D:8D:58:C3:6F:69:0D:59:03:EB:54:13:2F:96:EE:EE:20
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 01A1DD5D96634370860751722FBB1C5A5EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 04:01:00 +0000
Manifest this update: Sun 15 Nov 2026 04:01:00 +0000
Manifest next update: Mon 16 Nov 2026 04:01:00 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: Wv2X45iPhpDZT+OETI0EiGX8hIEynHmwW0lz86j696I=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:96:63:43:70:86:07:51:72:2f:bb:1c:5a:5e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Nov 15 04:01:00 2026 GMT
Not After : Nov 16 04:01:00 2026 GMT
Subject: CN=f283584d8d58c36f690d5903eb54132f96eeee20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:31:61:51:7d:a8:4d:76:51:94:fb:9f:c7:
4d:e2:b3:57:3f:4b:4e:29:68:3e:6d:2e:a8:2c:2a:
d4:9c:c5:4f:fe:e6:6f:07:3f:ab:ed:c3:7c:e1:a9:
ca:14:1d:2e:1c:e2:d8:a6:86:19:9c:a2:fb:1b:f1:
74:d9:3c:f7:44:3a:de:dc:1a:6d:07:54:75:65:9a:
26:30:33:b8:e6:d7:05:ae:50:ab:8a:43:a2:2f:4e:
fc:9b:1e:53:7b:1b:9e:bf:41:f9:6d:19:cb:a4:d1:
3c:5f:91:9d:5d:f8:a7:0e:91:8f:61:cf:e1:e8:0f:
0c:8e:b3:5d:91:d3:cf:46:9b:53:3f:fb:4d:16:c4:
e4:f0:d6:19:db:48:2d:d1:cd:d6:73:61:7d:86:23:
62:6e:14:4e:c8:a1:30:7f:68:bd:78:fc:66:f8:98:
a8:9d:fe:76:4a:0b:0b:f7:95:fb:94:cc:65:a1:54:
6a:95:2d:ed:2c:c0:1b:cc:54:07:73:be:18:43:74:
45:c9:88:0c:61:b8:64:0e:70:ca:b6:54:c3:47:02:
da:66:91:57:6f:1e:34:e4:4f:a2:eb:ad:2e:98:a5:
d8:cc:c6:77:da:9b:f2:a4:3b:d9:76:da:ec:a6:ea:
2e:af:b6:82:6a:2a:2f:d2:e5:08:c1:e3:45:94:2d:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:83:58:4D:8D:58:C3:6F:69:0D:59:03:EB:54:13:2F:96:EE:EE:20
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6a:90:ba:04:37:7f:c9:d7:73:a1:22:3d:1e:81:fa:98:87:
ca:18:c4:bb:84:a7:41:7a:fd:5c:46:d9:53:b1:49:4f:14:1f:
41:d5:58:ae:9e:d3:c7:f8:1e:4d:97:02:f0:74:1f:00:c7:68:
22:53:b4:c2:ff:61:f7:f2:1a:0d:f8:06:d0:3d:f5:92:34:66:
c9:e9:97:34:cd:55:5e:42:ba:8f:71:9a:57:65:f2:7a:4d:72:
8b:9c:98:86:cb:b4:53:da:8e:61:a3:38:62:37:e6:3d:90:bc:
29:2a:7a:e5:e3:fd:dc:df:42:13:ac:57:5c:a2:d9:c2:9c:d5:
4b:a7:31:f2:22:ba:fc:6e:aa:2b:ee:4f:92:e4:9a:59:d2:4f:
73:d0:c1:86:43:e7:0c:42:0b:7f:5a:d8:28:7f:32:8c:e2:fb:
eb:6f:de:91:99:d8:3a:4e:eb:c7:b4:e8:1f:a5:a4:f4:c7:a9:
7b:72:72:ab:62:5d:95:76:07:a7:c8:ad:30:23:53:cf:04:1f:
24:9d:06:b5:b1:21:cd:46:44:b4:0c:01:e1:0a:18:66:17:18:
54:71:d3:ed:6f:ae:fc:54:8a:23:27:09:42:ba:ce:7c:69:64:
d2:25:65:fb:4d:e9:87:d7:86:12:c7:37:5f:0b:d8:34:af:b1:
6d:eb:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:59:31 2026 by rpki-client