Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
File: b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft (raw, json)
Hash identifier: hjYQjLb0M1BN2KMUG7BScN8v93LGC/5QEopoy1WWh3U=
Subject key identifier: 96:A2:87:7B:0C:B4:7B:E8:3E:08:58:DF:36:04:1B:07:25:C7:1C:A2
Authority key identifier: 6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24
Certificate issuer: /CN=6f8c10c383729f76149973b5655be9bf34711b24
Certificate serial: 019D2929538C7EFE13E3167129D9469AF544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
Manifest number: 4F
Signing time: Thu 26 Mar 2026 08:01:07 +0000
Manifest this update: Thu 26 Mar 2026 08:01:07 +0000
Manifest next update: Fri 27 Mar 2026 08:01:07 +0000
Files and hashes: 1: b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl (hash: XA8p/+O7vmStDQ+IYiVQSDL+2r8V0FIX5qDoB1+Etbc=)
2: bf-C7XR5rvxVULROY95AnCsiqDE.roa (hash: Xcehpx+K84jAisImHgsCWZZzlMJjIRq9I5PCTggbexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:53:8c:7e:fe:13:e3:16:71:29:d9:46:9a:f5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8c10c383729f76149973b5655be9bf34711b24
Validity
Not Before: Mar 26 08:01:07 2026 GMT
Not After : Mar 27 08:01:07 2026 GMT
Subject: CN=96a2877b0cb47be83e0858df36041b0725c71ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:02:76:ef:36:29:aa:30:93:10:1e:92:2b:
a8:fe:38:83:31:4a:1d:c6:f5:34:9f:0e:ed:e9:67:
c8:4e:86:b1:07:c2:2c:71:62:13:86:d8:e4:52:e0:
03:02:af:d9:6a:e3:9c:cb:1d:b4:66:1e:f4:37:a7:
b8:60:2d:30:69:01:89:c6:3b:80:de:1f:09:4e:ae:
aa:b9:75:3f:67:6b:02:da:a2:c9:98:c0:1a:47:54:
d9:17:04:ca:52:cf:78:6f:e9:64:e5:6a:25:f0:bb:
02:5c:b5:76:67:c4:05:04:1a:c8:e0:ac:d5:dc:af:
07:88:41:43:44:a2:fe:dd:a3:1b:b0:74:04:6c:bc:
95:d7:c4:f0:f2:6b:7e:8e:20:00:fe:e7:34:de:2d:
a2:e8:27:b4:4f:a5:1a:b2:20:c1:e0:d2:33:07:88:
80:78:96:3f:0d:46:1b:7a:10:9d:03:d3:28:e5:68:
40:4c:c8:48:14:f4:ff:52:bd:2c:0b:2c:cf:b2:39:
92:03:42:2e:5d:c1:80:2b:a1:3c:0b:17:70:d6:83:
7e:09:7d:e7:79:34:e8:8f:7a:4c:61:e1:bc:2c:dc:
b2:1e:20:50:49:03:34:89:ab:ab:b5:13:cf:26:64:
9e:b1:da:38:9c:1b:5e:83:4e:bc:2f:0c:9b:c0:1e:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A2:87:7B:0C:B4:7B:E8:3E:08:58:DF:36:04:1B:07:25:C7:1C:A2
X509v3 Authority Key Identifier:
keyid:6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:78:6a:2b:bb:41:ba:dc:b9:81:72:db:82:f8:c6:f4:39:eb:
c1:4d:b1:ae:0d:ee:e5:39:28:f0:a8:8c:f1:6e:8f:93:64:66:
b0:83:cf:81:6a:20:d0:6a:7f:ba:e3:bd:2b:97:6b:74:78:76:
cc:5d:5e:83:5c:6b:ec:2d:6c:de:9b:5d:1d:df:b4:95:45:18:
c0:dd:ca:71:c0:68:12:bf:00:43:79:aa:e0:14:a1:3d:66:89:
83:72:10:b1:0c:5e:a7:ed:b8:cf:21:e5:cf:3d:3a:16:ca:a0:
39:49:dd:35:dd:74:eb:9a:90:59:cb:13:d3:2e:f8:7d:7a:f7:
ff:3e:f8:76:65:aa:f5:29:d2:48:e9:11:c8:08:f3:2e:15:66:
db:b5:be:a5:4e:69:8c:80:67:93:dc:24:40:7d:25:47:62:f9:
d4:79:82:5b:26:40:e0:2f:63:b1:35:e9:04:8d:d3:62:ce:6b:
5a:33:3a:4f:2c:c3:3d:a3:fd:1b:a9:72:36:3a:01:54:b6:42:
c3:40:24:f8:59:90:02:73:c5:f5:33:0a:f6:aa:01:ea:c3:70:
cf:78:37:69:68:15:ee:7b:f2:33:9a:4f:04:3c:0f:55:d8:a0:
80:d3:24:26:d1:f0:b2:15:4f:14:8b:36:ae:f0:6b:c1:79:39:
c4:4a:83:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:01:46 2026 by rpki-client