Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: xDGxd0U2HMwVDH1PIeE0JuDCcurGR8EdBlZ++N4uhGg=
Subject key identifier: 99:4A:C8:F3:14:02:D9:E0:07:19:4F:1C:C1:88:06:11:29:82:D8:26
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 019D3940953DA41E76270831587A3D0FD8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 1100
Signing time: Sun 29 Mar 2026 11:00:26 +0000
Manifest this update: Sun 29 Mar 2026 11:00:26 +0000
Manifest next update: Mon 30 Mar 2026 11:00:26 +0000
Files and hashes: 1: KaaC6M28k9adFlDm0sQNkvGUIIw.roa (hash: 2H0fCcqXWjgAUaS5LPxTPaJ+kJQB9vSGvCYiGO5pfEU=)
2: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: 9yd+rHwnXUadin8yHl7EKxIsO+FnsVkLvggt6JofhjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:95:3d:a4:1e:76:27:08:31:58:7a:3d:0f:d8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Mar 29 11:00:26 2026 GMT
Not After : Mar 30 11:00:26 2026 GMT
Subject: CN=994ac8f31402d9e007194f1cc18806112982d826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:91:cd:03:e2:64:3c:25:17:88:95:e8:83:
da:2b:35:6b:a8:d2:58:29:93:b3:3a:33:1a:da:bc:
27:30:3a:c2:a1:83:ec:21:7e:07:5d:ed:b2:39:fa:
07:36:6b:40:aa:85:8b:ac:f9:e1:4d:a6:86:1e:5a:
dd:f8:b9:4f:79:e6:a4:2d:6f:a4:83:da:0c:3f:7f:
1d:da:97:a6:64:f2:4c:3e:b7:96:73:a0:97:77:74:
de:85:90:ce:b0:fb:6e:09:08:5e:81:89:ee:2b:f4:
90:b7:4f:7a:d2:07:5a:2e:f1:09:64:c6:da:24:ba:
d8:70:7c:e7:6a:e3:f6:01:4c:3b:c0:ca:cb:68:58:
5b:6d:eb:22:f3:8d:27:49:b6:31:4e:be:d5:ac:c3:
5c:3a:ed:8f:c8:ab:12:04:37:8b:d1:9a:4e:45:26:
66:3b:6a:f2:65:f3:e4:00:73:a6:41:f7:a0:a3:94:
6a:1c:51:55:4e:e1:93:d8:1a:64:87:fe:3f:a0:11:
5b:e1:f1:b3:61:20:06:0d:33:24:77:f1:ff:03:85:
42:df:f4:cc:46:62:9c:fb:86:70:c5:98:3e:85:35:
f2:f7:68:c8:cd:22:2f:fb:f6:6b:cb:fd:73:64:17:
ed:e8:55:7f:85:37:b1:92:6e:9d:1b:ad:a8:e3:ec:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4A:C8:F3:14:02:D9:E0:07:19:4F:1C:C1:88:06:11:29:82:D8:26
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7e:92:96:2a:ba:64:19:a0:24:18:b3:6d:1d:f2:5f:8b:81:
b3:a6:de:ec:ed:17:d8:a3:31:d5:47:cc:8e:0c:6f:af:bf:2f:
0f:51:51:db:cf:59:19:a7:75:29:87:2d:77:17:d2:bc:3f:fa:
a0:1c:31:5b:06:0e:02:20:59:80:5f:1c:c5:9b:4d:1e:3c:30:
cd:4e:15:6b:db:7f:e1:3c:c0:9d:a7:e6:0b:30:c7:83:69:f6:
c9:b0:5f:4d:0d:97:97:c7:34:53:06:45:c5:7a:9b:29:32:1d:
ad:dd:b8:db:9e:15:83:ef:5c:09:62:a0:bc:b9:49:55:9e:24:
79:a4:ae:a2:ce:0d:dd:18:58:1a:e7:91:db:4b:28:3d:38:c2:
7a:46:c5:c2:49:ae:df:5d:25:ea:f0:74:db:43:3d:ce:92:f6:
fa:8e:aa:8c:3c:f0:4b:ee:3b:7c:b5:ca:7c:21:ab:a9:f8:18:
d9:0b:3e:30:f8:07:58:c9:d0:9f:c1:8f:e0:4c:6c:85:d0:b3:
e3:b8:02:c6:00:60:ba:38:12:b4:63:48:46:d4:e8:26:5e:af:
22:d0:aa:05:a1:fc:b5:ee:9b:39:65:ed:2b:7c:5b:4b:23:73:
9d:69:ef:fe:ff:39:97:83:64:e6:7f:8f:5c:28:b9:86:95:e1:
69:78:b9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:20 2026 by rpki-client