Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier: 1bOJhiIOfQdG1OANgJudyZkskWh0ZtNxtnWc+AGnZog=
Subject key identifier: 59:9B:39:FF:CF:00:75:CF:53:E7:7E:48:15:01:19:EC:73:79:0C:8C
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial: 019CAAFD8F0B9E783F74EBD15A1E7661B73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number: 13B3
Signing time: Sun 01 Mar 2026 20:01:09 +0000
Manifest this update: Sun 01 Mar 2026 20:01:09 +0000
Manifest next update: Mon 02 Mar 2026 20:01:09 +0000
Files and hashes: 1: VjVnMCIpJllowS-mUdPKmibH_s4.roa (hash: RkAjCgTxoEP9Ub/dSw/Wwxp7BKhfppLg+6NL3UVv1Zg=)
2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: ZxeldEGWo5bjMGwXqs6CNYJAacNDgBxpHzj7R7ReB18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8f:0b:9e:78:3f:74:eb:d1:5a:1e:76:61:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Validity
Not Before: Mar 1 20:01:09 2026 GMT
Not After : Mar 2 20:01:09 2026 GMT
Subject: CN=599b39ffcf0075cf53e77e48150119ec73790c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:0e:b9:10:d8:f0:23:69:c3:2e:c6:14:fd:
32:c9:dd:a2:e5:bc:8b:f4:67:2c:11:4f:c1:6e:4f:
2f:fe:39:42:82:56:91:b0:82:c3:f3:14:a3:48:e9:
08:b1:35:b4:a7:98:8e:14:d1:85:d7:c3:f1:29:fd:
78:c8:25:95:2f:55:19:66:4e:25:d3:7a:5f:50:86:
a5:cb:82:d0:85:02:e4:e5:5f:1c:6d:a4:1f:68:e0:
f2:f4:a3:d4:39:b3:5b:2f:c3:70:ea:d6:1c:eb:fd:
aa:85:d5:71:a4:92:ac:3f:0e:61:d3:a9:3e:35:ff:
53:d5:c2:51:85:af:bc:2a:65:f9:87:69:6a:86:08:
78:90:7c:fb:0e:cf:51:52:48:ed:a6:5a:df:49:a3:
df:fe:fa:99:34:61:a5:1a:62:b3:b6:8f:52:1d:08:
7c:66:95:f4:bf:22:8d:c2:5c:92:87:0a:50:c6:dc:
ae:37:c1:75:9e:76:9e:26:29:33:a2:55:6e:9c:be:
21:05:4f:31:d8:51:7c:cd:67:bf:66:f3:8f:20:8b:
f9:b6:ae:58:3a:e3:7b:60:df:50:bc:13:89:24:58:
a8:75:3c:d7:ef:a1:1b:67:15:c4:50:28:f9:ce:b9:
da:e6:9c:bd:95:66:7a:f2:80:6e:67:cd:69:b7:5a:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9B:39:FF:CF:00:75:CF:53:E7:7E:48:15:01:19:EC:73:79:0C:8C
X509v3 Authority Key Identifier:
keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c4:31:0e:b7:2d:2f:b2:c7:ba:0f:29:b6:da:ec:ce:ab:f7:
73:13:38:1e:31:a9:35:bb:15:87:77:bc:a9:64:67:a9:8e:a6:
a2:72:09:d9:4f:c6:2f:26:70:31:af:b8:88:38:cb:d3:ec:af:
30:2c:c6:76:3e:ef:13:a0:67:db:ab:3e:6d:d4:5d:88:5f:68:
3f:75:67:12:cf:a2:6f:bc:7c:35:f5:76:57:9a:01:88:de:65:
55:32:e8:10:3b:ab:0b:c5:93:11:36:2f:c1:1a:8b:57:c6:96:
c4:31:5a:64:43:53:98:ba:ad:69:b3:fb:2c:f6:cf:43:33:2b:
cd:50:80:67:fd:20:40:8a:11:c4:80:89:e6:ee:7d:ff:88:d7:
52:14:cf:68:38:f3:66:d4:53:ba:43:83:48:c8:e5:16:44:dd:
07:17:f0:b5:d1:c1:0b:fa:51:6f:04:18:e4:8b:86:2e:d1:1d:
62:d7:74:5d:05:7c:50:f5:86:9f:f2:4d:04:84:4a:b2:be:7a:
a7:c2:f0:08:61:be:9c:e6:68:a4:a5:de:d3:da:c8:58:7d:6b:
41:77:f9:8d:e4:ab:db:ea:17:2b:0b:de:04:d2:29:06:88:d9:
73:48:cc:34:37:6c:60:19:99:59:83:88:6e:e3:25:74:d2:b6:
d5:fb:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:51 2026 by rpki-client