Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
File: b4RsjA22XcdG72TP2Cu5wZTif3M.mft (raw, json)
Hash identifier: e5jrr9Jq24lJ4U6jHJy8hEmJFEQQLoHVUK49TJB3ao0=
Subject key identifier: 4C:EA:73:96:A1:7D:88:6A:D9:09:E9:5D:BD:F9:60:AD:F4:C3:F5:24
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial: 01A197A090995DAE0092A19D0EA7DE529630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
Manifest number: 19A2
Signing time: Sun 01 Nov 2026 15:00:44 +0000
Manifest this update: Sun 01 Nov 2026 15:00:44 +0000
Manifest next update: Mon 02 Nov 2026 15:00:44 +0000
Files and hashes: 1: NES_Di85pZi5ENKpgDz8EQo01i8.roa (hash: ohM4Ey0EufRoQF8r1FlwKpwiQqOYJ9oFC/DI4pckWkI=)
2: b4RsjA22XcdG72TP2Cu5wZTif3M.crl (hash: 2JkAqjukIe/jxnpml/KPq32IX5xmiWRc/+InUkTGFj0=)
3: g2H9xWj1H5AbwMNqiP9AW55oss8.roa (hash: 9T0jOBQOH9REt/W/f2e2pn8D6B5ZPkyd1uv8j2XXDoI=)
4: kQAqQkYprXGntUoiW7qN1WFeM6c.roa (hash: FS+U3EYjUSEwiuzNKrPworcyNLMeX4zA9XKfDuWL9sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:a0:90:99:5d:ae:00:92:a1:9d:0e:a7:de:52:96:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Validity
Not Before: Nov 1 15:00:44 2026 GMT
Not After : Nov 2 15:00:44 2026 GMT
Subject: CN=4cea7396a17d886ad909e95dbdf960adf4c3f524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:8d:bb:53:90:c5:fd:81:fa:86:3e:0a:af:
93:21:df:71:f8:f5:71:bc:d3:a5:33:fb:0b:c6:d1:
62:9c:ac:9d:62:41:79:40:ca:aa:17:b9:5a:9d:f2:
82:e4:7b:ef:21:01:24:e0:bd:76:af:7d:b6:43:cf:
60:65:e5:9e:61:a8:81:ab:b2:38:3a:72:24:9b:50:
bd:45:92:b0:82:35:02:f1:bb:5c:79:f5:dc:7a:4f:
85:92:91:d9:d9:6c:b9:77:6e:7c:18:42:84:49:24:
9d:de:da:8b:c8:0e:21:bd:48:bc:8b:66:25:13:4e:
d5:60:f7:b5:24:fa:b6:df:2a:95:76:cd:1f:de:ba:
84:17:74:04:ab:10:18:a0:83:1d:27:25:cd:b9:d4:
86:84:df:09:fd:9a:b4:72:9c:67:d4:b1:6f:e5:85:
b1:ed:4d:e3:66:42:d6:72:d4:d8:d3:fe:2a:6f:00:
fb:c7:c5:5c:24:9e:f4:89:8f:d4:22:fc:bd:7c:81:
e9:d4:8b:ee:cf:27:ec:3e:ee:57:1d:97:70:fb:02:
b3:8e:de:81:22:6e:c3:6d:a9:b8:b0:86:bc:14:0d:
57:30:c7:60:5e:bd:bf:28:2e:92:67:9f:25:21:1c:
88:9b:a9:a6:75:5d:5e:30:56:bf:f7:63:c2:a7:72:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EA:73:96:A1:7D:88:6A:D9:09:E9:5D:BD:F9:60:AD:F4:C3:F5:24
X509v3 Authority Key Identifier:
keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5a:b9:67:7f:66:5f:e1:3b:7d:07:ce:74:36:f7:a9:7f:b5:
a6:87:3a:9f:f3:11:8d:a0:47:9f:87:86:27:8e:db:aa:92:f9:
ea:32:6e:0c:8d:a0:b6:19:48:d0:0d:ca:ce:7d:c8:e8:0c:b6:
8d:14:07:88:1e:93:1b:46:d7:b6:a1:a4:d2:23:b6:d4:55:38:
36:da:09:5a:41:f3:f5:68:a5:20:2d:f5:6d:65:e4:91:ce:b3:
e3:75:33:f7:2d:a8:45:1b:6d:ed:b8:34:d5:d5:6f:d8:c1:df:
b9:b9:23:5f:1f:be:6e:39:80:eb:b5:31:1e:8d:7f:da:b1:82:
6e:71:69:b9:5a:70:7b:12:c8:7d:a5:05:ec:29:be:b7:f2:02:
aa:80:e3:6c:a3:41:09:62:7c:4b:67:cd:3b:6a:3a:46:16:ec:
11:16:1b:0a:30:10:f5:a7:dd:20:5d:3c:c2:0d:ce:28:88:a6:
02:90:a1:38:fe:a1:34:78:eb:c9:17:f7:13:fd:b4:56:64:bb:
71:4d:06:7e:08:ad:5c:8a:b7:8a:1f:4b:76:8e:c5:47:24:20:
52:1b:a9:0e:af:21:1a:14:9f:2d:b9:ca:3a:0a:08:4e:a8:59:
13:5a:cf:6d:f9:bf:85:d2:31:c6:58:56:14:a7:80:37:4d:17:
6f:f6:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:05:05 2026 by rpki-client