Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: SPSOi9cSoVfLp6Kic1AirrrwyyHY0vj66UQArV/KnDs=
Subject key identifier: 1F:03:C1:DB:A3:25:C9:04:A6:45:D1:29:DE:71:9A:E3:C8:2B:6B:4B
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019CAAC717D34C675D7FDBA715BCDE105710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:40 +0000
Manifest this update: Sun 01 Mar 2026 19:01:40 +0000
Manifest next update: Mon 02 Mar 2026 19:01:40 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: dEkFokmiCfpHX0gkyjHEx18EoAvx6cEJObboPtRw2Oo=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:17:d3:4c:67:5d:7f:db:a7:15:bc:de:10:57:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Mar 1 19:01:40 2026 GMT
Not After : Mar 2 19:01:40 2026 GMT
Subject: CN=1f03c1dba325c904a645d129de719ae3c82b6b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:e3:68:79:77:54:b3:48:f3:45:35:f8:41:
bf:4d:86:67:a0:41:c6:98:62:97:96:e6:d4:ab:cb:
7e:85:1d:98:d7:df:1d:f9:98:d6:50:7c:df:92:ee:
1d:09:8a:44:e1:28:94:0a:5d:9e:c2:f7:6f:c7:a7:
3b:50:64:5d:b8:1f:9d:c2:1c:74:db:e8:01:3b:7e:
ca:76:a7:5a:89:8c:06:5b:98:12:67:66:34:0b:a6:
cb:1b:c7:fc:75:5f:ca:db:01:f0:41:23:e5:39:18:
5e:2c:4c:08:77:04:f3:55:4a:73:cd:66:2d:80:83:
52:f7:18:b0:f3:85:6b:d1:7e:0f:20:a5:e2:aa:41:
16:01:95:c1:2d:b5:a4:97:94:22:1d:5f:93:a6:8b:
a6:23:7b:ff:92:1f:81:c2:65:6a:0d:d6:f6:bd:6f:
8e:ac:8f:15:19:d3:98:c6:5a:60:16:5a:fa:44:1e:
72:4e:8a:85:32:dd:1d:39:47:c2:9f:41:56:26:ce:
9e:fe:04:02:c6:ec:9d:03:13:c3:63:92:2e:9c:09:
4d:ff:5d:d4:f9:b7:c3:e3:41:ab:e0:40:77:bd:34:
4a:a9:91:a1:40:fb:fe:45:bd:47:b5:51:f3:f6:7a:
57:a4:1f:0b:fd:0b:83:7c:1c:83:e0:8a:68:75:f6:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:03:C1:DB:A3:25:C9:04:A6:45:D1:29:DE:71:9A:E3:C8:2B:6B:4B
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0a:15:13:37:c1:5c:91:a1:82:fa:d6:0b:cf:1d:cb:17:84:
c9:44:be:39:63:9e:45:f7:ff:20:71:10:97:80:20:25:1f:e7:
18:16:b7:f9:bf:fc:29:31:f4:0d:46:dc:29:ff:e8:d0:fb:b8:
6f:39:08:6c:57:a3:9a:86:b3:e9:91:82:fb:bc:50:4a:95:a7:
be:5c:c4:82:b3:7a:4e:14:14:e8:2c:7a:dd:90:ac:3b:2c:a0:
ed:20:a5:8c:7b:07:ad:27:de:4f:5b:80:e8:7b:51:d2:06:da:
7b:a7:8e:83:1f:31:23:db:8a:51:17:e0:86:b5:57:8c:70:79:
b1:75:42:16:61:5d:29:2a:5f:15:3d:bb:a8:9a:9f:d2:9c:2c:
96:a9:0b:7e:6f:85:be:82:f0:10:fd:e3:18:fb:74:b0:e8:86:
2c:89:96:c4:91:ef:51:ff:ec:23:3e:89:09:c4:aa:73:46:b0:
4d:3c:77:35:15:72:b7:f2:f2:8e:ee:f0:6a:95:e6:4c:a3:52:
5d:b3:d3:ac:52:4a:79:bf:09:ac:e4:f2:e0:86:0c:56:87:58:
37:13:45:3d:dd:03:55:eb:40:7d:d4:fd:3e:5d:8e:13:c4:ef:
a3:de:fa:de:76:5d:be:a8:f6:3b:5f:ac:0d:eb:2a:39:cf:a6:
0f:15:d6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:45 2026 by rpki-client