Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: kY9Sxp5wYCmsQDQimZpfcGVCxEEvkw/vzSjLD1RHpoE=
Subject key identifier: F3:12:CC:64:3F:3B:DB:DF:0D:0C:0E:E4:25:A1:6A:21:29:52:FF:37
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 01A177033900A5185733E6600375135F69E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: 069C
Signing time: Mon 26 Oct 2026 07:01:02 +0000
Manifest this update: Mon 26 Oct 2026 07:01:02 +0000
Manifest next update: Tue 27 Oct 2026 07:01:02 +0000
Files and hashes: 1: PeY6_L-X-zspT56i1C5OrFfnugg.roa (hash: 6ufhim7uAO49+RCgSfwQkljsubk6/U5duEsADbT1o7c=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: gjASeJlcUu0NXVv6aw+TsBipakSG5eKfik9gEGXLDSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:39:00:a5:18:57:33:e6:60:03:75:13:5f:69:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Oct 26 07:01:02 2026 GMT
Not After : Oct 27 07:01:02 2026 GMT
Subject: CN=f312cc643f3bdbdf0d0c0ee425a16a212952ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:4a:05:27:63:4b:8e:8d:be:cb:a9:c7:e6:
75:3a:ae:3c:69:28:2c:76:48:c2:82:80:80:0b:1b:
f1:ca:4d:6e:ef:07:5f:b4:e3:78:f7:c8:51:a9:ba:
b8:b4:34:eb:58:4a:5e:51:3e:bc:2a:a0:6f:c3:d0:
46:ee:ac:77:dc:b5:83:8e:34:61:42:41:06:f4:7a:
6a:47:ee:29:43:66:31:15:cb:21:4f:d7:ca:41:1b:
b4:f4:3a:6c:f3:81:1c:64:ef:88:9d:29:ed:f0:17:
38:1d:1a:1b:c3:ac:c8:57:40:e7:9f:d0:b8:a1:fd:
6f:64:e9:f1:df:49:8b:48:72:56:e7:71:a0:df:24:
54:f5:bc:3b:c4:e6:d1:d5:cb:e4:7a:57:04:e4:33:
42:aa:07:55:7b:52:ee:13:07:1f:bf:45:5e:1a:a6:
71:e5:85:b5:13:0e:26:61:a2:68:f4:49:f8:dd:19:
47:86:ea:0d:e4:41:88:bf:28:98:15:35:d2:1b:7d:
01:56:45:97:e4:f8:fc:82:ac:fa:1d:7d:4f:d0:aa:
66:c4:21:c1:85:b0:68:5f:c6:76:f5:6d:ed:61:c2:
8b:df:4d:0b:59:df:8e:54:53:0a:7a:8a:1a:89:6e:
07:61:28:de:bd:8f:2b:34:46:2b:de:2e:53:42:e8:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:CC:64:3F:3B:DB:DF:0D:0C:0E:E4:25:A1:6A:21:29:52:FF:37
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e7:fc:9a:45:47:da:4b:11:eb:3f:d8:8d:e7:eb:42:f5:39:
6c:bd:7e:f3:99:9e:ce:d8:17:50:e2:9f:a4:07:03:12:96:59:
d7:89:19:4d:cb:b9:a4:94:08:af:a1:82:fd:b2:98:4a:06:2f:
ba:31:46:12:06:e1:42:31:e8:2c:f6:c4:d4:9c:b1:05:51:5c:
9c:49:77:26:b9:94:4b:0a:93:8a:72:0f:e5:b0:3b:37:8b:3e:
df:fa:1d:ec:67:59:4d:b6:00:c1:e8:dd:9d:e9:fe:38:ea:78:
f9:e6:69:80:3d:4d:92:47:ac:27:eb:4f:e1:75:1c:3c:a5:b8:
74:1d:80:17:b4:fc:3a:99:f2:08:9a:16:86:cb:53:76:c9:cf:
6d:39:68:35:8a:0a:a0:9f:73:bb:05:13:4d:2d:1f:6d:e9:aa:
16:5e:3e:5e:59:09:c3:98:55:67:48:3a:92:45:b0:9a:89:4f:
0b:bd:58:09:d6:b7:f6:2b:d3:85:83:d5:46:7a:7c:de:fe:5e:
75:87:01:07:86:5e:95:0d:22:37:27:d1:5f:39:d2:f7:88:1a:
a2:3a:dc:85:31:e1:34:ec:5c:d3:62:72:f2:48:bb:f9:c4:fa:
64:03:58:c1:67:d9:83:ae:26:d9:a7:96:d6:1d:bf:57:8f:e5:
bd:f4:06:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3AzkApRhXM+ZgA3UTX2niMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODEzNzg3NWRhZmZlMDE4ZmEzOGFkNDNjYzY4YTFmYWIz
MzVlZjgwHhcNMjYxMDI2MDcwMTAyWhcNMjYxMDI3MDcwMTAyWjAzMTEwLwYDVQQD
EyhmMzEyY2M2NDNmM2JkYmRmMGQwYzBlZTQyNWExNmEyMTI5NTJmZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEFKBSdjS46Nvsupx+Z1Oq48aSgs
dkjCgoCACxvxyk1u7wdftON498hRqbq4tDTrWEpeUT68KqBvw9BG7qx33LWDjjRh
QkEG9HpqR+4pQ2YxFcshT9fKQRu09Dps84EcZO+InSnt8Bc4HRobw6zIV0Dnn9C4
of1vZOnx30mLSHJW53Gg3yRU9bw7xObR1cvkelcE5DNCqgdVe1LuEwcfv0VeGqZx
5YW1Ew4mYaJo9En43RlHhuoN5EGIvyiYFTXSG30BVkWX5Pj8gqz6HX1P0KpmxCHB
hbBoX8Z29W3tYcKL300LWd+OVFMKeooaiW4HYSjevY8rNEYr3i5TQujW1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMSzGQ/O9vfDQwO5CWhaiEpUv83MB8GA1UdIwQY
MBaAFG+BN4ddr/4Bj6OK1DzGih+rM174MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZWJmNTUtZTdhNC00MDI2LTlhMjIt
ODg4OWVmMTMxZDg5LzEvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xZWJmNTUtZTdhNC00MDI2LTlhMjItODg4OWVmMTMxZDg5
LzEvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOf8mkVH
2ksR6z/YjefrQvU5bL1+85meztgXUOKfpAcDEpZZ14kZTcu5pJQIr6GC/bKYSgYv
ujFGEgbhQjHoLPbE1JyxBVFcnEl3JrmUSwqTinIP5bA7N4s+3/od7GdZTbYAwejd
nen+OOp4+eZpgD1NkkesJ+tP4XUcPKW4dB2AF7T8OpnyCJoWhstTdsnPbTloNYoK
oJ9zuwUTTS0fbemqFl4+XlkJw5hVZ0g6kkWwmolPC71YCda39ivThYPVRnp83v5e
dYcBB4ZelQ0iNyfRXznS94gaojrchTHhNOxc02Jy8ki7+cT6ZANYwWfZg64m2aeW
1h2/V4/lvfQGug==
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:22:24 2026 by rpki-client