Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
File: b4RsjA22XcdG72TP2Cu5wZTif3M.mft (raw, json)
Hash identifier: C+dC1LAskkflfIldlUnIWd/ZAXp3SziXvgvwzycBJfU=
Subject key identifier: 1E:8E:C6:79:59:71:3C:70:33:4D:CE:01:A7:E7:C2:FC:95:A3:7F:8A
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial: 019CAC7E65C24148EF7CB9953E4E5835DC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
Manifest number: 1716
Signing time: Mon 02 Mar 2026 03:01:30 +0000
Manifest this update: Mon 02 Mar 2026 03:01:30 +0000
Manifest next update: Tue 03 Mar 2026 03:01:30 +0000
Files and hashes: 1: NES_Di85pZi5ENKpgDz8EQo01i8.roa (hash: ohM4Ey0EufRoQF8r1FlwKpwiQqOYJ9oFC/DI4pckWkI=)
2: b4RsjA22XcdG72TP2Cu5wZTif3M.crl (hash: Pj/n1JDWgk8/fo/PBxYcdBCksRFRlbibThXBh855CVo=)
3: g2H9xWj1H5AbwMNqiP9AW55oss8.roa (hash: 9T0jOBQOH9REt/W/f2e2pn8D6B5ZPkyd1uv8j2XXDoI=)
4: kQAqQkYprXGntUoiW7qN1WFeM6c.roa (hash: FS+U3EYjUSEwiuzNKrPworcyNLMeX4zA9XKfDuWL9sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:65:c2:41:48:ef:7c:b9:95:3e:4e:58:35:dc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Validity
Not Before: Mar 2 03:01:30 2026 GMT
Not After : Mar 3 03:01:30 2026 GMT
Subject: CN=1e8ec67959713c70334dce01a7e7c2fc95a37f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:ee:45:b5:7c:f5:ca:9e:aa:4c:74:77:d3:
67:fc:9e:30:b8:76:e7:8b:cb:e5:16:22:02:6e:2a:
4f:76:81:40:27:63:c6:fd:98:4e:34:c7:64:59:7f:
8f:96:29:51:af:54:02:c9:ba:2e:a4:7f:5d:40:10:
8f:6d:f8:cc:80:52:1f:da:f3:95:ca:4d:9e:75:5f:
f4:61:9a:b0:94:3b:c6:12:3e:0a:3c:07:ca:cc:e9:
2b:d7:22:8c:e6:2f:1a:21:4f:96:a5:7a:92:c5:c7:
da:b1:92:47:33:59:6b:2c:65:7b:2f:6b:c0:a9:e5:
2d:83:af:4b:6e:df:8d:11:2c:7e:b7:a9:f8:66:98:
fa:21:f7:0b:0e:b3:f1:24:2d:5d:f5:41:f5:59:82:
cc:c3:31:5d:d0:12:0c:27:15:98:66:09:ae:52:2d:
85:22:c7:b7:51:50:1f:f5:13:49:18:34:d3:cb:6d:
ee:ed:69:88:e1:12:71:85:dc:7a:45:2a:9e:0b:ab:
63:11:0d:5e:b8:4c:3a:51:f2:56:62:bd:ec:ae:5e:
cb:a1:70:6e:0d:5b:71:55:97:0c:68:68:c9:54:0e:
bd:e3:6c:06:56:63:9e:07:91:dd:32:6e:d3:c0:c3:
72:0c:4f:cc:31:40:5b:a2:59:90:cf:60:97:8a:92:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:C6:79:59:71:3C:70:33:4D:CE:01:A7:E7:C2:FC:95:A3:7F:8A
X509v3 Authority Key Identifier:
keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:30:48:9a:bd:28:7f:b7:7f:a2:0d:d5:67:40:42:01:4f:d3:
21:12:a3:8d:9a:d1:ba:7a:2b:86:03:28:2d:a2:5f:16:bc:b5:
68:1e:36:5f:1c:0b:c9:cb:e3:df:2b:8a:29:3a:06:49:a0:9c:
68:c1:0e:ec:a4:e4:ad:92:91:24:79:c5:23:ca:7c:4e:69:ef:
79:26:92:e1:0b:d2:51:75:63:f1:b3:51:58:8f:4c:ac:91:48:
08:7e:f0:a4:d2:d3:93:6b:f4:1b:4c:b1:95:66:77:c9:c2:84:
a6:22:4d:b4:72:f1:d4:56:bc:28:c7:bf:07:9a:a0:a3:b9:50:
29:c6:51:2e:d9:8a:86:56:c8:d1:d0:e4:36:22:bd:78:79:4f:
98:7d:75:26:bf:4e:8e:f4:e1:50:1f:6a:55:64:ea:96:77:52:
2a:8f:d2:d7:e4:3a:26:bf:b6:8c:20:e8:0d:57:15:f5:7a:f6:
b2:b4:59:0a:ec:c9:13:1b:0a:a5:c1:32:fa:28:06:7e:24:16:
5a:b9:4c:ff:5d:c5:ee:fa:e8:a2:ee:2b:29:cf:a9:cd:1e:e6:
b8:20:bc:1d:63:8c:3e:56:85:80:95:56:35:a3:f9:1b:2e:96:
4d:ec:22:51:e1:74:22:82:aa:33:b3:98:bd:5e:bf:8a:d7:f7:
62:92:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:34 2026 by rpki-client