Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier: bPw0FuY/IrhvidVRuG0czJcPV6X+lHwSh9rLuCbXOrg=
Subject key identifier: D5:82:B8:5F:1A:D6:C1:D1:14:FB:33:78:29:58:1C:E4:79:3B:50:9D
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 019CAAC7089DF970EC732768356C3D07249E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number: 1042
Signing time: Sun 01 Mar 2026 19:01:36 +0000
Manifest this update: Sun 01 Mar 2026 19:01:36 +0000
Manifest next update: Mon 02 Mar 2026 19:01:36 +0000
Files and hashes: 1: 1-32w-LG2_3MN5stMgExAO0f0NSM.roa (hash: +gMPqRhllgTKSW4BKPpHRxWjT/hynauGjaOuYFXhPnY=)
2: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: ua9IvUAwb/6dP3F8tLo/dg87tHqxW5Joa2lyhBj5WMI=)
3: rihpWR5lfOU3jWw_hazq8i-NTnc.roa (hash: KFfr9h7mP9mKrCtGOFXC3EbHAHlcqrnQ3k9bqEF6yLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:08:9d:f9:70:ec:73:27:68:35:6c:3d:07:24:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Mar 1 19:01:36 2026 GMT
Not After : Mar 2 19:01:36 2026 GMT
Subject: CN=d582b85f1ad6c1d114fb337829581ce4793b509d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:f9:53:33:81:2f:cb:4d:36:d1:68:e2:95:
68:59:7f:0c:79:b7:55:22:d8:b4:1f:e7:3d:b6:c5:
44:6b:f5:2a:e8:bc:c2:6e:e4:a2:19:d3:88:db:0d:
6f:4f:97:06:18:0e:a5:08:6d:0d:d2:f7:16:46:fc:
11:12:90:e6:74:e6:2d:2a:cb:4d:6d:e5:38:87:4e:
10:0c:16:79:f3:13:02:67:fa:67:96:25:c0:2d:60:
0d:22:e6:01:cb:ad:d3:9e:1c:6a:0d:eb:8c:17:bc:
cc:52:c5:be:67:bf:7b:f4:fe:55:df:f0:e9:a9:04:
82:d8:b0:79:6b:18:69:3c:c2:94:b0:6e:55:62:23:
a6:1e:26:79:1c:e4:a5:3e:17:38:18:65:9b:ff:f0:
74:4d:83:36:0e:44:ba:5e:06:88:67:10:85:f8:9e:
bf:c2:c3:24:e9:e3:b6:57:67:88:70:df:b6:ed:57:
c6:b5:15:bd:e6:f1:a8:d2:c8:ba:b0:a2:a4:eb:be:
58:1d:89:c0:34:57:ce:91:7f:49:bd:12:49:99:df:
87:31:80:f7:77:bf:83:ab:c6:32:0c:6b:d3:b2:bb:
ea:1e:a9:9d:7e:6d:60:6c:d1:d7:eb:85:1a:de:b0:
95:a8:67:09:00:69:49:22:93:67:52:8a:7c:c7:d1:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:82:B8:5F:1A:D6:C1:D1:14:FB:33:78:29:58:1C:E4:79:3B:50:9D
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ce:2d:03:bd:b0:4a:94:2c:21:3d:80:75:89:ce:46:f6:0f:
8b:29:94:16:75:b6:36:41:0e:f2:a7:7c:59:66:3d:90:2b:8c:
10:fc:e5:98:a7:c4:0b:4c:be:89:5d:df:6f:24:e1:42:4a:6e:
90:ac:d4:a8:18:19:25:68:d0:a1:72:86:69:b9:93:2c:2b:55:
f8:51:3f:9f:12:2d:00:1b:8a:cf:38:ae:2e:57:7f:a6:1f:36:
e5:43:66:19:bd:75:f7:bf:53:a8:06:b6:b4:16:89:b1:17:10:
6a:0d:fe:4a:8d:d9:b1:fd:2e:00:73:81:30:dd:47:b0:0c:86:
51:7b:94:78:68:83:67:86:62:e5:20:5b:ea:46:9a:cf:b3:95:
32:c6:0c:5b:f5:c2:8a:ff:e2:9e:f5:1b:96:64:79:3b:17:e9:
73:b2:7c:c6:5d:3d:c5:8a:6c:5a:b4:e1:16:d6:e6:27:25:bb:
14:b5:6f:01:fc:85:16:bf:ab:25:53:75:19:f7:55:06:2c:13:
22:9c:de:29:4e:a5:87:3d:62:93:c4:f0:0b:e1:87:b6:10:ca:
47:9a:af:d0:eb:db:86:51:88:9c:e5:ce:39:ac:e0:cb:0b:ca:
2e:92:4a:0d:5b:68:c5:1a:af:11:3a:b7:45:b4:2c:19:9a:65:
f0:aa:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:44 2026 by rpki-client