Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: iHYPeXXJH6W9wveXOFsCkKb0PvxKQuKmaES9fs6iV0w=
Subject key identifier: 30:22:51:11:41:9A:8C:39:56:02:03:66:E8:ED:AA:04:BF:90:81:AD
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019CACB4CF7B3A038D5ABBCA4F3E26C63A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: xidvimDoJrp9KVDmxkqir8hIiJeKgtSep73M+itdHK4=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:cf:7b:3a:03:8d:5a:bb:ca:4f:3e:26:c6:3a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=30225111419a8c3956020366e8edaa04bf9081ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:b4:e1:19:49:52:7e:e5:a4:ee:8c:79:e3:
96:22:8f:15:20:cf:74:15:73:86:09:79:75:2e:98:
05:1f:d8:4e:f6:6d:58:3e:f5:aa:64:90:03:fa:77:
3c:23:98:d5:0d:1d:f6:73:14:ef:c4:98:51:f0:24:
bd:f6:dd:07:53:12:f9:07:07:eb:81:a0:de:70:2c:
10:9f:fd:22:1e:60:f3:af:ef:92:cb:b8:eb:dd:5f:
c1:53:c0:08:2e:50:b4:86:c5:60:e6:7a:60:07:45:
f5:6a:07:4e:23:70:0c:e9:d4:a1:7e:5f:55:45:93:
56:62:41:3a:e6:77:91:ee:f1:37:2b:2a:f9:eb:8b:
4a:ef:38:bd:2e:fb:6d:21:c0:36:7d:bc:0b:1d:be:
67:26:2c:71:ae:02:05:a2:91:8a:46:d3:cb:c0:3d:
63:26:9a:6b:43:0b:fb:ad:f2:76:aa:5c:64:73:18:
de:c6:5b:12:4f:8f:ee:ea:33:43:f9:e6:e9:55:2a:
a0:34:58:83:05:1f:39:3e:28:a0:55:00:01:b5:a8:
8f:b9:3b:36:d4:82:e1:8f:81:7b:d7:37:0b:c7:72:
68:b0:57:45:f0:e9:75:61:b2:ab:5a:b4:d4:26:99:
82:91:6a:7d:59:da:5a:e5:80:61:c5:50:c3:0a:11:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:22:51:11:41:9A:8C:39:56:02:03:66:E8:ED:AA:04:BF:90:81:AD
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0f:ad:d5:49:5d:f1:22:8a:26:3c:e0:5c:5f:ed:d3:a4:59:
25:d8:17:0d:8d:2f:25:1e:4e:ef:e1:04:c9:2d:1c:67:15:83:
86:26:76:37:0c:16:2d:88:ee:e7:5a:04:06:dd:83:86:9d:6e:
b1:07:cd:30:aa:f1:82:bd:9d:ad:c6:1c:75:51:69:4c:56:4d:
10:17:8e:b1:ef:61:ee:94:d2:33:ec:aa:bb:80:ec:94:fe:4a:
1a:6d:05:f0:53:14:9c:3a:ea:ad:7b:d1:42:bd:d1:ce:2a:e3:
3c:8f:52:34:ef:a7:67:c3:5d:c7:f9:59:02:21:20:a5:b2:cd:
1d:1d:78:01:c1:7c:ed:5c:d6:04:46:61:31:4f:f8:9e:43:b2:
88:dc:10:74:6c:8c:92:71:44:57:c5:d2:94:6e:00:f2:ce:8a:
16:e1:23:70:d5:19:7d:18:ea:4d:6b:70:2a:9d:25:34:9c:72:
2d:be:31:e2:d6:71:71:7f:8e:bd:df:19:51:bf:0d:29:4a:56:
a7:f1:ca:50:57:92:cf:51:1c:3d:9b:36:f2:a2:6f:11:b0:73:
d1:a5:55:42:50:0e:6b:c9:24:08:9f:62:45:8f:e1:3b:14:df:
2d:e4:d0:22:f5:8a:1a:4b:89:3d:fc:70:f4:ae:41:ef:23:97:
dc:ec:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:23 2026 by rpki-client