Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier: WH7Ie5CrqqaRSeKmVXlv545kDs62JtGyoePHei6s0h4=
Subject key identifier: 01:61:61:F8:D6:07:A1:0A:FB:26:12:7F:09:E7:17:E2:D0:5C:81:36
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial: 019DA4F8E4AD0C012E74BE2C30EBBE8BC982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 09:01:07 +0000
Manifest this update: Sun 19 Apr 2026 09:01:07 +0000
Manifest next update: Mon 20 Apr 2026 09:01:07 +0000
Files and hashes: 1: 91k_fzpu7lp58TCmwUevrrQ5DoY.roa (hash: yHiArpJVE3/8ANiCK9PBsJFPh8JxnEYzY6bUgQPEitY=)
2: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: bjue//SD3KAV0HcEPTZucwK+gMenrjvrroEvAezECvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:e4:ad:0c:01:2e:74:be:2c:30:eb:be:8b:c9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Validity
Not Before: Apr 19 09:01:07 2026 GMT
Not After : Apr 20 09:01:07 2026 GMT
Subject: CN=016161f8d607a10afb26127f09e717e2d05c8136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:ba:11:c0:bb:f9:b5:aa:45:e5:59:10:9b:
a3:d7:ef:35:c4:d0:66:ff:c8:29:90:2e:f1:f3:53:
ae:c1:40:f6:84:79:fe:50:23:b6:d6:d4:b6:f6:02:
d9:4b:63:6a:44:38:b0:e1:bf:6d:c3:c6:5c:b0:71:
63:07:08:71:60:60:a7:a2:0f:11:f0:83:5f:01:7d:
01:a9:08:2d:87:10:1b:51:65:d1:94:7e:69:41:af:
48:8c:52:4c:7b:8d:59:d4:95:5a:4c:6c:1c:9e:15:
91:e9:2a:b7:d0:10:15:5f:a0:f7:10:63:e5:43:7e:
4f:4d:f4:d2:f6:91:83:9b:e8:62:31:2f:47:aa:bf:
15:7e:10:88:6c:fc:ab:46:76:ea:aa:94:cc:30:68:
dc:28:7e:25:75:34:a7:54:fe:15:46:6b:8a:c1:74:
62:7c:78:9d:de:b0:25:2b:f5:86:4f:17:55:f3:02:
1a:9a:d5:95:53:9c:76:58:db:cd:73:82:a6:a3:bf:
2a:ea:da:a7:02:d8:14:9f:ce:4c:9a:db:e0:eb:83:
86:51:5e:43:7b:1c:25:f6:3f:63:26:c6:b7:60:0d:
0e:2f:cd:b3:17:a6:da:d5:8b:30:2c:c1:7d:22:dc:
35:7d:81:16:27:e3:84:b0:5d:f6:2b:40:43:cc:68:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:61:F8:D6:07:A1:0A:FB:26:12:7F:09:E7:17:E2:D0:5C:81:36
X509v3 Authority Key Identifier:
keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:49:4c:fb:8f:32:db:56:01:12:67:ef:36:35:4a:b6:cf:36:
8c:41:18:10:e1:e6:be:aa:d3:85:98:23:a1:43:b2:de:4d:1b:
1f:75:ec:9d:cc:32:0c:cc:60:9b:e4:ea:2f:0c:2c:b2:77:b7:
28:ba:71:d6:7e:5b:e7:a2:bf:7e:98:5c:e1:f9:f3:56:2e:6d:
d5:97:0b:03:64:28:0b:05:f6:b3:a1:79:5b:e3:18:ce:ae:2a:
e4:e4:60:d2:be:fd:02:6f:d4:bc:a0:e3:56:ed:77:53:8e:14:
3f:f0:f1:e8:ef:7d:5d:a5:8a:06:61:2f:89:02:13:bf:6a:45:
d1:3c:35:9e:d3:fd:76:1a:af:04:c7:56:b5:50:8d:76:a4:5a:
09:e3:6d:c3:27:42:12:5a:53:04:e0:dc:18:75:d5:c1:0f:69:
f3:5a:86:97:2a:36:a6:6b:7c:b2:67:2b:9c:e9:4d:31:49:11:
1c:45:bb:b6:41:4e:9e:29:90:ee:00:5a:64:9a:21:e0:78:4b:
ab:5a:b3:eb:5d:f1:7d:91:05:4b:e7:be:6f:da:f4:c0:90:b7:
e1:dd:28:68:7a:c7:27:92:09:55:40:c3:0f:98:11:03:6d:f1:
14:69:ce:ac:55:ea:8e:1c:ac:33:b7:5b:75:d9:fb:2f:7c:a6:
7b:16:c1:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+OStDAEudL4sMOu+i8mCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZWUyN2Q1OTRkZGIyZjA5YzhjYjU5MjQ1ODAxYzlhZjVh
MzRjMjIwHhcNMjYwNDE5MDkwMTA3WhcNMjYwNDIwMDkwMTA3WjAzMTEwLwYDVQQD
EygwMTYxNjFmOGQ2MDdhMTBhZmIyNjEyN2YwOWU3MTdlMmQwNWM4MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJe6EcC7+bWqReVZEJuj1+81xNBm
/8gpkC7x81OuwUD2hHn+UCO21tS29gLZS2NqRDiw4b9tw8ZcsHFjBwhxYGCnog8R
8INfAX0BqQgthxAbUWXRlH5pQa9IjFJMe41Z1JVaTGwcnhWR6Sq30BAVX6D3EGPl
Q35PTfTS9pGDm+hiMS9Hqr8VfhCIbPyrRnbqqpTMMGjcKH4ldTSnVP4VRmuKwXRi
fHid3rAlK/WGTxdV8wIamtWVU5x2WNvNc4Kmo78q6tqnAtgUn85Mmtvg64OGUV5D
exwl9j9jJsa3YA0OL82zF6ba1YswLMF9Itw1fYEWJ+OEsF32K0BDzGiyOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFhYfjWB6EK+yYSfwnnF+LQXIE2MB8GA1UdIwQY
MBaAFG/uJ9WU3bLwnIy1kkWAHJr1o0wiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDct
ODc1NGExYzkwNjBiLzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi84OTZhNDgtZGNhNC00ZDIzLThmMDctODc1NGExYzkwNjBi
LzEvYi00bjFaVGRzdkNjakxXU1JZQWNtdldqVENJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0lM+48y
21YBEmfvNjVKts82jEEYEOHmvqrThZgjoUOy3k0bH3XsncwyDMxgm+TqLwwssne3
KLpx1n5b56K/fphc4fnzVi5t1ZcLA2QoCwX2s6F5W+MYzq4q5ORg0r79Am/UvKDj
Vu13U44UP/Dx6O99XaWKBmEviQITv2pF0Tw1ntP9dhqvBMdWtVCNdqRaCeNtwydC
ElpTBODcGHXVwQ9p81qGlyo2pmt8smcrnOlNMUkRHEW7tkFOnimQ7gBaZJoh4HhL
q1qz613xfZEFS+e+b9r0wJC34d0oaHrHJ5IJVUDDD5gRA23xFGnOrFXqjhysM7db
ddn7L3ymexbB2A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:19:22 2026 by rpki-client