Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: RNIr+q+civkYjOyV4aWJYJpaikAzgEKJl5ZK3qcjdlo=
Subject key identifier: 1D:FB:E3:16:FD:2D:BA:81:28:33:A7:7F:50:71:E5:43:6A:A4:12:A7
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019E30E05C86E71F746DA120A9448079D691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 13:01:10 +0000
Manifest this update: Sat 16 May 2026 13:01:10 +0000
Manifest next update: Sun 17 May 2026 13:01:10 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: cgkRjhE0DP7wBJS4ORgQ0gc++aPCQdFtdW9FJVQnQM4=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:5c:86:e7:1f:74:6d:a1:20:a9:44:80:79:d6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: May 16 13:01:10 2026 GMT
Not After : May 17 13:01:10 2026 GMT
Subject: CN=1dfbe316fd2dba812833a77f5071e5436aa412a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:e4:35:ab:24:b8:f8:68:7b:88:75:bd:f4:
13:2d:1e:fe:68:f0:a3:b6:dd:7c:13:dd:16:52:0d:
34:a7:43:4a:0c:45:a5:c8:60:7f:b9:4a:ab:3c:bd:
20:5e:c4:9f:6f:7b:76:fb:d7:d8:4c:19:87:14:bf:
cc:c5:9b:76:50:9c:1b:83:df:2c:e2:54:53:cb:72:
42:90:dd:b7:84:48:94:c1:60:53:79:36:28:2f:cf:
cc:e0:0d:43:dd:50:39:31:0f:e8:54:d1:f0:ca:09:
08:e5:c5:16:a7:8b:81:df:9a:f9:83:49:21:7f:ac:
7d:73:72:95:d2:1e:16:c8:a6:3d:ac:c3:1c:41:b1:
06:4b:ca:be:f4:84:57:18:8a:dc:16:27:51:1a:f1:
55:b0:b4:9a:64:7a:d2:f8:34:1e:24:ea:e3:63:f7:
48:d4:13:84:42:6f:d5:ee:d4:51:6a:24:de:07:b5:
e7:fb:07:9b:c2:01:f2:bb:b8:01:28:df:e2:46:36:
aa:4f:04:9e:f0:50:bc:4a:3c:96:93:a1:ff:01:05:
04:a3:c8:14:86:1e:51:d9:dd:0e:96:99:8e:e6:fe:
ab:80:fc:a8:57:d7:c9:f3:20:f6:1f:2d:d8:7a:85:
70:b7:b6:6e:9f:8b:34:f3:4f:b6:88:ae:67:79:60:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FB:E3:16:FD:2D:BA:81:28:33:A7:7F:50:71:E5:43:6A:A4:12:A7
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:42:d0:8c:03:72:59:0b:06:a7:dd:01:65:db:bf:bd:0a:5c:
6e:ea:d1:f8:37:f0:8f:0a:eb:47:49:9b:d6:04:db:1d:68:6a:
89:ca:05:96:da:01:c6:03:a0:93:94:fa:3f:05:ac:fd:5a:bc:
28:1b:7f:e7:12:12:35:7f:cb:e2:5c:c3:b8:d4:e0:4e:28:f4:
4b:86:6f:df:cf:d5:96:3e:10:c1:04:03:7b:1f:5b:30:29:db:
03:dd:4e:ac:e4:ff:f6:6e:54:95:44:bc:80:d2:cc:7f:c1:70:
31:f4:19:9c:13:f2:4f:c4:22:c5:6d:d3:9f:7b:e5:59:6a:8d:
90:f8:21:74:6a:65:f0:17:f0:35:d9:5a:11:97:51:e1:5a:9d:
27:5f:6c:dd:a1:29:1e:be:98:e6:60:dd:8e:ef:a5:7e:66:95:
37:57:c6:7b:40:0e:b1:4e:3a:a6:74:f6:bf:52:38:29:84:ad:
b2:20:1f:e5:4e:a2:59:f9:e4:1a:e4:14:41:dc:85:cc:f8:24:
26:73:ba:36:ae:6a:3b:e6:ff:74:85:58:c7:63:c6:45:22:03:
69:0a:20:4c:77:de:e1:a2:68:b6:c7:d1:6f:a6:15:a9:40:12:
6b:51:79:87:62:a0:58:d6:2c:7b:fe:3b:7e:09:48:27:6b:d9:
9b:04:fa:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4FyG5x90baEgqUSAedaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODVhNGQ1NjQyODNhN2ZkZGY2MzQ1Njk3ZDZiYzMzNzNh
MzIyNDYwHhcNMjYwNTE2MTMwMTEwWhcNMjYwNTE3MTMwMTEwWjAzMTEwLwYDVQQD
EygxZGZiZTMxNmZkMmRiYTgxMjgzM2E3N2Y1MDcxZTU0MzZhYTQxMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx/kNaskuPhoe4h1vfQTLR7+aPCj
tt18E90WUg00p0NKDEWlyGB/uUqrPL0gXsSfb3t2+9fYTBmHFL/MxZt2UJwbg98s
4lRTy3JCkN23hEiUwWBTeTYoL8/M4A1D3VA5MQ/oVNHwygkI5cUWp4uB35r5g0kh
f6x9c3KV0h4WyKY9rMMcQbEGS8q+9IRXGIrcFidRGvFVsLSaZHrS+DQeJOrjY/dI
1BOEQm/V7tRRaiTeB7Xn+webwgHyu7gBKN/iRjaqTwSe8FC8SjyWk6H/AQUEo8gU
hh5R2d0OlpmO5v6rgPyoV9fJ8yD2Hy3YeoVwt7Zun4s080+2iK5neWCmlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB374xb9LbqBKDOnf1Bx5UNqpBKnMB8GA1UdIwQY
MBaAFG+FpNVkKDp/3fY0VpfWvDNzoyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQt
MDYxZmMxYWViMTU4LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQtMDYxZmMxYWViMTU4
LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0LQjANy
WQsGp90BZdu/vQpcburR+DfwjwrrR0mb1gTbHWhqicoFltoBxgOgk5T6PwWs/Vq8
KBt/5xISNX/L4lzDuNTgTij0S4Zv38/Vlj4QwQQDex9bMCnbA91OrOT/9m5UlUS8
gNLMf8FwMfQZnBPyT8QixW3Tn3vlWWqNkPghdGpl8BfwNdlaEZdR4VqdJ19s3aEp
Hr6Y5mDdju+lfmaVN1fGe0AOsU46pnT2v1I4KYStsiAf5U6iWfnkGuQUQdyFzPgk
JnO6Nq5qO+b/dIVYx2PGRSIDaQogTHfe4aJotsfRb6YVqUASa1F5h2KgWNYse/47
fglIJ2vZmwT6JA==
-----END CERTIFICATE-----
Generated at Sat May 16 19:30:35 2026 by rpki-client