Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier: Q497dleJCVCKDt4FcUWJrFOZzILiJwbntxTkm56X+2A=
Subject key identifier: 57:64:52:8C:30:BA:62:22:79:B5:1C:56:2E:D0:6F:FD:15:73:1A:CE
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 019F189E16B19D4AE4F9DAEBFBE8967E2EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number: 0A5F
Signing time: Tue 30 Jun 2026 13:00:41 +0000
Manifest this update: Tue 30 Jun 2026 13:00:41 +0000
Manifest next update: Wed 01 Jul 2026 13:00:41 +0000
Files and hashes: 1: 5sr_tmVIe_M0JW4wdYFpjoaZGuw.roa (hash: 38smcDw7DmiaLV5Ct4qOokRzF5bM7bVQS48BSQwDUec=)
2: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: UdxyjCPMiwdxYf+Wzj9GTY2rCvJe3I9bykLsbbrg61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:16:b1:9d:4a:e4:f9:da:eb:fb:e8:96:7e:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Jun 30 13:00:41 2026 GMT
Not After : Jul 1 13:00:41 2026 GMT
Subject: CN=5764528c30ba622279b51c562ed06ffd15731ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:29:19:b6:70:04:b5:a6:87:02:4a:a8:9a:
ce:e4:40:19:20:7b:24:c0:bf:7f:d0:38:cc:8a:42:
29:66:e0:d6:25:f2:48:d7:16:35:b7:63:fa:3f:06:
79:80:bd:ad:ba:a4:87:4a:c5:6e:74:f0:ac:8c:e6:
bc:5b:6e:9a:90:f6:9a:0f:ee:08:ec:2e:83:3f:0f:
fa:19:9f:f2:56:45:03:6f:27:05:8e:77:7d:34:d6:
b8:0c:a5:cd:59:ff:1f:49:5f:4c:97:6e:e3:1d:02:
32:90:d6:a6:d7:a1:6f:58:ee:9c:ab:79:7b:a7:8c:
ce:00:64:52:7e:dd:54:fd:b9:29:10:c1:3f:16:43:
68:74:94:ce:da:34:59:e2:fa:c1:f3:8e:76:89:46:
cb:f8:46:f2:57:21:05:8b:d3:4f:32:b3:3e:41:aa:
64:a8:86:9c:e8:28:57:79:c7:2a:5a:b6:53:31:0e:
c8:c5:85:53:84:b4:60:b3:10:9c:f8:2e:7a:c8:7d:
55:24:33:43:6f:82:1b:f0:86:ad:89:6b:e1:63:b1:
21:72:a0:4b:98:df:cc:21:5b:e8:e8:65:9a:a5:06:
a2:70:2a:9e:41:f5:bc:a6:dc:65:63:0f:bf:7e:2a:
2f:69:fb:87:20:86:98:5f:cb:3f:7c:7b:c3:6d:ac:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:64:52:8C:30:BA:62:22:79:B5:1C:56:2E:D0:6F:FD:15:73:1A:CE
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8a:62:e1:e5:3d:6c:5c:bf:0b:59:a2:a2:dc:f0:2d:f5:d3:
44:ef:a9:7b:52:db:95:b4:b5:83:aa:6b:39:3e:bd:5d:27:38:
46:0f:3a:14:02:98:c7:41:19:2b:17:fd:c7:08:b1:6b:63:e7:
1b:af:8c:62:e8:24:ca:cb:9d:9a:15:0a:fc:05:e1:af:34:9b:
17:7a:43:f4:f1:63:82:4e:b0:10:bf:1b:a7:86:7c:1c:f9:da:
b7:e0:28:29:60:64:14:0a:66:95:a5:04:51:85:c6:df:61:8d:
60:87:97:f0:95:f1:02:4c:e3:53:88:a0:ef:19:bf:12:49:07:
52:da:eb:03:0e:2f:c2:53:9b:f7:cc:b2:ee:a8:5b:a5:19:8b:
50:92:b9:83:69:98:2f:c7:77:78:da:c0:7b:ea:66:fe:a2:f6:
70:1f:7e:3f:05:0a:37:d6:4d:99:a9:f2:da:cb:71:f2:0b:6f:
88:c4:b0:a0:e0:22:b3:9f:a7:38:91:d3:d7:7d:03:40:8e:e9:
bc:2e:da:86:3e:06:9f:0a:f9:a4:2c:e4:3f:1e:5f:cf:e4:f3:
91:7c:43:53:9e:a2:06:71:6a:10:b0:bb:50:46:f5:69:c2:e1:
e4:ff:49:09:49:85:45:47:ae:b8:c6:2e:05:39:ea:bf:1e:80:
d4:09:a0:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnhaxnUrk+drr++iWfi7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl
ZmE1MGYwHhcNMjYwNjMwMTMwMDQxWhcNMjYwNzAxMTMwMDQxWjAzMTEwLwYDVQQD
Eyg1NzY0NTI4YzMwYmE2MjIyNzliNTFjNTYyZWQwNmZmZDE1NzMxYWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9EpGbZwBLWmhwJKqJrO5EAZIHsk
wL9/0DjMikIpZuDWJfJI1xY1t2P6PwZ5gL2tuqSHSsVudPCsjOa8W26akPaaD+4I
7C6DPw/6GZ/yVkUDbycFjnd9NNa4DKXNWf8fSV9Ml27jHQIykNam16FvWO6cq3l7
p4zOAGRSft1U/bkpEME/FkNodJTO2jRZ4vrB8452iUbL+EbyVyEFi9NPMrM+Qapk
qIac6ChXeccqWrZTMQ7IxYVThLRgsxCc+C56yH1VJDNDb4Ib8IatiWvhY7EhcqBL
mN/MIVvo6GWapQaicCqeQfW8ptxlYw+/fiovafuHIIaYX8s/fHvDbaxDGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdkUowwumIiebUcVi7Qb/0VcxrOMB8GA1UdIwQY
MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt
MDExNzg0MWQyNTViLzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi
LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIpi4eU9
bFy/C1miotzwLfXTRO+pe1LblbS1g6prOT69XSc4Rg86FAKYx0EZKxf9xwixa2Pn
G6+MYugkysudmhUK/AXhrzSbF3pD9PFjgk6wEL8bp4Z8HPnat+AoKWBkFApmlaUE
UYXG32GNYIeX8JXxAkzjU4ig7xm/EkkHUtrrAw4vwlOb98yy7qhbpRmLUJK5g2mY
L8d3eNrAe+pm/qL2cB9+PwUKN9ZNmany2stx8gtviMSwoOAis5+nOJHT130DQI7p
vC7ahj4Gnwr5pCzkPx5fz+TzkXxDU56iBnFqELC7UEb1acLh5P9JCUmFRUeuuMYu
BTnqvx6A1Amgsw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:23:39 2026 by rpki-client