Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft
File: b4F55dBS0rDksngcPxxkBb6UIJs.mft (raw, json)
Hash identifier: bp1B9SwrKFV0lTApKb/KmlGIWrNQA/gQKrr65FZzBtw=
Subject key identifier: B0:9F:E9:8D:69:33:8F:B8:1C:6B:21:FF:A9:78:51:6C:D0:DA:3B:E1
Authority key identifier: 6F:81:79:E5:D0:52:D2:B0:E4:B2:78:1C:3F:1C:64:05:BE:94:20:9B
Certificate issuer: /CN=6f8179e5d052d2b0e4b2781c3f1c6405be94209b
Certificate serial: 019D394110E90C8006933EAB4D73261DDF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4F55dBS0rDksngcPxxkBb6UIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft
Manifest number: B8
Signing time: Sun 29 Mar 2026 11:00:58 +0000
Manifest this update: Sun 29 Mar 2026 11:00:58 +0000
Manifest next update: Mon 30 Mar 2026 11:00:58 +0000
Files and hashes: 1: b4F55dBS0rDksngcPxxkBb6UIJs.crl (hash: 0eJG+VSvm5vSJZWwEHj5QVaeO9K0PcDGp1vvAwksawQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4F55dBS0rDksngcPxxkBb6UIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:10:e9:0c:80:06:93:3e:ab:4d:73:26:1d:df:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8179e5d052d2b0e4b2781c3f1c6405be94209b
Validity
Not Before: Mar 29 11:00:58 2026 GMT
Not After : Mar 30 11:00:58 2026 GMT
Subject: CN=b09fe98d69338fb81c6b21ffa978516cd0da3be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:69:2b:8d:4f:a4:4d:e7:20:ae:30:b1:86:
12:f9:3b:cf:87:21:99:96:dc:7d:cb:82:be:0b:40:
dc:7a:18:a9:00:4f:b2:02:3d:fc:72:cb:58:7e:fc:
16:3d:a2:06:fe:7f:81:aa:08:57:ee:2e:42:4a:3e:
b0:04:2d:f2:db:c9:95:76:b1:da:af:57:e8:2d:e4:
4c:11:41:ba:ef:26:27:12:1f:cc:3b:ce:43:30:29:
e5:be:61:de:d6:12:4f:58:4a:fa:97:6b:55:3e:ac:
64:8b:62:08:2b:87:7a:87:bf:1b:33:44:72:98:a3:
fa:0d:58:44:f0:8f:b1:35:13:ca:31:ba:84:bb:51:
fe:2a:42:22:0e:57:4d:9c:9e:9f:1c:e9:cc:df:0c:
43:09:d6:2c:06:77:6e:c3:e8:9c:4b:a8:a0:06:72:
18:a2:ef:8f:82:c8:33:18:6f:91:e1:2d:fc:65:68:
86:e0:8d:4b:d7:cc:6a:3e:76:f7:34:27:ed:ef:3b:
b1:21:ba:a4:ee:b5:6b:0e:e8:13:ed:12:d6:75:3d:
0e:90:ed:80:c3:67:5b:5c:95:dd:75:a4:34:eb:9b:
bb:b8:81:6e:0f:49:8a:4d:0a:45:8c:e8:da:7d:37:
94:45:33:4b:56:9a:2f:e5:a6:d8:73:6e:8c:15:f3:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:E9:8D:69:33:8F:B8:1C:6B:21:FF:A9:78:51:6C:D0:DA:3B:E1
X509v3 Authority Key Identifier:
keyid:6F:81:79:E5:D0:52:D2:B0:E4:B2:78:1C:3F:1C:64:05:BE:94:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4F55dBS0rDksngcPxxkBb6UIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a6c089-21ec-4111-a5d4-359005d15738/1/b4F55dBS0rDksngcPxxkBb6UIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7f:29:dc:4a:a8:b3:c9:e2:dd:07:b0:45:52:44:42:93:5b:
b0:11:8d:ff:dd:97:cd:0a:06:6c:9b:2d:bf:2a:4c:22:a9:85:
73:07:00:77:88:8c:12:74:35:bb:e6:77:0e:74:95:25:20:27:
58:d8:2f:35:64:c4:0f:8b:3f:6e:70:9c:a6:7b:c8:bb:e1:d2:
9b:92:4c:7e:f4:ee:a4:17:c5:93:50:73:41:81:1c:41:fa:d5:
53:ad:1f:ee:e7:0d:73:11:bf:a9:8e:a3:4b:c8:e8:06:3d:23:
24:f8:99:25:eb:3d:37:9f:09:08:a3:cb:19:56:e0:cf:28:f9:
90:8a:d3:0d:20:63:dc:00:42:b0:60:19:a5:63:2f:d9:4c:8b:
2a:42:ba:9d:e1:9e:52:d5:ed:51:03:b4:ea:f9:08:dd:ac:7e:
16:30:73:d2:97:17:c9:83:af:9d:2f:99:1c:9e:aa:76:bd:d2:
5b:d7:b5:b1:34:08:eb:19:91:26:b0:1d:a2:8b:d7:e5:f8:96:
31:21:02:98:24:41:75:fb:66:04:f3:b7:9a:41:64:ea:c8:30:
e3:23:ea:c9:44:de:e0:1d:08:fe:7f:fa:3d:7f:d6:bf:49:06:
a0:3f:6b:06:c3:c8:3c:ce:fa:69:99:43:f0:e2:e0:23:c0:44:
b3:89:17:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QRDpDIAGkz6rTXMmHd9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODE3OWU1ZDA1MmQyYjBlNGIyNzgxYzNmMWM2NDA1YmU5
NDIwOWIwHhcNMjYwMzI5MTEwMDU4WhcNMjYwMzMwMTEwMDU4WjAzMTEwLwYDVQQD
EyhiMDlmZTk4ZDY5MzM4ZmI4MWM2YjIxZmZhOTc4NTE2Y2QwZGEzYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03RpK41PpE3nIK4wsYYS+TvPhyGZ
ltx9y4K+C0DcehipAE+yAj38cstYfvwWPaIG/n+BqghX7i5CSj6wBC3y28mVdrHa
r1foLeRMEUG67yYnEh/MO85DMCnlvmHe1hJPWEr6l2tVPqxki2IIK4d6h78bM0Ry
mKP6DVhE8I+xNRPKMbqEu1H+KkIiDldNnJ6fHOnM3wxDCdYsBnduw+icS6igBnIY
ou+PgsgzGG+R4S38ZWiG4I1L18xqPnb3NCft7zuxIbqk7rVrDugT7RLWdT0OkO2A
w2dbXJXddaQ065u7uIFuD0mKTQpFjOjafTeURTNLVpov5abYc26MFfPI0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCf6Y1pM4+4HGsh/6l4UWzQ2jvhMB8GA1UdIwQY
MBaAFG+BeeXQUtKw5LJ4HD8cZAW+lCCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRGNTVkQlMwckRrc25nY1B4eGtCYjZVSUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNmMwODktMjFlYy00MTExLWE1ZDQt
MzU5MDA1ZDE1NzM4LzEvYjRGNTVkQlMwckRrc25nY1B4eGtCYjZVSUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNmMwODktMjFlYy00MTExLWE1ZDQtMzU5MDA1ZDE1NzM4
LzEvYjRGNTVkQlMwckRrc25nY1B4eGtCYjZVSUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjH8p3Eqo
s8ni3QewRVJEQpNbsBGN/92XzQoGbJstvypMIqmFcwcAd4iMEnQ1u+Z3DnSVJSAn
WNgvNWTED4s/bnCcpnvIu+HSm5JMfvTupBfFk1BzQYEcQfrVU60f7ucNcxG/qY6j
S8joBj0jJPiZJes9N58JCKPLGVbgzyj5kIrTDSBj3ABCsGAZpWMv2UyLKkK6neGe
UtXtUQO06vkI3ax+FjBz0pcXyYOvnS+ZHJ6qdr3SW9e1sTQI6xmRJrAdoovX5fiW
MSECmCRBdftmBPO3mkFk6sgw4yPqyUTe4B0I/n/6PX/Wv0kGoD9rBsPIPM76aZlD
8OLgI8BEs4kXmA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:30 2026 by rpki-client