Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: WaY6VRCtNhEtUHykt3yAspNhcs4lzvvK2i2F0o38o2c=
Subject key identifier: F9:F8:BC:42:4C:D6:EE:5D:51:2D:22:78:92:0B:0E:0F:D9:45:DC:48
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 01A0024AF3DD72BC45F76AF737159C01866D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 22:01:01 +0000
Manifest this update: Fri 14 Aug 2026 22:01:01 +0000
Manifest next update: Sat 15 Aug 2026 22:01:01 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: RMkkqrKQqBDxDCEgWCD28fnu7GD6A1dGsafEEcbBixI=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:f3:dd:72:bc:45:f7:6a:f7:37:15:9c:01:86:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Aug 14 22:01:01 2026 GMT
Not After : Aug 15 22:01:01 2026 GMT
Subject: CN=f9f8bc424cd6ee5d512d2278920b0e0fd945dc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:37:6b:5c:9e:bf:f9:c0:ce:51:d1:26:9e:
03:c8:75:f6:d6:55:69:54:30:b2:53:b1:2b:2b:74:
31:8e:c3:44:dd:dc:26:f6:9a:2d:a0:13:07:11:f2:
f8:39:c4:f6:20:10:c3:85:7a:e3:62:2a:b0:a2:17:
6f:d8:e5:d4:e6:f6:51:31:f6:81:7a:85:3a:ed:fb:
e5:c7:30:05:52:64:9d:86:76:7c:74:77:ee:f4:bf:
01:07:27:db:8c:80:71:2f:00:04:0f:bb:32:2a:53:
4f:77:3d:76:77:c7:ef:a2:1f:0d:91:dc:38:82:2f:
ca:60:c8:69:08:be:bc:8f:30:bc:01:38:44:e9:ed:
13:27:f5:f8:23:24:19:4a:39:ea:e0:98:30:2e:e9:
45:83:48:16:ed:2e:02:21:bc:a4:cc:e7:c8:af:29:
5d:47:a5:9c:5b:fc:7a:d8:20:01:0e:ca:c8:56:31:
34:3d:1f:46:5c:c5:56:14:63:59:81:a2:e5:90:4e:
50:12:39:b3:88:d4:8e:af:9d:9e:f1:89:4a:0c:40:
74:b3:5e:b2:a9:c4:84:8e:e2:b1:4c:da:fb:5f:42:
9e:71:57:32:fb:e5:5e:a5:37:a4:fe:18:1c:f0:30:
7e:eb:64:98:78:70:74:69:08:e1:d8:d7:51:66:41:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F8:BC:42:4C:D6:EE:5D:51:2D:22:78:92:0B:0E:0F:D9:45:DC:48
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ac:29:64:32:fc:15:54:c6:f3:72:6e:2c:f1:80:4c:ee:76:
53:68:9c:68:a8:7a:24:bf:1f:1e:47:c8:37:31:27:c0:c3:4c:
31:09:32:c3:a7:b7:a7:8e:cb:b0:77:11:c4:f8:f0:df:fb:57:
cc:59:a2:67:3c:f9:0e:7e:f8:95:fe:67:e9:69:3c:30:6b:9b:
71:e2:6b:97:95:1d:fc:fc:91:b9:c9:ce:a5:f0:cd:89:ca:31:
c8:e6:92:78:65:cc:b8:5a:7e:77:35:55:1d:f2:12:a0:ea:08:
df:79:bb:05:e6:15:06:3f:14:bb:6b:9d:c4:f4:52:16:6f:67:
07:b6:c9:09:d0:2a:99:01:48:ac:b6:e0:3f:6a:df:90:c3:4f:
a1:c3:fc:05:5b:66:92:d1:b9:0e:55:d2:98:97:54:55:6e:96:
96:19:44:e8:42:ac:43:47:56:03:81:01:d7:68:0a:e3:5a:09:
8e:bc:cb:f2:01:f0:78:e7:54:0b:75:d8:02:ac:8c:0d:d1:6c:
b5:34:b6:e1:f5:9e:f4:33:71:48:15:88:89:f4:2b:7e:52:81:
bf:19:7b:e1:a5:ea:69:dc:37:85:5b:6d:64:0f:22:5e:e0:32:
9e:59:5c:4d:0d:03:19:fa:38:77:56:da:50:25:e9:36:18:b2:
bc:20:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:04 2026 by rpki-client