
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
File: b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft (raw, json)
Hash identifier: 0tT5ynI4jU/Wb9QJayslyCVI3gkqoYwmm66WjtlGUtE=
Subject key identifier: CD:2D:A0:26:15:15:D5:9C:99:60:53:6F:A1:2D:81:6C:A6:AB:B2:7F
Authority key identifier: 6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24
Certificate issuer: /CN=6f8c10c383729f76149973b5655be9bf34711b24
Certificate serial: 01A15EC3A035C2909388C0ED2B33F0914A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
Manifest number: 027D
Signing time: Wed 21 Oct 2026 14:00:41 +0000
Manifest this update: Wed 21 Oct 2026 14:00:41 +0000
Manifest next update: Thu 22 Oct 2026 14:00:41 +0000
Files and hashes: 1: b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl (hash: Ucwa64aYQPjK4F69gPBwAbZSuzF++/NXZF+dqfZfgzk=)
2: bf-C7XR5rvxVULROY95AnCsiqDE.roa (hash: Xcehpx+K84jAisImHgsCWZZzlMJjIRq9I5PCTggbexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:c3:a0:35:c2:90:93:88:c0:ed:2b:33:f0:91:4a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8c10c383729f76149973b5655be9bf34711b24
Validity
Not Before: Oct 21 14:00:41 2026 GMT
Not After : Oct 22 14:00:41 2026 GMT
Subject: CN=cd2da0261515d59c9960536fa12d816ca6abb27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:c9:7c:eb:d1:cd:de:5b:e2:9d:55:17:41:
7c:31:4b:ea:41:12:12:e5:56:ed:0b:1f:4f:c3:de:
5d:a4:6b:da:c1:98:e4:f2:3d:10:9c:01:84:d0:dc:
33:c5:48:d8:29:4b:5f:a7:b2:58:15:5a:6f:42:06:
2d:ff:9a:b4:6c:53:b4:37:eb:87:61:6b:66:db:78:
43:82:bf:a6:d2:20:06:8d:4c:17:57:5b:d5:3f:9b:
1d:0c:3f:93:58:9d:56:27:94:c9:0c:3e:6c:e4:e2:
4d:1e:a5:2e:5c:97:91:9d:de:4c:60:3f:80:0f:05:
59:e8:7f:a1:94:15:7f:29:1b:e8:f5:42:bc:d0:21:
65:73:6a:98:8d:52:ca:95:ac:8b:6a:0c:78:35:61:
8c:ee:56:3c:61:c2:39:41:28:f8:22:c3:e3:ed:a7:
9a:50:77:e4:2b:8a:03:48:4e:85:4e:6f:a1:49:6c:
3a:50:cf:d4:ab:ee:93:93:72:35:05:7c:eb:56:d1:
da:6a:68:ff:c1:11:31:47:17:2d:66:6e:42:6e:82:
6b:87:0a:d8:4b:26:e1:36:02:ac:4a:1e:61:0f:c7:
d8:0b:4e:d4:bf:91:71:9f:d7:a1:23:a3:a2:c8:bf:
d7:80:d6:2c:7e:2e:88:5a:be:dc:23:35:0e:e3:99:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2D:A0:26:15:15:D5:9C:99:60:53:6F:A1:2D:81:6C:A6:AB:B2:7F
X509v3 Authority Key Identifier:
keyid:6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:42:b8:59:19:92:6b:af:62:c6:a8:1e:68:6e:14:d6:83:28:
b8:6d:a0:c4:aa:c8:53:4e:e7:86:56:d8:ec:46:90:91:78:2d:
3c:8c:7f:9f:fa:f2:da:c0:5a:32:4d:69:3b:43:04:2e:07:9e:
23:34:4a:63:4f:cd:be:ce:e6:68:97:1f:e2:38:75:25:e6:a3:
67:63:df:3e:54:fd:8a:a5:f2:0e:dd:18:04:65:d3:bb:5d:48:
ea:3e:d8:cc:58:22:01:dd:9d:87:e3:ca:4b:41:9e:33:d1:ce:
9a:81:a2:de:cf:00:dd:1a:59:2e:94:3d:11:3e:97:a2:fd:aa:
28:36:63:6e:39:49:6e:24:d3:6e:7d:2b:bc:9e:1d:03:0a:15:
f0:5c:bd:61:de:66:cd:39:1f:90:ef:9d:75:a9:4d:be:e2:50:
96:6d:64:e1:72:20:73:5b:6a:7d:93:10:3b:db:9d:2f:36:c3:
b9:2e:7b:cd:6d:6c:5e:d3:43:fb:e2:be:2f:4d:a2:25:b1:eb:
7c:16:0f:1e:b0:4d:55:2a:53:57:26:cf:6a:8b:90:fe:9c:7a:
89:06:02:67:ee:db:13:d5:82:ef:6b:86:21:7e:9f:f9:4a:33:
76:a6:0d:3b:db:7e:8b:07:76:c9:8a:d9:6a:32:02:15:0f:3a:
74:bf:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:05:07 2026 by rpki-client