Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: JbYQYEzUtcHRH0u8UJws5RLxnu8ABp6MnJNoNKsKuDk=
Subject key identifier: B9:71:F2:A5:6B:2D:11:B2:99:90:19:1F:76:FF:9B:64:7C:FD:20:D4
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019FA9752D18D39F3C021387B9998AA80407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 16:00:56 +0000
Manifest this update: Tue 28 Jul 2026 16:00:56 +0000
Manifest next update: Wed 29 Jul 2026 16:00:56 +0000
Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=)
2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: u3+hD0jTx7a3bvvGENO1yy4zFzTDRrVw4ST8ovQ22/A=)
3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:2d:18:d3:9f:3c:02:13:87:b9:99:8a:a8:04:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Jul 28 16:00:56 2026 GMT
Not After : Jul 29 16:00:56 2026 GMT
Subject: CN=b971f2a56b2d11b29990191f76ff9b647cfd20d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:8d:3b:69:d4:ff:d1:9e:cd:09:e0:ec:c9:
7e:0a:d3:7b:42:63:ca:71:1f:77:b3:ea:06:64:ed:
27:82:ee:42:50:79:18:6f:44:46:42:c5:29:9c:e8:
c7:38:03:f8:13:d8:26:26:7d:14:8c:b5:a4:8a:86:
95:01:fb:15:f0:4a:bf:d2:ed:d9:f2:78:6c:3f:67:
3c:30:65:11:d0:25:db:0a:c0:1b:ed:1f:55:ff:e2:
44:56:31:5f:3b:22:ed:11:50:a8:75:b1:5c:d4:b7:
43:c5:a0:59:ca:a5:c6:2f:23:d1:64:7c:7d:f3:a3:
8d:f0:1c:b6:74:f7:89:06:bc:75:e5:03:78:fe:23:
e9:7e:9e:5c:9a:b2:f1:3a:b1:6a:1d:22:5b:1f:0d:
44:dd:9e:4a:81:11:62:8c:15:ed:01:60:ec:2e:4f:
78:ba:ed:39:ee:4d:e5:60:25:f0:7c:c1:16:45:70:
b5:3e:e3:f2:43:a6:b6:79:41:48:06:0a:f3:0b:a5:
7d:3c:1d:c5:3f:8b:84:f5:45:7c:63:1d:c7:5f:90:
1e:ce:cc:32:00:f5:c0:83:0c:44:a9:c3:16:03:ec:
9f:8a:87:eb:51:f0:a9:d6:4e:dc:ae:19:08:77:56:
d1:43:32:cd:45:69:e5:98:a6:5b:df:ca:85:a1:93:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:71:F2:A5:6B:2D:11:B2:99:90:19:1F:76:FF:9B:64:7C:FD:20:D4
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:d6:6a:3e:06:a4:1e:49:d5:3a:d5:33:77:82:d9:fd:64:cd:
f1:b9:af:36:7d:ea:6c:4d:61:30:08:87:fa:77:a2:00:a0:33:
0c:cf:b2:56:60:91:1a:13:a8:cf:2e:69:e8:ec:3d:ae:16:7b:
81:8e:99:ab:da:90:62:9e:03:77:2d:6d:9b:93:36:25:2f:08:
07:eb:50:cd:09:cb:eb:81:13:cc:82:7a:6e:a0:54:97:4a:70:
2f:5d:67:1e:af:6c:a8:45:ed:c4:57:38:e2:11:dd:30:78:d9:
6a:b7:ca:a2:e9:8d:14:52:7b:18:69:53:52:00:1c:0b:b1:05:
89:e6:8d:04:14:2a:30:ed:4e:57:83:b2:bf:d2:68:13:96:ff:
a9:fd:dc:9a:71:ff:26:67:de:13:ce:08:58:9f:a0:49:69:14:
75:ac:66:32:f8:47:ca:27:96:f2:47:49:18:ea:cf:7d:4d:16:
14:b4:5d:c9:b4:6a:e7:17:c4:ac:3a:17:a0:35:0b:54:eb:9e:
5f:44:5c:66:cb:1f:70:cd:73:30:3a:81:0a:bc:c1:c7:62:8e:
1d:89:97:4c:d1:90:dd:fa:1e:2d:d2:59:5f:56:a1:07:c5:4c:
5a:7b:b6:6f:f7:2f:2a:0b:90:60:03:17:d6:d7:fb:6a:fe:b2:
28:b6:97:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:44:34 2026 by rpki-client