Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: z1JRhfVTavg96dagfeQnvmt3pf8Kp/pJMCCVdlAm0qM=
Subject key identifier: F7:81:59:C3:E6:64:83:8B:EF:20:33:23:26:0C:9C:A5:BB:8B:59:BE
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 019D38D2D5DC340C708D69404783554AB418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: 8Ou6wlnzqqtTvTgHaOegu0awhHIFNnWC9msKIOICwCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d5:dc:34:0c:70:8d:69:40:47:83:55:4a:b4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=f78159c3e664838bef203323260c9ca5bb8b59be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:fc:46:ba:f2:21:43:f7:52:65:be:51:b6:
10:43:dd:33:7a:c0:dc:1f:4a:86:b1:61:ac:64:f5:
9e:8f:2e:28:f7:a0:07:df:8f:b1:90:78:ca:8c:b5:
52:a5:74:03:53:48:f1:8a:c3:aa:a3:98:65:57:c9:
ba:1f:06:99:4e:44:9d:13:7d:c1:60:5c:32:c5:43:
ec:c7:37:d0:40:1b:86:5a:68:a4:ff:57:d4:e9:48:
92:aa:8a:5e:c0:0f:53:b8:8a:49:0e:ce:67:ca:66:
82:4a:e2:3e:9e:8d:6e:cd:fe:e1:26:9d:89:e3:98:
e2:be:74:b8:7b:25:f6:7d:8c:b2:ee:6c:df:5b:9b:
80:f9:3a:06:03:4b:ee:24:d5:1a:ba:6d:55:36:c3:
33:d4:11:83:d2:30:4e:23:9e:e8:b4:fb:79:0f:30:
ab:33:64:44:91:5a:1d:80:dc:e6:76:0f:24:35:fa:
6a:86:41:f9:30:f0:f2:b9:33:5c:21:e4:56:4f:93:
f1:0c:72:96:db:55:b3:3f:0f:9a:9f:ad:fa:5b:d3:
27:68:a4:79:e5:18:c7:4c:89:e3:32:fa:e7:d1:56:
30:2f:63:c7:66:4e:3e:f4:16:91:50:4b:83:9b:a4:
75:4d:70:5a:a7:41:a6:6a:cc:7b:37:1e:b8:a1:28:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:81:59:C3:E6:64:83:8B:EF:20:33:23:26:0C:9C:A5:BB:8B:59:BE
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:dd:aa:2f:3a:a7:67:61:59:29:74:b8:ae:56:7c:4c:b0:b6:
be:cd:47:f5:11:a1:e3:13:c3:11:25:16:f2:c7:b3:3f:57:5c:
18:ae:de:65:13:43:12:5c:0f:29:4b:8e:60:ab:bf:7b:a3:8b:
e9:67:41:3b:13:d2:ce:d0:8c:81:df:2f:e7:ea:f3:32:3d:4f:
db:18:e2:54:06:91:f1:d8:e5:ab:72:83:68:c0:d0:5d:83:b7:
d6:3d:2c:b5:31:76:87:a7:52:7f:f3:d9:d0:b2:cc:cd:a4:ca:
21:6c:38:d8:ae:76:fa:7d:1c:70:b6:08:da:ce:5f:e0:50:43:
03:53:c7:50:77:b7:19:42:a0:eb:d1:34:ba:de:02:3f:47:27:
b7:8b:c6:01:62:41:0d:3a:a2:c1:a2:29:e6:c6:75:fa:e4:2d:
7a:dd:c1:f3:79:b1:32:94:11:09:38:98:cb:89:52:15:58:1f:
ca:9b:77:f2:29:38:d9:5e:be:1a:c3:e8:69:87:36:a1:44:28:
8f:e6:91:65:df:5f:5d:73:5c:f2:cd:9e:3c:fb:5e:0a:16:62:
d1:12:2f:06:22:6a:ac:01:8a:75:1e:e5:a0:18:a2:94:5a:7b:
d2:06:f3:cd:bb:c5:14:6d:a9:fc:a4:56:de:a5:70:27:b6:2b:
d6:0e:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:58 2026 by rpki-client