Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier: sU5oakqa5mAnCKJTLSgljiN+Z4v/fNBJvHKZE9GAmrw=
Subject key identifier: 1E:B4:C6:90:6B:86:59:5A:52:19:EC:D1:CD:B7:1B:03:3E:DE:13:C8
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial: 01A0DB72506B799ABC02D2CFC22E111E10DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number: 1570
Signing time: Sat 26 Sep 2026 02:01:36 +0000
Manifest this update: Sat 26 Sep 2026 02:01:36 +0000
Manifest next update: Sun 27 Sep 2026 02:01:36 +0000
Files and hashes: 1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: +whtzMhSmwgekr5j9IwjI4YTOGGOHyTJrm48AI92f8M=)
2: DUkKAgihVQLx-9lRs9kP656LAqs.roa (hash: Q209pcJqFgT3dRAcDq1sFjsPW/cttABhC0fxm9KWWRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:50:6b:79:9a:bc:02:d2:cf:c2:2e:11:1e:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Validity
Not Before: Sep 26 02:01:36 2026 GMT
Not After : Sep 27 02:01:36 2026 GMT
Subject: CN=1eb4c6906b86595a5219ecd1cdb71b033ede13c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f7:0f:8b:65:04:67:40:d9:2d:ff:f7:e5:d0:
13:06:18:37:94:af:b2:77:0b:0e:8a:97:b1:58:31:
ed:6b:91:3e:f1:36:bf:5b:1d:e7:d7:db:17:20:38:
90:1c:cf:b1:7f:dc:ca:e5:45:2a:ac:42:4e:40:e1:
bf:7a:bf:57:b7:b1:d9:cb:15:0c:e0:94:41:01:91:
41:57:3e:b6:a8:da:c4:88:78:6b:4e:da:3a:96:af:
1b:d7:de:4e:5b:ff:e5:10:c8:ba:a9:60:5f:59:d6:
f5:a4:9b:9a:7b:52:b3:26:15:dc:6e:45:8f:61:a3:
60:0a:a2:68:1b:90:f5:1c:47:b5:40:b9:32:41:16:
5c:95:7c:3a:76:af:04:0b:41:f3:1e:4d:c9:0b:ea:
88:f7:ef:e9:91:97:fc:24:7f:e2:62:62:9a:91:70:
4e:77:ce:2d:72:66:71:e2:44:0b:3a:5d:89:61:20:
94:1b:be:7d:ca:3f:b3:00:50:60:00:cd:93:79:91:
bd:9d:b9:e6:0c:e5:bf:96:00:c4:31:80:7e:16:ff:
82:60:fb:e4:b8:dc:28:e8:ae:52:75:58:3b:19:99:
15:b4:cb:91:50:49:b5:a9:9f:6c:5e:fc:19:72:7e:
40:54:bb:02:ac:67:68:31:4e:b2:69:8b:2c:67:ba:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:C6:90:6B:86:59:5A:52:19:EC:D1:CD:B7:1B:03:3E:DE:13:C8
X509v3 Authority Key Identifier:
keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3e:43:af:14:9b:d4:d0:0d:22:40:6f:44:29:e4:59:f3:9a:
27:e2:56:49:60:5b:a1:3f:51:ec:2c:f7:ae:e9:ee:33:d9:f7:
a2:50:da:c2:9f:c5:02:2e:3b:65:d1:10:28:5d:dd:f3:37:5e:
b8:69:26:f3:73:1e:25:94:21:44:7a:9a:16:14:be:5a:88:09:
7a:a6:8b:e0:bd:f0:4d:b5:5d:ed:11:62:41:4a:20:24:9d:42:
74:2e:eb:db:56:8b:cf:f4:db:ba:22:60:4c:48:45:e9:4b:76:
9b:e8:7c:78:85:d4:2c:c2:32:f2:f5:34:b9:8f:f6:4a:ee:66:
06:65:82:2f:a4:2e:5c:92:ff:97:74:de:61:bd:85:a9:cd:dd:
68:87:51:9a:17:e8:c2:45:ae:1e:7f:30:e4:66:96:ed:e5:26:
07:8e:ee:e9:a1:ba:f1:28:39:c4:df:f3:31:da:f2:82:a3:7e:
12:85:7c:db:03:bb:32:5a:c1:24:7a:9c:95:c5:ac:95:3f:05:
1d:37:0d:47:fb:71:cd:b4:3d:7a:40:38:fd:98:e6:ad:e2:f8:
cc:ab:2e:ad:aa:49:30:99:83:c7:9b:4d:6d:01:e4:a0:b8:bc:
72:6e:c1:4e:fe:07:10:ae:cc:1c:98:41:80:b1:26:60:58:ba:
1b:81:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:28:23 2026 by rpki-client