Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier: znzM29jSv8p2sofLSFOuf6ahdNamDvPnjDpeqmE7+sc=
Subject key identifier: 73:20:60:69:51:5D:38:5A:3B:56:BF:E3:44:7A:09:EC:DA:1C:13:B5
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial: 019CABD9B44217E0C16DF44B17AB67F89355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:37 +0000
Manifest this update: Mon 02 Mar 2026 00:01:37 +0000
Manifest next update: Tue 03 Mar 2026 00:01:37 +0000
Files and hashes: 1: 91k_fzpu7lp58TCmwUevrrQ5DoY.roa (hash: yHiArpJVE3/8ANiCK9PBsJFPh8JxnEYzY6bUgQPEitY=)
2: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: 7QqhaYrKCWjgVeG3yLiNGuWrBaIgQxNd7ipL67MZ7w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b4:42:17:e0:c1:6d:f4:4b:17:ab:67:f8:93:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Validity
Not Before: Mar 2 00:01:37 2026 GMT
Not After : Mar 3 00:01:37 2026 GMT
Subject: CN=73206069515d385a3b56bfe3447a09ecda1c13b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:8b:02:5a:46:83:05:2b:20:b7:a2:c1:79:
ee:cb:14:d6:99:4a:85:fa:17:8e:77:e8:12:e1:b9:
9a:ef:f9:7a:6f:4c:7a:7a:ad:a0:c2:b4:aa:1c:6a:
3d:d7:07:51:3b:9a:f7:a2:b8:d6:20:bc:64:32:4e:
94:0d:d2:81:ec:34:3d:ed:c8:ea:e1:a5:7c:44:21:
74:8f:04:24:2b:84:c3:a5:b5:31:e3:47:93:51:e9:
53:6e:3e:02:44:66:bd:33:64:d3:10:63:62:48:af:
40:e1:f7:ed:b4:74:95:53:f5:37:82:38:6e:ca:8e:
72:0c:59:10:bf:fb:6a:bc:86:23:09:1c:50:58:19:
de:c0:50:4d:83:05:ec:c2:28:66:ac:d1:52:75:5a:
66:6d:96:92:5e:dd:7f:6b:89:99:e2:d8:78:6e:b8:
8d:2f:49:0f:06:a4:c1:16:1d:e9:97:59:4b:6b:e9:
b3:77:3d:38:f5:98:0b:69:e1:ac:01:b0:90:f1:e6:
ce:be:11:ba:5b:44:33:22:bc:b3:60:61:ff:05:e9:
05:20:ea:a8:be:df:5d:f9:73:85:95:49:4d:a3:66:
3b:69:33:46:25:df:71:71:97:28:f1:ee:b0:f7:a3:
98:0e:e3:f0:8d:19:e4:98:0e:3c:b1:06:61:64:df:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:20:60:69:51:5D:38:5A:3B:56:BF:E3:44:7A:09:EC:DA:1C:13:B5
X509v3 Authority Key Identifier:
keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f0:c8:cf:a2:4b:e3:08:27:6a:ed:ec:18:b5:01:e4:fa:7b:
e1:ce:c6:22:4c:bc:f4:2f:0f:28:70:10:17:d5:19:28:41:4a:
ad:e8:77:9b:b5:42:f5:77:95:c8:f5:06:64:34:8d:fd:49:bd:
99:b4:8b:84:1e:f0:ce:56:53:4f:23:73:3a:2f:f5:ee:6b:1e:
c3:7e:03:d3:53:db:4c:07:b1:68:1b:14:a2:02:5f:50:13:2f:
d8:8c:82:bb:5c:83:14:04:18:2b:c6:fa:34:77:10:e0:21:c9:
fc:69:67:cd:9f:21:79:d6:77:d5:f4:66:2c:4b:43:8f:bd:cb:
bf:0f:73:9c:b5:68:11:36:57:50:b7:c5:f2:0c:2b:15:ba:30:
ae:6a:3a:bc:0b:0d:57:a2:90:26:b6:46:f2:e4:b6:57:af:ad:
2a:c9:39:a8:d5:79:fd:c7:da:46:8c:21:b9:bf:6f:e1:4c:62:
3a:f9:44:73:a2:cb:7a:5e:fd:08:fd:7b:d5:74:0d:08:3a:bc:
4a:77:49:4f:7e:c4:41:5e:51:5c:2f:cd:d3:18:d1:ae:40:95:
36:1b:8e:a2:c7:fa:de:30:46:5d:db:98:70:24:89:38:c5:f8:
74:26:0e:7e:8a:38:df:48:67:cc:1c:35:14:5e:86:b6:04:43:
75:97:80:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2bRCF+DBbfRLF6tn+JNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZWUyN2Q1OTRkZGIyZjA5YzhjYjU5MjQ1ODAxYzlhZjVh
MzRjMjIwHhcNMjYwMzAyMDAwMTM3WhcNMjYwMzAzMDAwMTM3WjAzMTEwLwYDVQQD
Eyg3MzIwNjA2OTUxNWQzODVhM2I1NmJmZTM0NDdhMDllY2RhMWMxM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMuLAlpGgwUrILeiwXnuyxTWmUqF
+heOd+gS4bma7/l6b0x6eq2gwrSqHGo91wdRO5r3orjWILxkMk6UDdKB7DQ97cjq
4aV8RCF0jwQkK4TDpbUx40eTUelTbj4CRGa9M2TTEGNiSK9A4ffttHSVU/U3gjhu
yo5yDFkQv/tqvIYjCRxQWBnewFBNgwXswihmrNFSdVpmbZaSXt1/a4mZ4th4briN
L0kPBqTBFh3pl1lLa+mzdz049ZgLaeGsAbCQ8ebOvhG6W0QzIryzYGH/BekFIOqo
vt9d+XOFlUlNo2Y7aTNGJd9xcZco8e6w96OYDuPwjRnkmA48sQZhZN//MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMgYGlRXThaO1a/40R6CezaHBO1MB8GA1UdIwQY
MBaAFG/uJ9WU3bLwnIy1kkWAHJr1o0wiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDct
ODc1NGExYzkwNjBiLzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDctODc1NGExYzkwNjBi
LzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfDIz6JL
4wgnau3sGLUB5Pp74c7GIky89C8PKHAQF9UZKEFKreh3m7VC9XeVyPUGZDSN/Um9
mbSLhB7wzlZTTyNzOi/17msew34D01PbTAexaBsUogJfUBMv2IyCu1yDFAQYK8b6
NHcQ4CHJ/GlnzZ8hedZ31fRmLEtDj73Lvw9znLVoETZXULfF8gwrFbowrmo6vAsN
V6KQJrZG8uS2V6+tKsk5qNV5/cfaRowhub9v4UxiOvlEc6LLel79CP171XQNCDq8
SndJT37EQV5RXC/N0xjRrkCVNhuOosf63jBGXduYcCSJOMX4dCYOfoo430hnzBw1
FF6GtgRDdZeAjg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:40 2026 by rpki-client