Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
File: b4RsjA22XcdG72TP2Cu5wZTif3M.mft (raw, json)
Hash identifier: Vsyo4lOooUQrRNNywOIbQDTofBfawl92Uc/3/CByHek=
Subject key identifier: 39:94:6A:67:C7:98:9C:D9:81:B3:18:8B:08:84:10:93:70:73:EC:19
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial: 01A108B885A812D172F41A1FA5290CD755BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
Manifest number: 1958
Signing time: Sun 04 Oct 2026 21:01:12 +0000
Manifest this update: Sun 04 Oct 2026 21:01:12 +0000
Manifest next update: Mon 05 Oct 2026 21:01:12 +0000
Files and hashes: 1: NES_Di85pZi5ENKpgDz8EQo01i8.roa (hash: ohM4Ey0EufRoQF8r1FlwKpwiQqOYJ9oFC/DI4pckWkI=)
2: b4RsjA22XcdG72TP2Cu5wZTif3M.crl (hash: QKVkVZDyjpXMTgBRZfi7UpviT9cKocQoa+yYatGnsYI=)
3: g2H9xWj1H5AbwMNqiP9AW55oss8.roa (hash: 9T0jOBQOH9REt/W/f2e2pn8D6B5ZPkyd1uv8j2XXDoI=)
4: kQAqQkYprXGntUoiW7qN1WFeM6c.roa (hash: FS+U3EYjUSEwiuzNKrPworcyNLMeX4zA9XKfDuWL9sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:b8:85:a8:12:d1:72:f4:1a:1f:a5:29:0c:d7:55:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Validity
Not Before: Oct 4 21:01:12 2026 GMT
Not After : Oct 5 21:01:12 2026 GMT
Subject: CN=39946a67c7989cd981b3188b088410937073ec19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:1f:87:48:fb:0f:8d:b0:42:7e:7e:cb:b4:
52:11:43:51:93:d6:ec:24:fe:fc:34:34:22:11:a6:
20:aa:b5:a0:9e:c4:f0:f1:d6:a1:3a:9a:4b:92:db:
da:bc:97:0f:1a:3e:dc:d7:fb:77:c4:c9:04:06:91:
51:5c:6e:e7:56:ff:24:07:09:0e:35:61:ae:4c:cb:
5b:df:af:fa:9d:b1:31:8a:1f:86:8e:b6:64:0d:ee:
2d:87:51:f6:11:c9:6c:11:95:4c:48:58:b4:fe:ea:
20:b1:fd:77:5d:36:87:c5:62:5f:63:8f:95:87:a3:
dd:5a:4c:9e:36:68:70:38:d8:5f:80:92:04:14:0c:
a0:6c:65:e6:b6:03:22:e3:13:d5:f8:35:c9:d6:01:
6f:d2:34:88:4f:aa:6a:d2:72:d8:9c:20:ac:88:f1:
b3:c6:91:a3:d3:a7:3a:25:09:93:18:b7:87:e5:e1:
8e:88:c8:0a:21:5d:13:b6:e9:5b:82:f0:6d:66:61:
05:67:40:98:48:cc:8d:1b:0e:b3:15:80:a8:3a:17:
a8:9d:fb:0e:d3:7a:f6:c2:25:25:25:3f:89:29:ce:
13:25:15:c5:eb:c2:e6:d9:37:7e:12:06:47:d6:fe:
ec:9b:e7:5f:2a:7b:62:1b:06:8e:3e:91:8e:18:50:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:94:6A:67:C7:98:9C:D9:81:B3:18:8B:08:84:10:93:70:73:EC:19
X509v3 Authority Key Identifier:
keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a0:aa:f9:bb:13:d1:01:da:97:0f:99:1e:b3:5b:9c:28:a0:
94:79:67:0c:e0:0a:6d:8a:73:04:e0:fe:30:a7:bc:a5:5a:11:
c3:f0:da:c3:65:4e:65:a3:fa:92:81:7e:a6:04:40:ac:2d:5a:
f6:dd:ed:fe:db:55:50:64:c7:b0:e4:3f:43:f3:7e:d4:7d:d2:
e2:f4:72:14:1d:41:9b:67:6b:65:17:3b:01:51:c5:74:a7:eb:
d3:96:9a:e4:f0:85:3b:a3:92:97:90:c9:e2:ea:62:81:04:fb:
3f:1a:00:5b:fe:0d:62:86:1d:0f:df:6a:25:f1:3e:87:ee:10:
e7:36:87:dd:c8:50:2f:ef:86:97:b0:01:6b:85:19:3b:6d:81:
52:97:25:72:cf:31:ed:bf:01:42:2b:11:a9:36:30:ce:b9:f5:
0a:29:69:89:c7:4a:db:e3:9c:de:94:f9:04:77:85:47:d3:23:
8f:d8:79:8f:50:5f:1e:2c:be:86:84:f8:8a:08:1f:7e:5d:d4:
f1:2d:76:bb:8c:25:e8:71:7e:d8:8e:41:41:4f:cc:02:51:18:
73:48:22:28:ed:a1:dd:e5:41:79:d2:e1:85:79:ee:f4:50:da:
0e:cd:38:4b:89:e0:6e:4b:99:7e:7c:40:65:a5:a7:5b:2a:54:
bc:78:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:33:25 2026 by rpki-client