Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier: UYbIc4FiaGCdXAESUgUUSYnYinApyKbqbKYAZb/PUMY=
Subject key identifier: D7:A4:1C:43:5D:0B:E6:98:89:0C:7A:D5:3B:D0:9F:D2:B5:E0:B9:9A
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 019DCE6336E176B699C3E734CA8BF6B95EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number: 12B8
Signing time: Mon 27 Apr 2026 10:01:41 +0000
Manifest this update: Mon 27 Apr 2026 10:01:41 +0000
Manifest next update: Tue 28 Apr 2026 10:01:41 +0000
Files and hashes: 1: 1-IJx4nelfGjFuMYLqOK7id9irxU.roa (hash: b5aVl1cJIc1BC2UfHdl9ea+y66xvZtqK+4BK5mmAqH4=)
2: CnxrWW9MQbA3OxKH-Q8jpaMZj0Q.roa (hash: I2lPd7hD8IUUjVTMDWiwz4fKXB1nPb5e6pLyv73hBK8=)
3: Lkpu54v6ux0vfrMmr2dvF4EUmIY.roa (hash: 2lIxKAyj2wAnIHlH+oCwYSCBBNm4zlmBFuipn6Ti/Cc=)
4: N_Jp-G27wqAqsqkajDg53k_oUEE.roa (hash: NpaEZ0EEykOhPXCywjsGGExbKvpF7O0B2ojyn6pZCPc=)
5: NlmgJH7T2Nyh5LwtrU7zGve9sZA.roa (hash: 3Wjbtflt/jjOunqkUKEb+3Cki8OMoGu4zLrIQR/qwZo=)
6: cUb3XTogvovrYjpVGeHi0SpRJUA.roa (hash: LdHfjZ1stTUnmvHrBTIHeQNXmr3GpKVFfzvqxr7MXf8=)
7: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: YJ/Nfn+H6gBb1A+83hs5gGUdk+q0BNuyrSiwJczrBA0=)
8: w83Lz7bG7qWOCKPvzC-7J-e6eIQ.roa (hash: K0HhmDqy6GK1v3887SfyLFxrwfrFJjolkhIBVfrw66c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:36:e1:76:b6:99:c3:e7:34:ca:8b:f6:b9:5e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Apr 27 10:01:41 2026 GMT
Not After : Apr 28 10:01:41 2026 GMT
Subject: CN=d7a41c435d0be698890c7ad53bd09fd2b5e0b99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:74:c1:ca:8d:87:e8:5d:ad:d4:4b:31:3a:40:
44:89:a5:c6:26:77:73:8c:db:33:8d:2b:76:e6:0e:
df:1f:65:16:c5:e1:fe:75:a8:ef:9e:9c:61:9a:83:
0a:ea:16:a6:d8:80:fd:00:c2:65:a2:e7:11:5a:30:
31:9e:d7:06:72:4a:02:76:ed:53:57:e0:17:04:fa:
14:12:df:79:be:dc:c7:54:bd:4b:7d:26:af:ba:24:
e4:92:c9:0d:4f:79:63:80:20:a8:e5:9c:72:c3:85:
f2:19:9c:71:d5:fc:19:10:0d:bb:28:db:c3:01:c4:
b9:14:65:70:17:9d:4b:56:a2:74:3d:a5:18:09:a3:
d3:e0:9a:20:8b:12:e7:ae:de:94:11:2b:8f:ee:9f:
11:8a:79:67:b0:c4:70:78:a5:7a:dc:27:ed:18:5a:
e8:85:f6:cb:6f:72:ac:60:ef:79:f6:2f:25:6d:96:
9d:e6:0e:d6:3c:d1:2f:d5:c9:59:c7:1d:b3:26:06:
9f:cf:4d:fd:e8:4b:63:30:19:38:79:1d:1d:7a:bd:
a1:83:9d:76:2b:dd:4b:95:96:6a:d3:46:10:5a:40:
7e:67:ee:34:3f:0b:63:db:f7:df:42:83:96:ce:c0:
ad:31:a7:7e:29:d1:46:5a:01:b1:f1:a5:04:2e:f5:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A4:1C:43:5D:0B:E6:98:89:0C:7A:D5:3B:D0:9F:D2:B5:E0:B9:9A
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:73:92:f9:6a:e0:dc:a4:80:20:de:24:ed:cb:2b:e7:24:72:
e5:30:3e:7a:da:74:66:83:be:26:26:c3:35:9b:4d:5e:fd:12:
ed:17:dc:c4:ce:bf:33:89:67:e2:1b:1c:a6:d8:00:b9:5c:53:
f7:a7:28:8c:24:3f:93:a4:36:48:4e:cc:a7:a9:90:88:69:f5:
ff:24:ea:f7:44:b7:75:71:03:7c:95:5f:33:5a:20:8e:6e:88:
ff:36:1c:5a:9e:8e:f2:93:13:bf:66:f7:83:0b:94:f8:83:f3:
78:f5:14:34:56:37:b2:e9:e3:ee:e9:86:ad:e8:56:9b:f6:09:
7b:b9:6e:77:4c:17:ba:b5:89:12:dc:7d:d0:9a:e9:55:87:6b:
b5:94:ea:be:81:ba:90:ea:51:7d:8f:f8:40:62:58:33:31:f6:
f6:8d:31:49:92:cc:36:05:95:94:7a:2d:2b:f3:a5:02:8d:31:
a2:21:44:56:05:d1:a9:c6:77:5d:88:f4:29:d0:d2:e7:19:1b:
01:3f:b5:be:2b:a5:90:7f:8a:39:3c:da:09:1f:be:7c:3d:8b:
6b:53:16:70:f2:b2:a7:d7:6f:ec:5f:01:16:1d:3d:72:87:98:
db:05:5b:58:1f:8a:3e:f5:17:eb:65:9c:ce:e7:24:be:49:5b:
72:b4:17:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OYzbhdraZw+c0yov2uV6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4
OGU5MmMwHhcNMjYwNDI3MTAwMTQxWhcNMjYwNDI4MTAwMTQxWjAzMTEwLwYDVQQD
EyhkN2E0MWM0MzVkMGJlNjk4ODkwYzdhZDUzYmQwOWZkMmI1ZTBiOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63TByo2H6F2t1EsxOkBEiaXGJndz
jNszjSt25g7fH2UWxeH+dajvnpxhmoMK6ham2ID9AMJloucRWjAxntcGckoCdu1T
V+AXBPoUEt95vtzHVL1LfSavuiTkkskNT3ljgCCo5Zxyw4XyGZxx1fwZEA27KNvD
AcS5FGVwF51LVqJ0PaUYCaPT4JogixLnrt6UESuP7p8RinlnsMRweKV63CftGFro
hfbLb3KsYO959i8lbZad5g7WPNEv1clZxx2zJgafz0396EtjMBk4eR0der2hg512
K91LlZZq00YQWkB+Z+40Pwtj2/ffQoOWzsCtMad+KdFGWgGx8aUELvUn9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNekHENdC+aYiQx61TvQn9K14LmaMB8GA1UdIwQY
MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt
NjQ0YmQwZmM3ZjgwLzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw
LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXOS+Wrg
3KSAIN4k7csr5yRy5TA+etp0ZoO+JibDNZtNXv0S7RfcxM6/M4ln4hscptgAuVxT
96cojCQ/k6Q2SE7Mp6mQiGn1/yTq90S3dXEDfJVfM1ogjm6I/zYcWp6O8pMTv2b3
gwuU+IPzePUUNFY3sunj7umGrehWm/YJe7lud0wXurWJEtx90JrpVYdrtZTqvoG6
kOpRfY/4QGJYMzH29o0xSZLMNgWVlHotK/OlAo0xoiFEVgXRqcZ3XYj0KdDS5xkb
AT+1viulkH+KOTzaCR++fD2La1MWcPKyp9dv7F8BFh09coeY2wVbWB+KPvUX62Wc
zuckvklbcrQXnw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:55 2026 by rpki-client