Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: cBZX70J3MbhYT+i2Dm+nOu2ynLkj78D1veGXd9oQRkc=
Subject key identifier: 81:24:1D:27:5E:A2:5C:26:22:01:AD:44:E6:90:E0:1C:AB:A9:30:F5
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 01A1DF4C0778BA10382FCA87728007AEBF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 13:01:04 +0000
Manifest this update: Sun 15 Nov 2026 13:01:04 +0000
Manifest next update: Mon 16 Nov 2026 13:01:04 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: CkIap6UHu2FU81hkuBoFqLMR5MPW1EIlA5UpU9/vuQ0=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:07:78:ba:10:38:2f:ca:87:72:80:07:ae:bf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Nov 15 13:01:04 2026 GMT
Not After : Nov 16 13:01:04 2026 GMT
Subject: CN=81241d275ea25c262201ad44e690e01caba930f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:2b:5f:87:9a:d7:40:ba:61:45:06:da:0d:
1a:ad:79:4f:18:a4:db:68:84:b3:db:28:48:65:b7:
38:2c:bb:bb:62:46:3b:11:d0:bc:fd:9d:74:d0:1e:
9d:01:3a:37:63:c1:63:91:25:97:5c:01:ca:c3:03:
0a:f1:1a:ea:84:18:4a:ea:8e:b4:f7:be:e8:61:b1:
23:14:31:de:82:f7:87:3a:40:04:eb:a7:7c:46:c7:
64:c7:ec:d1:8a:b1:53:e9:fa:c2:37:a0:2b:4b:6e:
5e:02:58:2f:82:cf:a1:84:36:7a:93:64:93:ec:bd:
ce:83:9f:0b:09:ed:fe:2c:bf:e9:de:29:dd:ec:9d:
e0:fc:15:d4:98:4a:c6:c2:64:fc:95:4d:15:9a:f7:
80:53:ba:c6:d3:96:7b:fb:c7:12:4d:3a:59:a3:62:
b6:1e:57:4b:42:f1:02:9d:8d:d8:b5:6d:89:06:80:
b3:df:7e:e1:87:63:c2:9d:9a:8b:7a:a3:2d:45:aa:
62:c9:c9:9b:36:cf:70:d5:81:73:8b:24:65:c0:21:
9e:63:da:c9:03:ae:fe:48:75:7d:f3:0b:97:75:2e:
44:9f:a8:ca:c2:6e:6c:f4:71:3f:9d:5b:7e:9f:26:
5e:39:43:0a:4d:94:b9:5b:8c:21:19:84:c0:a1:39:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:24:1D:27:5E:A2:5C:26:22:01:AD:44:E6:90:E0:1C:AB:A9:30:F5
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:da:40:2d:10:1c:4a:7b:ff:3a:e9:bc:41:34:57:71:cb:6a:
55:c5:aa:bc:0b:5f:3c:2d:5c:bb:64:59:05:cb:e7:93:f8:21:
a3:19:98:01:69:fe:f7:0a:a4:09:68:22:63:f0:2b:85:4c:cd:
af:d5:cf:82:fa:cd:f6:c0:fd:05:9f:a6:b3:17:96:6a:95:e3:
21:75:60:66:40:65:b9:45:f5:cf:b9:e6:68:8a:a4:44:cb:b0:
4c:df:93:bd:1f:2c:87:6f:df:e2:c0:d4:d9:68:c7:3f:e2:8a:
e8:a5:66:d9:7b:08:69:58:7b:51:54:89:b6:09:05:ab:76:43:
0c:2d:2d:6e:8d:86:f7:2a:00:61:fe:64:ab:79:2d:c8:c6:32:
e5:12:f5:cd:69:83:4b:2b:56:58:dd:2f:6f:02:26:37:dd:2c:
ec:13:b4:1f:59:cd:5c:af:39:99:40:2c:30:fe:37:ec:ce:45:
fb:23:8b:f3:ad:67:33:81:38:f9:ea:b2:dd:6a:c9:04:3c:30:
34:c1:85:d0:be:8e:09:70:05:12:4f:c1:68:03:b9:b5:b0:fc:
77:8a:37:de:ea:6e:b0:19:da:0b:65:ce:07:77:82:a1:e3:15:
91:54:b3:5b:1d:87:55:ec:59:99:f9:0a:1f:f1:55:41:33:f6:
4d:93:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:08:47 2026 by rpki-client