Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: 7FB5CVj1o2vlm7DweqRp3XnylRyL9rPqauIAKA31LbI=
Subject key identifier: 72:58:C2:E0:C3:9A:47:00:3E:73:2D:45:16:A0:CE:AE:83:33:C5:08
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019F189EFF653F1556DEA7578E6E2B392A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 13:01:40 +0000
Manifest this update: Tue 30 Jun 2026 13:01:40 +0000
Manifest next update: Wed 01 Jul 2026 13:01:40 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: n3PmqRcAQybucJmkFPTyzOMAnySFk8wHP02rkfm7r3Y=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:ff:65:3f:15:56:de:a7:57:8e:6e:2b:39:2a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Jun 30 13:01:40 2026 GMT
Not After : Jul 1 13:01:40 2026 GMT
Subject: CN=7258c2e0c39a47003e732d4516a0ceae8333c508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:98:49:7a:8d:3d:04:a1:4d:75:7f:46:73:
95:6b:38:f4:a1:38:7d:40:45:9b:2f:a8:ab:d7:a9:
2e:bd:af:9f:d1:39:f9:94:9e:6d:56:7a:74:86:36:
9d:dd:6f:1b:15:99:72:cc:52:f6:4f:71:bf:1f:7f:
eb:53:2d:41:92:2e:bb:91:a6:06:e9:35:c7:8c:6c:
7a:4b:05:03:b3:2c:e5:2d:7c:7f:cf:7e:15:34:7e:
85:72:03:30:91:e6:c8:f4:52:fa:ed:46:fa:3e:cc:
88:f8:26:a2:48:f9:aa:46:4a:a6:dd:5d:3d:c3:95:
90:1a:47:5f:e1:68:8d:fb:94:44:ed:3b:e4:df:cf:
e6:a9:65:45:4c:ed:4d:87:fc:2f:fc:23:73:d6:1c:
fc:2a:8d:ad:cc:d2:84:98:8c:b8:ec:92:d4:eb:a7:
92:2b:23:15:84:e7:b0:19:9e:3f:61:db:33:c2:d5:
5b:a6:d2:8d:f6:a2:6a:9d:78:34:b6:b3:cf:4d:b3:
be:26:a2:9a:63:57:a4:8d:d5:19:80:8d:e0:35:6a:
80:78:3e:c1:25:ea:19:17:9a:7e:b2:68:f8:1d:03:
4e:99:15:07:65:53:63:b9:03:7d:71:36:2b:a5:86:
dc:62:31:a2:0a:36:ec:b2:af:35:b5:67:cf:03:cb:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:58:C2:E0:C3:9A:47:00:3E:73:2D:45:16:A0:CE:AE:83:33:C5:08
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:79:7e:dc:bc:73:6d:da:95:23:ef:0c:87:04:69:2b:e1:81:
b9:37:2c:34:c9:b8:7d:7c:1a:37:5f:3c:50:a2:b8:ed:43:46:
15:8a:17:07:f9:fc:5d:9c:a9:32:ab:6e:7e:45:3c:b3:ff:af:
a1:cb:9e:b1:9b:c2:41:b8:6b:24:7b:ed:db:02:ce:eb:5f:a5:
e1:75:cf:2c:c1:3c:5c:18:53:cd:7f:27:f0:35:ec:46:e6:7e:
de:e4:f4:14:85:ba:c9:61:e3:d6:6f:02:04:50:62:e6:8a:6b:
f8:9d:ba:2b:31:dc:f6:8f:19:d8:f4:ac:8e:70:50:ce:b6:ad:
9a:5a:66:57:e4:a9:72:84:6c:41:22:fc:e3:0b:c4:4f:bc:e3:
7e:43:21:6f:44:55:af:ff:4e:14:c2:c9:7b:7c:f1:9d:73:37:
af:9a:ca:36:fa:94:aa:84:c2:2a:d8:d3:ce:01:be:2a:e6:18:
6b:29:42:7a:32:69:c3:ac:cb:64:ba:90:2d:c8:d8:62:cd:21:
1e:9e:31:c1:ba:23:db:80:4f:7f:ce:a2:b5:2e:d7:cc:4e:ad:
64:82:72:49:9d:40:88:32:01:c4:69:74:4c:f8:c6:c1:4a:c1:
c8:6f:bf:02:94:d9:fe:8a:a0:aa:d5:b1:d0:aa:f0:d2:95:7a:
0b:3c:59:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:19 2026 by rpki-client