Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier: WKnkiXB4eN5GQw98LINuyEEA8EYbhqB6RsTyT6+1v6Q=
Subject key identifier: 24:89:66:D3:80:C4:8C:E4:DA:CB:80:2F:7A:C7:BE:A3:B0:E5:96:50
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial: 019D38D2DC8B0FCFC8586823BE6EF6DED79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number: 06F6
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: Lal2Szd8VhVaYCCt3xTogAHvHd7WRlMgQqtmWKSBFrc=)
2: SnZyrIF6RABx6JSbJPFXyEaoM4o.roa (hash: 5p3rhTPu7aykKsYkOURaS1avQK2tbYJAoNaTXCxX5Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:dc:8b:0f:cf:c8:58:68:23:be:6e:f6:de:d7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=248966d380c48ce4dacb802f7ac7bea3b0e59650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:15:95:ea:74:2a:33:77:b3:43:11:a2:78:d9:
d9:f5:fd:03:58:d8:45:03:67:41:68:5d:61:6b:ad:
2d:97:de:a2:6d:7d:d0:eb:45:82:da:3f:61:3b:dc:
8f:46:bb:c1:4d:4e:59:98:e9:bf:bf:93:0c:d2:c9:
32:91:f9:08:8b:da:26:bf:8f:f6:2a:2a:39:21:db:
97:9c:a3:71:8b:42:ed:d7:34:90:e7:15:90:07:6d:
24:1a:ac:0d:45:fd:78:14:bb:af:70:04:35:11:d5:
31:bf:7f:75:e3:b8:f4:9c:62:ca:73:a9:ab:0c:f3:
30:63:5f:16:32:ce:0b:be:7d:e1:b0:e2:24:55:8a:
76:17:7d:6f:7d:2f:25:b6:a1:46:4b:67:ec:6e:95:
96:25:11:34:72:78:93:97:29:72:00:7a:7e:2d:e4:
b9:19:74:b7:cb:1d:ee:cb:c1:ae:e4:e4:a1:e1:9a:
e4:75:42:e5:f2:5b:49:1f:4d:b2:9e:61:ed:9d:76:
2f:9a:26:6e:1c:ca:54:ee:11:fa:94:5e:ea:b1:3a:
40:23:4b:6d:5c:b6:41:70:03:a8:ea:51:27:de:61:
f7:71:dc:5c:4f:01:6a:15:a7:23:6a:a9:1c:3e:aa:
58:fd:64:44:92:f2:0f:b1:33:85:13:38:70:ec:72:
51:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:89:66:D3:80:C4:8C:E4:DA:CB:80:2F:7A:C7:BE:A3:B0:E5:96:50
X509v3 Authority Key Identifier:
keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7b:12:f2:bf:ee:e2:9d:36:60:e5:11:3f:fe:b8:85:e6:55:
1a:43:f5:57:fe:58:20:a8:c5:ca:96:40:7b:9a:f6:08:18:9d:
bd:d5:bf:34:8c:d0:41:b1:09:33:07:a5:6e:ab:a1:d7:4b:de:
51:42:3a:5f:4c:e8:16:ed:67:0a:d4:bc:2f:d0:b8:0e:23:a9:
1f:c3:07:b8:42:30:a0:27:db:88:ee:11:b4:91:5d:74:fc:81:
60:a0:b6:1e:04:12:84:0c:f5:09:9e:3d:51:77:30:03:d9:83:
ee:ff:94:83:05:56:05:f3:07:f2:b1:2f:f1:81:1a:c0:75:e7:
90:ac:29:66:1c:89:7a:22:d1:6d:5c:20:b7:c3:95:67:12:05:
31:3a:ef:14:28:08:3e:88:d4:28:ec:f4:e5:a2:c8:ba:48:3c:
c2:3a:9d:2e:a2:38:7a:e6:be:7c:31:54:04:13:6e:cb:e4:3b:
63:da:cc:de:ff:74:59:e6:42:77:d8:0d:77:79:f7:82:5c:22:
8d:28:3d:df:10:f2:78:0f:0c:eb:90:3e:7c:ad:85:1a:24:0a:
cc:ae:ca:c4:43:36:ec:17:47:35:fe:b8:90:02:be:f6:21:9a:
82:21:df:62:93:4e:ef:b4:cc:94:1e:66:2d:14:9e:ec:eb:0c:
b8:7e:3c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:03 2026 by rpki-client