Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier: gqRMVsFqV+30hd0D1so9eNl6LFUh6GWWCRINz5WwSos=
Subject key identifier: 8F:71:37:1B:28:84:C7:3C:FF:00:5F:A1:52:6C:A1:28:8B:44:4A:14
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial: 019D3A8A9AF2F4F59E231470CC7422B7BA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number: 138F
Signing time: Sun 29 Mar 2026 17:00:55 +0000
Manifest this update: Sun 29 Mar 2026 17:00:55 +0000
Manifest next update: Mon 30 Mar 2026 17:00:55 +0000
Files and hashes: 1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: IZEyAyZ0cN8/dPeaMgBeRvSwUHCcn6IIWqDfUEL+X8c=)
2: DUkKAgihVQLx-9lRs9kP656LAqs.roa (hash: Q209pcJqFgT3dRAcDq1sFjsPW/cttABhC0fxm9KWWRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:9a:f2:f4:f5:9e:23:14:70:cc:74:22:b7:ba:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Validity
Not Before: Mar 29 17:00:55 2026 GMT
Not After : Mar 30 17:00:55 2026 GMT
Subject: CN=8f71371b2884c73cff005fa1526ca1288b444a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:c1:d6:a5:19:d9:5b:96:12:f3:22:9a:13:
25:2e:21:dc:e5:29:48:aa:c8:83:28:a8:8c:19:0e:
69:05:93:a7:61:7e:33:14:64:95:da:24:2d:84:ee:
09:15:77:cd:c8:fb:3e:18:b1:a5:d8:7a:8d:32:63:
04:2e:ba:c9:97:78:ba:f7:fa:84:a0:2d:a5:e0:40:
21:c7:ac:8d:f7:f1:af:7a:9f:7c:33:d6:a5:88:74:
be:89:08:92:04:57:cf:ec:c6:8a:b7:5e:3c:d6:49:
c8:94:68:97:29:e8:d8:3d:79:5b:d2:66:f2:56:d1:
56:95:d8:52:56:0c:a1:a0:3e:fb:d6:e9:f0:b5:06:
e7:ef:d0:62:a6:e1:c6:d1:dd:a1:fc:1a:8e:89:33:
9d:7a:6b:55:b1:2b:6c:78:dc:3c:21:82:90:a5:17:
24:78:7c:fa:b4:00:48:7e:c3:2e:a3:d6:b4:75:4c:
57:5b:ec:fd:cb:d8:b7:bd:31:20:ff:81:3d:9c:a9:
14:04:33:dc:10:79:60:1a:ce:7b:db:8c:65:37:d8:
d2:de:8f:ad:72:89:16:3e:18:91:18:29:0e:64:c3:
66:c2:61:6f:74:47:dc:01:e7:df:0a:b9:ef:d4:c1:
25:6b:45:3a:b4:cd:ec:99:fa:b0:34:dd:b2:18:ee:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:37:1B:28:84:C7:3C:FF:00:5F:A1:52:6C:A1:28:8B:44:4A:14
X509v3 Authority Key Identifier:
keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:63:1a:ae:c7:97:59:a2:71:9c:7d:45:e8:5f:2b:00:21:42:
07:2e:b9:19:8b:15:59:c3:89:85:da:cf:aa:0b:12:4a:ad:04:
b4:1f:b1:7d:f9:76:f4:33:e3:94:50:94:6d:e3:0a:d3:92:65:
84:b5:54:06:d4:3a:34:68:e7:2b:80:20:b0:78:2d:bd:cc:be:
34:fb:ba:3e:85:8a:71:10:56:4f:49:ef:1b:d4:5d:a3:88:2a:
fd:4c:36:8f:c3:aa:be:27:bc:fa:90:fa:89:09:d7:59:77:8e:
f1:20:09:7b:14:24:c4:cb:1c:20:09:c9:f7:bd:d7:f8:ed:d3:
71:e1:56:9b:39:97:75:36:5c:66:31:3d:25:05:65:67:ef:53:
31:3c:83:c8:89:5e:0d:80:be:e5:cf:85:e2:fc:56:b4:21:49:
65:e4:6f:77:1e:de:b4:08:ca:97:df:23:2e:48:5d:5d:e1:87:
03:c4:d9:dc:e2:c9:3c:7e:e4:c6:e0:c4:75:f8:7b:ba:0f:4f:
50:c8:3c:15:c2:b8:af:8e:68:d9:3f:48:17:b4:b0:97:29:5e:
2a:5e:eb:f4:e0:86:37:ff:24:3d:9d:93:ab:32:8c:25:f0:db:
52:69:8b:29:05:db:1c:44:1b:68:e8:fd:7b:06:7f:e3:8d:5b:
74:c8:2c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:27 2026 by rpki-client