Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: bpAxngvYg4KOjJHBd7p1Ai25hIWSPE0mv70F5LlisRE=
Subject key identifier: 97:D3:73:A3:40:74:3B:73:AF:4A:C2:8D:E2:54:DB:51:33:3E:B2:62
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 019D9BBE5DC932AFF8CEE0F862251095D387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 14:00:37 +0000
Manifest this update: Fri 17 Apr 2026 14:00:37 +0000
Manifest next update: Sat 18 Apr 2026 14:00:37 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: a1XhdKvL6SXDeD0Ke93uCt0PqWgZc5WVmemlBWVZJZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:5d:c9:32:af:f8:ce:e0:f8:62:25:10:95:d3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Apr 17 14:00:37 2026 GMT
Not After : Apr 18 14:00:37 2026 GMT
Subject: CN=97d373a340743b73af4ac28de254db51333eb262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:50:9a:25:b4:83:7d:02:7a:3e:55:06:be:
a6:7a:93:73:43:98:9a:64:07:7e:0f:3f:ac:f3:3d:
aa:44:fe:d1:f4:6e:9c:72:95:82:99:3f:37:1f:15:
97:40:43:b6:26:a0:a5:1a:7b:db:7e:9b:f5:b7:fc:
19:64:00:7e:55:19:03:21:a7:6c:54:8f:96:22:ef:
85:8b:1e:f4:32:bb:c9:b7:ef:9b:7e:6b:21:54:b8:
aa:f9:50:47:a6:4b:5c:ee:08:d7:b0:e6:b8:b9:68:
87:fc:01:b5:70:ef:9c:f2:77:b7:29:ee:f7:55:6f:
48:55:1e:34:2a:c4:47:da:18:8b:a3:10:45:25:9c:
19:67:05:10:35:8a:81:a5:f9:32:79:68:32:8c:fc:
87:67:4b:6e:e1:09:57:6c:43:53:87:0d:e5:e8:86:
48:6e:b5:18:22:5b:ca:c5:52:60:d4:8a:a4:5e:fe:
36:aa:1c:23:8b:e8:cf:b9:d0:8a:92:8d:46:f5:56:
fd:4d:e3:59:fc:78:04:8e:ee:12:51:36:fc:09:ff:
13:73:88:9e:53:c9:7f:5b:d0:a6:7b:d1:5e:82:ce:
3a:d9:64:7d:89:26:0b:c6:89:a9:08:b6:ba:5d:50:
fb:b6:5a:d7:54:89:f6:a8:a4:da:4d:ff:93:71:09:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:73:A3:40:74:3B:73:AF:4A:C2:8D:E2:54:DB:51:33:3E:B2:62
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:59:65:6b:9e:3c:a5:2b:55:7e:f4:7e:b0:29:83:1e:e8:4b:
31:3b:e4:b7:de:d5:b8:4c:fe:e4:a2:7c:26:51:a4:d6:2c:bd:
47:d8:ee:54:92:8d:0c:89:74:9c:3f:58:10:34:b0:61:4d:f7:
73:d5:da:1f:af:2b:82:36:73:bb:4f:7c:67:b0:f6:06:ec:af:
83:4d:79:76:02:09:10:e1:16:f6:46:5c:b4:9e:47:d4:98:f9:
e7:8b:52:20:f0:3b:e6:96:dc:82:d8:a1:79:e4:f8:6d:06:fb:
cf:cb:f8:2f:38:9b:1f:b6:f3:b0:f5:84:b4:74:a4:a5:3b:1d:
58:b8:69:43:39:75:56:c6:e6:4c:47:17:76:83:58:39:3c:b8:
5e:ff:e9:5e:fb:f8:d0:7a:93:6e:ec:e3:53:a9:32:cb:fa:13:
bd:14:8e:b7:a1:d1:88:4f:d1:50:b7:a6:c9:d9:d7:81:4d:76:
57:f3:6c:5c:47:21:a9:6f:e9:22:8c:61:58:c3:d5:37:2d:1f:
46:c9:c1:ab:6d:ae:f2:92:05:22:8b:0b:d3:f2:b8:f4:cd:e4:
fd:f2:2a:b0:54:4f:67:f6:58:b3:c8:a2:7a:29:fa:fe:ec:81:
b2:bc:54:48:74:9b:5f:d2:3c:ee:ae:b9:dd:97:f2:d0:e7:2c:
49:54:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:46 2026 by rpki-client