Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: Y5rJ5uM0rCnZ1QtX27o8WYbcR2RpUBssURAAmFig3E0=
Subject key identifier: B5:96:B1:27:A3:1A:B5:99:DE:51:F3:6F:E9:08:C3:93:B2:13:30:F5
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019D37C0255F2298BA7E7E228CC417E94317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: aYeElYy5ovhPx0OXMoLFWmIqONR4V9otJWBVtUO+Nb8=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:25:5f:22:98:ba:7e:7e:22:8c:c4:17:e9:43:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=b596b127a31ab599de51f36fe908c393b21330f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:33:12:24:3b:13:be:64:e2:9e:0c:dd:e2:
f8:ad:89:10:47:16:0f:02:38:c8:d0:c2:9e:b2:62:
7e:3b:02:c2:02:88:17:15:a6:0b:e0:43:38:64:42:
88:35:ff:c5:81:ed:0b:e5:95:b8:d0:a5:af:7c:43:
06:26:b4:fb:4b:f9:3e:e5:3e:7c:a3:c5:ee:5d:74:
b6:d5:d2:3d:ff:20:8a:e5:ec:f9:01:d6:22:c0:21:
73:75:2a:30:58:cc:ac:9e:20:be:15:de:32:b0:39:
6b:c1:b7:9d:99:09:ae:0d:80:f6:8b:15:b3:52:07:
a7:a2:7b:e0:d2:17:76:b7:94:1d:3a:66:b5:ec:9c:
75:8c:4b:bd:2a:3a:d7:03:d0:0e:cc:42:a9:35:bb:
f2:72:b3:54:08:9f:1a:c4:99:a8:d7:84:ff:7d:2c:
fc:33:90:5b:b6:a8:43:94:8e:0a:88:c0:35:d5:c1:
8b:b9:dc:eb:09:be:95:ab:0f:4e:47:57:30:9e:4f:
d5:c6:33:a7:f8:b7:c3:53:9c:0d:d4:36:8b:fd:aa:
65:22:3d:53:2e:d3:c7:e1:48:10:cc:8c:28:e7:60:
4d:b2:52:f1:2e:8f:64:ac:b8:54:10:fc:46:ae:56:
1e:5d:2f:55:d9:76:ab:1a:37:21:01:67:12:ca:03:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:96:B1:27:A3:1A:B5:99:DE:51:F3:6F:E9:08:C3:93:B2:13:30:F5
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2a:8a:fe:7a:94:63:99:b3:63:f0:3a:75:ad:8f:1c:ec:9a:
16:9c:e8:bc:c0:f3:29:51:79:d2:1c:c3:96:55:7d:f4:73:37:
20:48:a9:5e:24:7b:51:23:33:da:de:4d:c2:8c:12:5c:45:46:
4a:62:74:9a:53:92:49:e1:8b:c0:d4:22:6a:37:46:47:59:1e:
7a:73:7f:15:48:fb:24:d3:40:44:a6:fe:ea:6f:fe:82:db:d9:
e9:7a:08:f0:03:e1:fd:48:93:38:0f:6d:e9:14:c4:6e:06:a2:
42:60:ef:0b:bc:36:c3:41:34:35:22:14:3b:65:8a:45:fd:34:
ef:1b:78:b7:8e:21:c9:5e:d0:36:d5:7f:f4:30:74:e4:5c:a5:
4f:b5:48:b8:e9:97:70:0d:3e:0c:db:d5:00:0c:26:cb:dc:43:
2a:e4:3b:2d:1d:64:61:df:aa:47:34:0c:d3:1a:00:44:72:76:
8f:13:7a:ef:3e:ab:7e:79:92:c9:92:4c:47:63:3d:f2:5b:cd:
bb:aa:8f:a6:30:e7:dd:ed:79:e0:09:dd:1b:44:7d:3d:3c:13:
40:2e:8f:d4:34:91:ce:7e:66:02:7f:6f:ed:a7:ea:e5:36:d4:
98:39:b5:9b:4a:03:30:13:aa:c6:be:16:b1:41:54:bc:14:6b:
0e:5f:ee:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wCVfIpi6fn4ijMQX6UMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODVhNGQ1NjQyODNhN2ZkZGY2MzQ1Njk3ZDZiYzMzNzNh
MzIyNDYwHhcNMjYwMzI5MDQwMDMyWhcNMjYwMzMwMDQwMDMyWjAzMTEwLwYDVQQD
EyhiNTk2YjEyN2EzMWFiNTk5ZGU1MWYzNmZlOTA4YzM5M2IyMTMzMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3ozEiQ7E75k4p4M3eL4rYkQRxYP
AjjI0MKesmJ+OwLCAogXFaYL4EM4ZEKINf/Fge0L5ZW40KWvfEMGJrT7S/k+5T58
o8XuXXS21dI9/yCK5ez5AdYiwCFzdSowWMysniC+Fd4ysDlrwbedmQmuDYD2ixWz
Ugenonvg0hd2t5QdOma17Jx1jEu9KjrXA9AOzEKpNbvycrNUCJ8axJmo14T/fSz8
M5BbtqhDlI4KiMA11cGLudzrCb6Vqw9OR1cwnk/VxjOn+LfDU5wN1DaL/aplIj1T
LtPH4UgQzIwo52BNslLxLo9krLhUEPxGrlYeXS9V2XarGjchAWcSygN8BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWWsSejGrWZ3lHzb+kIw5OyEzD1MB8GA1UdIwQY
MBaAFG+FpNVkKDp/3fY0VpfWvDNzoyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQt
MDYxZmMxYWViMTU4LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQtMDYxZmMxYWViMTU4
LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyqK/nqU
Y5mzY/A6da2PHOyaFpzovMDzKVF50hzDllV99HM3IEipXiR7USMz2t5NwowSXEVG
SmJ0mlOSSeGLwNQiajdGR1keenN/FUj7JNNARKb+6m/+gtvZ6XoI8APh/UiTOA9t
6RTEbgaiQmDvC7w2w0E0NSIUO2WKRf007xt4t44hyV7QNtV/9DB05FylT7VIuOmX
cA0+DNvVAAwmy9xDKuQ7LR1kYd+qRzQM0xoARHJ2jxN67z6rfnmSyZJMR2M98lvN
u6qPpjDn3e154AndG0R9PTwTQC6P1DSRzn5mAn9v7afq5TbUmDm1m0oDMBOqxr4W
sUFUvBRrDl/udg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:53 2026 by rpki-client