Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: bk5/PhihO2zF+X7NbKlLYPVqc9gaDflxuLfMigEuTR4=
Subject key identifier: 00:00:47:E0:1A:16:05:D0:34:61:0B:B2:7B:24:8F:C1:37:CA:A3:A6
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 019D99991978B7D0D3916FB4CF6E0748C0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 12D2
Signing time: Fri 17 Apr 2026 04:00:40 +0000
Manifest this update: Fri 17 Apr 2026 04:00:40 +0000
Manifest next update: Sat 18 Apr 2026 04:00:40 +0000
Files and hashes: 1: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: bV3E/QQ7jl5lI+mNNYTmS/0MKLwG9Cl3vg4/JrFpL3s=)
2: cKjV-S3vKRON_iQR1UcK7ixO478.roa (hash: shgcyfjQXynL0H/wKYb7lT258UeJcf6Tzc/Y0uyEvlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:19:78:b7:d0:d3:91:6f:b4:cf:6e:07:48:c0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Apr 17 04:00:40 2026 GMT
Not After : Apr 18 04:00:40 2026 GMT
Subject: CN=000047e01a1605d034610bb27b248fc137caa3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:c8:b1:91:8c:ab:62:eb:1e:6b:18:9d:d4:
2d:fd:fe:3c:21:1b:67:5c:69:09:f5:4b:d4:6c:9d:
41:37:64:a1:68:d0:05:e2:a9:e1:bc:3a:75:f4:4c:
c1:0d:f6:99:13:dc:9f:9e:fc:e9:2d:9c:0b:27:7e:
44:4c:be:b6:a0:fc:b8:5b:f1:e1:48:63:21:5d:16:
70:1a:dc:15:6c:71:b9:f1:b0:11:b2:aa:e3:db:55:
72:c3:95:84:aa:77:a4:1f:55:53:c8:33:d1:21:e4:
97:60:3c:e9:95:08:67:f4:7f:22:dd:41:9e:1c:53:
5f:8b:4d:a9:2b:75:3a:17:45:95:07:a6:72:84:d1:
de:9e:25:2a:03:09:12:61:c7:8c:a2:87:00:7b:de:
89:4f:9d:5b:05:de:af:41:e9:21:89:2f:89:2d:b9:
6a:b6:d9:ee:13:0a:81:08:cd:a8:ff:8d:2e:9f:35:
a3:72:f6:ce:a7:6f:62:bd:0f:b7:29:e2:09:89:9f:
cd:56:97:f4:d4:7b:09:8a:82:4e:13:95:ed:6b:db:
42:13:56:ff:c9:e0:33:e7:3a:2e:89:9e:d3:2a:2f:
b6:f4:76:08:7b:0b:bf:ce:b5:10:0a:04:cb:33:d4:
d4:58:12:76:00:d9:b7:4f:49:b4:45:3d:41:7d:3e:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:00:47:E0:1A:16:05:D0:34:61:0B:B2:7B:24:8F:C1:37:CA:A3:A6
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:58:cc:34:f9:fd:4d:58:28:85:1f:39:9d:51:1f:a1:2b:0f:
c1:13:10:90:81:2c:45:be:f2:aa:3d:d1:1a:22:48:29:f8:47:
1b:c3:58:77:87:fe:98:79:3c:3e:ba:05:7f:9f:28:43:de:0a:
89:3b:2f:29:b0:28:22:e0:e7:20:6a:b3:1d:a7:97:9f:98:19:
34:46:b2:12:f7:7c:f3:ca:98:3f:15:1b:05:77:ad:f2:93:e5:
5b:87:fd:15:63:79:41:a8:7b:af:54:0c:7c:9b:e8:90:c3:09:
7b:ad:58:25:cd:9d:c1:97:5b:a6:33:26:e4:46:35:94:16:22:
dd:fe:28:7d:49:0e:f7:1c:68:a4:0b:4a:e5:f8:da:e3:4f:10:
5e:9d:68:16:bb:94:38:ab:3b:7e:44:b0:4b:cd:c7:23:28:94:
03:c3:f4:11:04:da:0a:8f:d6:95:8c:90:6b:5c:10:76:d0:57:
f4:90:d8:3f:79:2b:fe:af:4d:56:99:16:bb:86:b0:a4:ea:67:
a0:32:b3:d3:76:60:a4:ca:55:6b:6b:9b:a6:9c:05:12:ca:1c:
14:f7:b5:b1:92:44:52:6b:86:fd:f0:57:3c:65:d5:05:af:2e:
75:20:26:6b:10:82:df:0d:00:d5:a7:bf:06:ef:57:cb:6d:c7:
bd:4e:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:00 2026 by rpki-client