Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: xOJA51AndF/RApdgLN7B6CCjvKAFPjosyxLzCpOJWIE=
Subject key identifier: E0:28:33:76:61:F2:4E:99:F6:55:5A:7F:76:0E:19:AE:3F:18:1B:3D
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 019CAC104932777922BADA5DA4E54C5F0EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 1257
Signing time: Mon 02 Mar 2026 01:01:14 +0000
Manifest this update: Mon 02 Mar 2026 01:01:14 +0000
Manifest next update: Tue 03 Mar 2026 01:01:14 +0000
Files and hashes: 1: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: 7qODDG3XsMJwXOOPi7H9qQxvZ9rE9I/ON0lyOiyXg5c=)
2: cKjV-S3vKRON_iQR1UcK7ixO478.roa (hash: shgcyfjQXynL0H/wKYb7lT258UeJcf6Tzc/Y0uyEvlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:49:32:77:79:22:ba:da:5d:a4:e5:4c:5f:0e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Mar 2 01:01:14 2026 GMT
Not After : Mar 3 01:01:14 2026 GMT
Subject: CN=e028337661f24e99f6555a7f760e19ae3f181b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:93:94:fe:0d:be:5c:0d:4c:98:4a:f8:8b:
de:69:27:0e:d1:2f:62:09:4e:14:47:1d:cd:5a:0f:
ce:6c:c9:3a:b4:40:fb:24:2f:52:c6:9f:3b:20:cf:
13:cc:b7:3f:b9:15:3f:85:45:c3:dd:c6:1c:51:b7:
f7:a1:12:3e:fc:71:52:27:8f:bd:de:3e:df:ac:e2:
70:e6:23:a7:2b:b4:70:e4:27:1e:31:78:a0:d2:6b:
1c:2c:cc:85:0f:ec:53:46:2d:68:7e:0f:12:78:04:
eb:93:5c:c5:28:c3:84:25:4e:00:2c:86:e8:b6:78:
6d:a9:39:89:2e:7a:74:e6:02:87:df:47:f3:fd:29:
3e:c6:71:39:d4:ec:f4:8d:d6:a1:f3:d6:9f:32:7a:
49:fc:c7:e2:c0:52:5f:7e:68:c2:e4:46:47:43:9d:
d7:9e:64:97:56:41:c5:7d:ce:a3:06:9b:a8:fa:8e:
dc:3a:4e:92:24:20:c0:e1:01:9e:69:6e:a9:13:83:
4f:d3:62:c8:ed:8e:98:2a:12:f6:dc:0a:dc:18:a6:
fe:79:91:33:32:4d:b0:e0:54:79:02:7a:81:01:7a:
55:f8:dd:a5:fd:7b:59:92:b3:3c:26:47:7e:53:30:
57:1f:ad:f4:1b:61:b2:81:4e:c7:06:23:46:f0:12:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:28:33:76:61:F2:4E:99:F6:55:5A:7F:76:0E:19:AE:3F:18:1B:3D
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:77:aa:ff:41:52:48:31:55:77:2f:1f:63:60:f2:5f:4e:c5:
c1:a9:a4:0b:55:66:51:25:4c:36:7f:5e:a8:a7:37:a6:39:43:
1e:15:2d:05:7d:09:21:a4:9d:66:4e:06:06:33:4e:07:b2:eb:
f8:e2:ce:fb:ba:0c:3f:f7:68:ce:76:c0:0b:81:1b:93:7c:6f:
2f:92:69:9e:7b:69:f9:e6:dc:79:8c:23:7f:dd:be:29:d5:1e:
41:bf:db:7f:16:26:32:ef:ed:1a:a0:92:77:eb:ca:f9:38:4a:
45:2d:57:1c:aa:17:ec:0b:72:c1:79:06:81:17:c3:15:90:a7:
e6:18:15:f8:de:01:02:08:9a:05:36:b1:a8:a1:c9:af:9f:8a:
61:a9:b6:7c:78:8a:94:fa:8b:32:79:f9:43:a7:bb:a8:3f:1d:
75:08:f1:a8:95:9e:32:e6:3f:55:32:4c:9c:0b:90:c7:77:8d:
5c:61:0e:61:d5:2a:6b:5b:79:7c:0d:64:d1:d5:5b:e1:2b:76:
9f:51:88:25:c5:96:94:90:f7:bd:90:ca:2c:c5:16:b5:0e:a9:
9b:7b:b9:47:00:e2:d4:16:7c:92:94:91:e9:80:15:5a:32:63:
b1:f9:46:c0:4f:59:76:ad:86:0a:88:d0:1b:10:92:be:d4:fd:
66:1e:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:43 2026 by rpki-client