Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier: 9QfeLn3dXTTVX3dpu58fZWS16yFQn9m20aH+8SbcSNU=
Subject key identifier: 36:69:E8:D8:45:CA:42:FE:98:51:F8:01:70:C4:FA:49:F5:BB:2F:32
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial: 019DDE0D16D093BB8069A16F14E8B0C814F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number: 1452
Signing time: Thu 30 Apr 2026 11:01:32 +0000
Manifest this update: Thu 30 Apr 2026 11:01:32 +0000
Manifest next update: Fri 01 May 2026 11:01:32 +0000
Files and hashes: 1: VjVnMCIpJllowS-mUdPKmibH_s4.roa (hash: RkAjCgTxoEP9Ub/dSw/Wwxp7BKhfppLg+6NL3UVv1Zg=)
2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: NQt+g20iA7aLo3DjLuLVcZg06Tag72Y6Iyai+inCPX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0d:16:d0:93:bb:80:69:a1:6f:14:e8:b0:c8:14:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Validity
Not Before: Apr 30 11:01:32 2026 GMT
Not After : May 1 11:01:32 2026 GMT
Subject: CN=3669e8d845ca42fe9851f80170c4fa49f5bb2f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:0c:e2:f4:ad:4c:bb:3c:bf:08:68:6c:bd:
f0:80:0c:f5:54:42:72:f6:cc:d9:bf:20:a9:2a:dc:
47:d5:39:21:f0:2a:d9:4e:4d:c4:1d:57:b1:a3:3f:
da:03:0f:60:0b:e9:98:3a:1d:25:43:d2:e8:0a:9a:
fe:43:34:99:37:ce:a7:71:6e:e9:ca:54:0e:20:0c:
a6:75:33:f2:94:c1:04:44:b8:f8:7d:2f:09:08:ab:
a4:94:1d:b8:51:79:a1:1c:3e:95:21:81:7c:66:1c:
fb:ea:9b:49:95:8d:e2:c2:c8:a7:a6:04:24:8d:f5:
a4:90:af:22:93:40:fe:27:be:7c:03:86:bc:4a:aa:
27:42:f3:ab:cd:d3:0b:66:8c:30:3f:a9:27:56:33:
22:78:cf:98:e9:4f:25:62:b1:5e:1c:4e:a1:72:61:
75:b8:97:f1:ea:38:ca:d0:20:e4:ac:85:04:4f:12:
7c:6a:1e:03:4a:f2:43:6d:b3:fb:d9:07:3f:25:b7:
bd:e9:bc:2a:27:e4:30:cd:27:fe:ac:07:4b:9e:ab:
25:4e:b7:4f:df:ec:2f:c5:05:d2:ac:67:3b:25:6c:
4c:53:e0:87:e6:a7:8e:75:54:7e:7d:58:e8:82:1b:
a5:8b:af:7a:7b:ed:30:e7:5c:e8:98:cb:46:f0:4c:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:69:E8:D8:45:CA:42:FE:98:51:F8:01:70:C4:FA:49:F5:BB:2F:32
X509v3 Authority Key Identifier:
keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b5:8a:a5:ac:40:d1:09:d1:26:4c:92:13:0d:95:5a:c9:da:
b5:2d:b0:c9:57:83:71:1f:1f:62:49:5f:28:6b:85:2c:75:0a:
48:70:9a:88:1e:01:f1:f1:11:e3:11:50:1c:6d:3b:75:93:33:
e6:1b:b9:ee:2d:bc:a1:bd:8b:6a:0b:47:dd:7d:69:52:45:d9:
ba:d9:f2:59:b1:8f:fa:7d:cd:b5:c6:78:a3:55:db:fe:c3:c5:
44:7e:60:c3:2b:06:a3:c1:f2:a6:8a:af:64:92:62:54:3c:2c:
84:20:13:81:67:b5:79:3b:78:6f:16:cc:21:44:2c:16:f0:53:
cf:22:e6:17:bc:26:e7:2e:b0:c0:56:39:6c:c3:91:22:27:c1:
0b:7a:c0:c9:ac:26:10:19:c5:71:01:81:f5:f5:c7:2d:71:7e:
71:13:4d:4f:99:05:8d:a9:f6:4c:dc:1c:09:6c:71:ba:83:70:
00:b1:2b:c2:4d:9a:d4:ef:7d:31:39:64:e2:22:93:69:6b:38:
88:a8:bf:81:43:a9:63:9a:23:44:61:cc:35:38:11:ed:f7:01:
83:a3:2e:29:ed:a5:06:87:8f:08:a1:c9:4a:d9:be:ee:95:e3:
ee:0c:aa:42:f8:41:a0:17:62:78:6f:3e:e7:35:3f:31:57:f7:
13:4d:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 16:42:39 2026 by rpki-client