Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier: h/ItlSmVcSBMMBWBiIaSivUf6biYNKpv0WAyLbB4Xq0=
Subject key identifier: B4:E9:E8:53:48:98:4B:AA:25:5B:4F:84:D5:B4:CD:BB:0A:64:95:FD
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial: 019D38D3D0EF80EA3F8136AA080CEA5CACA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: 91k_fzpu7lp58TCmwUevrrQ5DoY.roa (hash: yHiArpJVE3/8ANiCK9PBsJFPh8JxnEYzY6bUgQPEitY=)
2: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: D1he1OPhu5W7OTn7/gW0H8xLMyatyl651/Wa82u4qRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d0:ef:80:ea:3f:81:36:aa:08:0c:ea:5c:ac:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=b4e9e85348984baa255b4f84d5b4cdbb0a6495fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:d8:df:f0:5f:36:45:78:3e:52:29:f3:a1:
6a:46:35:5f:3a:46:9e:5f:67:e3:81:f7:b4:e7:f1:
27:08:2c:b9:c2:72:db:26:de:37:ea:6a:59:2e:b3:
a2:95:c6:39:15:63:41:38:05:11:66:83:f8:ec:a1:
22:e6:a3:0f:6c:35:01:2d:bc:ba:a3:be:e8:40:55:
6d:fb:9a:ba:08:8c:5d:50:5d:b1:dc:b2:4a:2b:30:
cc:c2:1e:a9:1d:c0:92:9c:cb:51:46:ac:f7:3b:82:
56:35:d0:58:f9:61:c0:5d:00:b1:9c:b3:23:60:3c:
e0:6f:f0:49:c2:f2:d5:28:0a:dc:7c:ff:0c:e3:fa:
d7:ca:2f:eb:40:ac:48:3f:a3:7e:c0:80:10:fe:aa:
b7:6b:03:4f:f5:84:1e:0b:fb:89:82:92:10:6c:f3:
69:81:e5:b4:5f:1b:b6:c3:dc:d0:bc:51:34:b2:50:
4a:6a:c1:c8:ae:5c:c3:5d:4d:c1:65:4f:b1:da:6f:
0a:e5:84:ce:20:f4:5c:de:86:e7:a6:68:89:fa:36:
19:96:03:64:36:0b:a1:59:71:12:e1:cd:44:c2:88:
78:e0:5e:2f:ad:5b:ad:44:34:92:a3:37:f0:7d:84:
a9:7f:a3:b1:41:02:17:f8:64:fc:06:b0:5e:1a:9a:
74:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E9:E8:53:48:98:4B:AA:25:5B:4F:84:D5:B4:CD:BB:0A:64:95:FD
X509v3 Authority Key Identifier:
keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:92:9d:99:dc:84:33:32:84:4d:5c:c0:c1:bc:1d:14:eb:ec:
0e:a4:5d:21:79:2d:b7:6f:cf:b8:53:87:a1:1c:21:e5:14:fe:
ed:f8:dd:89:bb:e6:d6:27:f2:31:6c:45:b8:71:fe:6c:0b:2e:
f2:fa:37:b9:2a:96:f0:52:62:05:8f:70:9f:93:d7:bd:41:c3:
bd:49:3c:ee:80:f9:ed:c6:91:95:91:50:ec:17:21:e4:f0:86:
2e:a9:45:f9:41:cf:58:de:1e:66:cb:6e:33:67:46:64:05:da:
5d:98:f3:e9:8c:76:70:be:d0:f2:07:fe:87:f7:fe:85:7d:11:
14:ae:23:2a:2e:e2:0a:ef:9c:78:ad:4e:7d:1d:be:38:9c:2e:
7f:53:03:fc:28:88:66:93:48:18:fe:4b:51:02:22:0b:22:96:
1b:0d:df:33:18:0b:e0:71:bc:e3:29:2f:60:98:9e:3b:c3:78:
f5:4a:71:ed:ab:b3:98:eb:c9:c6:b1:a9:be:9b:54:0a:ec:8c:
c3:64:f3:16:25:c2:66:0d:64:76:bb:8c:a6:71:87:18:47:d3:
1c:87:77:5b:5f:49:25:8c:79:88:be:bf:4c:7c:7e:b9:3a:c7:
cb:e7:f7:ab:b6:14:97:d8:87:ac:34:12:d0:2e:c6:82:7d:1b:
af:96:82:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:15 2026 by rpki-client