Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: x6h6X7Rf8DZ+ad0IkeDwijOeSA912zWrWtxF7DtUzjo=
Subject key identifier: C9:6F:1D:77:DC:DC:C1:F1:F3:31:00:93:F4:62:97:EE:A0:04:E4:B4
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019E1D90594F7C182CD7378E7A042DE51686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 19:00:59 +0000
Manifest this update: Tue 12 May 2026 19:00:59 +0000
Manifest next update: Wed 13 May 2026 19:00:59 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: z9pfbTWsYNBDTvrdKFpNSDkMzlzniq74JrdBg++6+Q8=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:59:4f:7c:18:2c:d7:37:8e:7a:04:2d:e5:16:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: May 12 19:00:59 2026 GMT
Not After : May 13 19:00:59 2026 GMT
Subject: CN=c96f1d77dcdcc1f1f3310093f46297eea004e4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:02:08:f4:ce:9c:50:ca:2c:21:51:b5:0a:
2a:be:82:d9:42:bc:9b:4a:02:1f:35:ac:34:68:88:
5d:8d:6c:71:87:82:98:7c:d0:ec:90:94:6c:fd:6d:
7e:27:22:9e:c7:f0:66:97:dc:b0:32:55:f6:25:3d:
2a:16:81:aa:1c:88:7d:2c:03:76:63:83:66:89:8b:
d7:3f:72:19:04:1b:65:a4:a0:90:92:44:11:a7:de:
fa:55:9e:70:fc:8a:4b:a5:fe:db:7e:5a:04:fa:fe:
fb:6d:15:93:d1:3c:64:f6:7a:7c:e4:72:8c:db:03:
8e:ae:ab:7c:69:88:3b:c9:cd:4f:3b:fb:6c:a6:21:
06:cf:b3:a4:92:dc:3c:cc:74:ec:a1:7f:c2:1c:34:
fd:71:93:5f:af:3e:5a:e9:03:f0:20:89:91:e7:61:
ee:ad:9c:88:cb:7a:19:6e:1e:d1:5a:82:63:5c:2a:
82:2a:51:03:b7:43:6e:40:94:16:0f:e2:c8:3e:40:
6d:0c:38:f3:e7:2c:a6:b1:c1:95:dc:73:8b:6d:78:
4f:60:8a:14:1c:08:fb:2e:19:13:e1:3e:8b:5d:b5:
f7:48:93:c9:d1:27:e6:c8:a4:d0:71:a2:0e:3a:48:
d7:66:7f:c4:52:42:25:2c:9b:4a:85:cb:41:55:bc:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6F:1D:77:DC:DC:C1:F1:F3:31:00:93:F4:62:97:EE:A0:04:E4:B4
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bf:fb:c7:5a:26:c6:b6:ab:8e:73:23:65:b8:32:fa:8c:d1:
94:cd:b0:69:74:7c:8f:64:69:e2:d7:03:07:b0:f8:b6:dd:02:
29:51:11:d7:f4:cf:12:71:ea:7a:d7:45:ae:c4:28:54:72:5d:
71:17:8b:60:9f:89:a1:d1:a0:43:54:c5:3b:af:d4:37:d9:58:
3b:2c:78:8e:56:06:61:0b:50:ed:d6:9c:5a:03:b9:59:2e:5e:
0c:84:50:c9:fd:14:63:7f:5d:94:7e:a4:bc:8f:df:11:bb:24:
f3:bf:6b:fb:a6:6e:52:65:04:10:b3:be:46:cb:6a:91:4d:aa:
f4:19:c7:e3:f2:71:6f:30:d2:2e:f8:2d:ad:40:d0:88:00:8d:
b7:d0:1b:e7:52:cc:04:b3:6d:6e:a8:9c:35:2a:06:30:a8:97:
db:3b:09:d7:a0:29:7a:5f:e3:c3:90:c9:85:6b:f8:bc:b9:5e:
5a:bd:db:e5:44:f5:e5:f1:95:86:11:47:c1:45:99:0a:00:b7:
37:5b:63:ed:09:1d:df:c3:0f:65:3d:45:44:f3:a5:61:58:74:
59:03:da:d4:70:21:ad:7d:78:28:ab:ac:6f:d2:5f:17:61:52:
c4:d2:d3:d5:0d:f0:e7:f0:b0:a5:72:54:3d:33:8e:09:36:6d:
20:7a:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:39 2026 by rpki-client