Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
File: b4RsjA22XcdG72TP2Cu5wZTif3M.mft (raw, json)
Hash identifier: A2yz14UB7swT1cyd3CQsy7ZuBh4+iUEwdgeHjEzSg78=
Subject key identifier: 8D:98:3F:D8:CA:2E:F0:0D:DD:31:5F:A3:65:21:83:B6:70:41:06:A4
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial: 019FA7503ACD43785DBA6FA1F0F918670F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
Manifest number: 18A1
Signing time: Tue 28 Jul 2026 06:01:20 +0000
Manifest this update: Tue 28 Jul 2026 06:01:20 +0000
Manifest next update: Wed 29 Jul 2026 06:01:20 +0000
Files and hashes: 1: NES_Di85pZi5ENKpgDz8EQo01i8.roa (hash: ohM4Ey0EufRoQF8r1FlwKpwiQqOYJ9oFC/DI4pckWkI=)
2: b4RsjA22XcdG72TP2Cu5wZTif3M.crl (hash: KkaA5qaZXtVQJ+iKQvRZJKqTeUe4NJYtdV8dqQ3bMJI=)
3: g2H9xWj1H5AbwMNqiP9AW55oss8.roa (hash: 9T0jOBQOH9REt/W/f2e2pn8D6B5ZPkyd1uv8j2XXDoI=)
4: kQAqQkYprXGntUoiW7qN1WFeM6c.roa (hash: FS+U3EYjUSEwiuzNKrPworcyNLMeX4zA9XKfDuWL9sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:50:3a:cd:43:78:5d:ba:6f:a1:f0:f9:18:67:0f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Validity
Not Before: Jul 28 06:01:20 2026 GMT
Not After : Jul 29 06:01:20 2026 GMT
Subject: CN=8d983fd8ca2ef00ddd315fa3652183b6704106a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:ab:ae:0c:02:c6:81:eb:38:65:03:00:79:
32:4e:14:50:67:ff:fc:6f:7d:fd:52:b7:ce:a5:d6:
51:8d:2e:bc:4b:c6:ed:1a:c8:d1:b7:b6:50:02:3d:
59:14:92:ea:fa:75:c5:dd:ab:e4:4a:b8:56:ca:f4:
1b:5f:e7:9c:6a:6f:46:a7:95:8c:90:de:93:51:b0:
8f:9a:a3:cb:fe:c2:82:04:04:2e:78:81:17:9d:29:
dc:06:6e:2a:c6:a3:71:44:7b:cf:f2:8a:2d:87:93:
8d:cb:e9:15:d7:34:8a:69:6a:b1:03:3f:68:53:8f:
d7:fa:d1:d4:c2:8c:43:f0:e6:a9:aa:a4:19:8d:3a:
cd:ae:92:8a:e1:a9:03:9c:35:72:e7:14:8f:22:28:
cc:8f:c8:ff:bf:72:de:e5:04:c5:94:44:a1:b5:e0:
ef:14:5a:ef:b6:e1:f9:21:4a:8e:1f:59:f8:e7:63:
32:97:2b:bd:c8:6c:db:27:98:aa:e4:f0:a4:d2:43:
8c:ab:26:6b:bd:f7:53:fe:c2:87:e8:4e:be:7b:f0:
9a:cc:68:a7:b9:93:07:72:aa:2f:12:31:ac:70:59:
fa:d7:2d:3c:f9:d5:f0:02:7d:92:5f:ae:c5:34:7d:
f7:dd:c7:61:3d:04:89:70:af:69:a7:07:be:20:76:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:98:3F:D8:CA:2E:F0:0D:DD:31:5F:A3:65:21:83:B6:70:41:06:A4
X509v3 Authority Key Identifier:
keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cb:c1:b9:4c:de:a0:35:cd:c0:a5:02:c6:24:60:08:f6:b8:
75:c4:7b:79:2f:4f:b2:16:8d:c7:24:ef:4f:dc:54:66:df:2d:
75:f4:b0:99:40:56:52:80:cb:e9:02:8a:13:5c:35:0e:6d:27:
35:5c:52:99:a8:40:93:f9:ed:95:ee:0b:be:8a:0a:00:41:a3:
77:a3:68:09:59:c2:80:95:fc:c8:22:32:3d:c8:7a:ba:33:b0:
77:d9:29:39:f5:15:4f:ee:e6:0c:7e:34:03:85:ac:30:23:19:
0c:7b:48:5b:8e:db:30:68:46:97:d5:9f:b1:ed:71:78:bf:92:
70:df:fb:63:ec:a4:b2:49:23:31:7a:91:3c:d4:e3:38:35:43:
e5:0a:cf:73:b4:e7:34:52:2a:61:5e:b4:ed:cb:90:d0:7b:fc:
0c:27:39:88:1f:f3:f9:99:c7:37:d4:1c:81:b3:11:c6:1c:bc:
9a:3f:78:e7:85:e3:b2:14:33:7b:a9:74:60:f0:b6:b4:f2:a7:
64:82:c0:17:03:51:2d:ac:77:a9:04:93:a7:ac:c4:5c:ff:be:
1f:87:e1:02:4a:4e:6e:5a:3a:5a:0e:63:20:ba:cc:4c:7f:ed:
b2:82:cd:3c:19:e0:7e:d9:19:18:9e:fc:57:eb:56:0e:c0:9e:
e9:b3:d2:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nUDrNQ3hdum+h8PkYZw9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODQ2YzhjMGRiNjVkYzc0NmVmNjRjZmQ4MmJiOWMxOTRl
MjdmNzMwHhcNMjYwNzI4MDYwMTIwWhcNMjYwNzI5MDYwMTIwWjAzMTEwLwYDVQQD
Eyg4ZDk4M2ZkOGNhMmVmMDBkZGQzMTVmYTM2NTIxODNiNjcwNDEwNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCGrrgwCxoHrOGUDAHkyThRQZ//8
b339UrfOpdZRjS68S8btGsjRt7ZQAj1ZFJLq+nXF3avkSrhWyvQbX+ecam9Gp5WM
kN6TUbCPmqPL/sKCBAQueIEXnSncBm4qxqNxRHvP8ooth5ONy+kV1zSKaWqxAz9o
U4/X+tHUwoxD8OapqqQZjTrNrpKK4akDnDVy5xSPIijMj8j/v3Le5QTFlEShteDv
FFrvtuH5IUqOH1n452Mylyu9yGzbJ5iq5PCk0kOMqyZrvfdT/sKH6E6+e/CazGin
uZMHcqovEjGscFn61y08+dXwAn2SX67FNH333cdhPQSJcK9ppwe+IHYZmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2YP9jKLvAN3TFfo2Uhg7ZwQQakMB8GA1UdIwQY
MBaAFG+EbIwNtl3HRu9kz9grucGU4n9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMt
NDhiYTkyOGZiMWJlLzEvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMtNDhiYTkyOGZiMWJl
LzEvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsvBuUze
oDXNwKUCxiRgCPa4dcR7eS9PshaNxyTvT9xUZt8tdfSwmUBWUoDL6QKKE1w1Dm0n
NVxSmahAk/ntle4LvooKAEGjd6NoCVnCgJX8yCIyPch6ujOwd9kpOfUVT+7mDH40
A4WsMCMZDHtIW47bMGhGl9Wfse1xeL+ScN/7Y+ykskkjMXqRPNTjODVD5QrPc7Tn
NFIqYV607cuQ0Hv8DCc5iB/z+ZnHN9QcgbMRxhy8mj9454XjshQze6l0YPC2tPKn
ZILAFwNRLax3qQSTp6zEXP++H4fhAkpOblo6Wg5jILrMTH/tsoLNPBngftkZGJ78
V+tWDsCe6bPSIg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 10:33:29 2026 by rpki-client