Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: I15347er6e7hb0uFswU2KlWQ7lgID6HtVDLMHpfQ+24=
Subject key identifier: DF:36:A5:17:46:8A:3E:DD:E5:C8:CC:CC:63:DF:9A:F6:32:8A:88:E4
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 019D375279ED19FF98C329C1404DFA32502E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 02:00:45 +0000
Manifest this update: Sun 29 Mar 2026 02:00:45 +0000
Manifest next update: Mon 30 Mar 2026 02:00:45 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: 3wTnbTmjqaYceBsu+gaAwPrYO3ZUr5Irr4YQNtOY4As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:79:ed:19:ff:98:c3:29:c1:40:4d:fa:32:50:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Mar 29 02:00:45 2026 GMT
Not After : Mar 30 02:00:45 2026 GMT
Subject: CN=df36a517468a3edde5c8cccc63df9af6328a88e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:c5:d0:7b:06:60:6e:07:d8:3f:70:0e:7f:
3d:4f:47:a2:89:a7:37:4f:a7:e9:4e:d9:f6:9b:e1:
ff:55:b6:4f:6c:cf:61:68:82:57:8a:01:e2:b3:17:
9d:0e:f1:25:7f:38:af:a7:e5:7a:df:b6:23:e0:e7:
da:a8:a4:5a:e8:50:ef:4c:35:85:0d:f0:b0:ab:c8:
c4:eb:c6:74:21:16:c0:24:ac:7b:a6:43:e9:95:10:
02:75:ad:e6:a8:c4:31:a6:f2:40:c2:5c:fc:27:19:
f7:3c:83:38:04:cf:43:20:2d:86:30:3b:eb:bb:46:
b5:b5:b4:9c:c2:84:a0:e9:bb:0e:a1:52:3e:6b:8f:
c5:f6:71:ee:1c:e8:ee:6b:8b:ef:c3:e3:f9:c1:b6:
a2:d5:23:e0:d7:37:71:b4:6f:3f:fa:30:b4:9d:2c:
06:4a:b8:c1:3c:de:2c:aa:68:76:a8:da:dc:a0:69:
2e:e7:4e:ed:34:76:98:60:f2:b5:94:a6:7a:b2:1e:
50:0c:0f:49:a4:62:3c:1d:00:e0:54:d6:4b:21:53:
8a:e0:2d:30:32:b9:3c:df:71:ea:8a:08:2c:0e:38:
4a:41:dd:4f:3b:13:71:90:28:93:34:49:f1:cb:1e:
68:61:a6:ff:99:3c:99:ee:f0:d5:bb:cc:0a:de:df:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:A5:17:46:8A:3E:DD:E5:C8:CC:CC:63:DF:9A:F6:32:8A:88:E4
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:92:25:12:94:91:02:b2:7f:10:85:c4:a0:ac:f3:2a:c5:71:
91:7e:b4:9c:4d:70:04:c8:65:67:f2:18:fe:04:f8:ec:99:2a:
03:e6:85:e2:20:44:fc:ea:d8:0c:fe:9b:3d:fa:06:5f:0a:c8:
b6:60:58:c6:cd:e4:03:a0:a4:4c:92:f5:1e:3f:d2:8a:27:57:
69:7f:0e:0a:a0:88:27:dc:eb:69:6d:d9:c2:52:15:f9:4a:58:
4d:5d:56:26:2e:35:e4:7b:af:3b:f9:13:09:0d:86:a7:87:67:
27:6f:72:4a:8d:84:c8:2f:1d:e4:36:1a:89:88:ca:5d:d4:12:
59:c3:2d:8b:1b:e2:79:12:4e:e0:49:26:0b:0f:a7:1e:c8:f7:
ce:dc:41:e1:50:f8:a7:ff:ee:4f:23:e6:af:3a:77:26:d6:6c:
1c:6e:1a:ae:3c:2c:a8:1b:f9:a3:47:c8:1e:90:d5:16:dc:b2:
9d:24:8a:e2:6a:17:3e:19:ea:06:63:85:96:a6:28:5e:bd:77:
d3:90:8c:ac:f5:11:12:26:8f:1b:04:56:4a:a3:0a:78:b7:46:
70:10:82:a8:6d:81:6c:11:40:ed:0b:a0:3e:66:92:3f:d8:93:
e5:12:01:e4:75:9f:33:37:bf:77:4b:a6:12:3c:06:c6:4d:ea:
f2:61:76:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:31 2026 by rpki-client