Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: qFtX7vEpeceSYswZcmdNm9XxB/cCdfdIFyt/fkD12IA=
Subject key identifier: C3:83:71:92:49:76:4D:5E:F4:5F:E6:FD:B8:B0:BD:D0:50:C1:82:0E
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019D265EFD88874D32F636A129746EF3109C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:00:52 +0000
Manifest this update: Wed 25 Mar 2026 19:00:52 +0000
Manifest next update: Thu 26 Mar 2026 19:00:52 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: AoFFg5bXCj3k7qi/vWjzwxq2oszEmbaV2UD4uNk/kIc=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:fd:88:87:4d:32:f6:36:a1:29:74:6e:f3:10:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Mar 25 19:00:52 2026 GMT
Not After : Mar 26 19:00:52 2026 GMT
Subject: CN=c383719249764d5ef45fe6fdb8b0bdd050c1820e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:84:7e:36:28:aa:c4:8b:f5:ba:d4:3c:69:
9f:41:f2:2d:0c:67:b6:48:04:b8:bc:cb:20:1a:54:
3c:fb:f1:02:eb:28:a3:63:c8:4a:91:ef:a7:60:7c:
f6:b7:2b:92:66:98:17:ab:12:9b:75:54:fa:67:c9:
2c:74:ea:d6:56:67:e7:39:b0:f8:a2:81:29:f5:b5:
36:27:04:ba:aa:5d:03:c2:42:fe:ed:d5:7c:f0:80:
7e:3e:d6:61:8e:07:89:d1:25:ba:3a:de:9d:58:2c:
e4:11:28:4c:dc:eb:d3:72:14:82:2b:0f:55:d9:d3:
09:19:ff:7f:5a:e1:12:0b:97:a3:3d:29:fc:ce:be:
04:fd:3c:4c:ff:7e:b0:e2:9f:e8:6f:27:f5:8d:10:
05:4f:7d:87:40:17:b9:71:2b:4f:60:d2:8e:81:2c:
af:f7:39:35:09:2e:28:14:d0:9e:07:1e:63:8b:e7:
52:7b:67:dd:65:f1:d5:b2:f8:42:1a:d6:e3:fe:40:
12:bf:07:71:be:a3:1b:93:db:87:56:27:f6:ac:4d:
7c:f9:2e:65:01:9a:93:ff:20:e5:60:ea:32:16:03:
0f:7a:47:2a:a6:1d:02:25:32:35:3a:2a:ea:cb:87:
16:88:06:4e:54:e0:69:ba:f4:b7:6c:ab:65:c4:25:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:83:71:92:49:76:4D:5E:F4:5F:E6:FD:B8:B0:BD:D0:50:C1:82:0E
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e6:2e:a0:e0:0d:e7:54:6f:38:c5:a1:47:4e:60:f7:3d:15:
13:77:35:27:a5:be:ee:f4:94:14:0d:fc:54:f9:29:2c:ad:27:
46:ff:05:99:48:8b:f6:5b:66:4d:8c:04:f7:43:14:18:33:32:
27:33:ea:fa:58:5d:8c:3a:f3:3c:14:53:aa:b2:3f:81:ec:ec:
ee:5a:bf:97:b3:c9:88:24:9a:fa:26:51:22:60:7b:d9:0e:47:
5e:5a:cd:34:e1:0d:e3:50:d4:11:4b:57:11:64:32:0b:b6:e1:
b2:14:71:d5:f9:c6:a6:28:38:ea:72:5d:60:35:ba:01:0f:1e:
e6:c9:b5:f0:2a:91:cf:0a:a3:97:99:7d:08:80:a0:b8:79:b8:
0c:6c:12:d2:cc:09:fc:0e:50:2a:10:58:a3:02:59:a6:13:30:
70:b7:12:88:0c:0e:a1:6a:38:e9:1c:a3:a1:03:1a:98:31:82:
cd:d0:da:5d:af:16:cc:6b:99:8f:b9:36:cf:15:e5:38:87:42:
cd:ad:93:3c:a0:df:8d:13:09:de:03:b2:36:c9:ad:e4:b5:67:
8c:ad:75:72:ce:21:6c:7e:06:70:13:23:0c:b2:d0:d6:c5:41:
83:42:45:2e:39:b9:ef:34:93:5e:13:e0:41:52:97:35:2b:4e:
5f:f2:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:28 2026 by rpki-client