Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: YiCTu06SnSEz6yXp+AIFOXq7tcXB75wRkaJTnDMjBbI=
Subject key identifier: 44:88:6A:F3:9B:D8:42:A2:DE:54:2D:2F:00:B0:3F:D4:CF:B8:84:5E
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019DE0D721C2254B2C7A9E64725C418712AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 160A
Signing time: Fri 01 May 2026 00:01:28 +0000
Manifest this update: Fri 01 May 2026 00:01:28 +0000
Manifest next update: Sat 02 May 2026 00:01:28 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: XdsZ7CGpGKo1whcmL51k7M2Eq8b9/n+xB1m1gcJ0dX4=)
2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=)
3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e0:d7:21:c2:25:4b:2c:7a:9e:64:72:5c:41:87:12:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: May 1 00:01:28 2026 GMT
Not After : May 2 00:01:28 2026 GMT
Subject: CN=44886af39bd842a2de542d2f00b03fd4cfb8845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:85:69:00:b1:3d:56:53:fd:56:88:90:94:27:
0c:82:ae:b6:69:df:e1:f1:c7:06:a5:76:02:0e:14:
41:cb:3d:0d:8d:7b:34:92:57:8a:ad:38:06:d9:70:
b2:04:d5:71:42:45:d8:72:ad:66:01:cd:c2:c6:15:
7b:96:04:f4:c2:4b:46:7b:d4:2c:9d:d3:cd:5d:20:
4c:39:75:8f:df:d7:39:7d:fb:4b:68:f7:1c:79:d4:
0c:40:e3:c6:26:16:25:66:27:2c:a8:7c:27:53:f7:
a1:a1:08:39:d9:3a:c9:8b:06:fb:f8:b4:18:bf:cf:
be:dd:30:cc:19:ff:d0:d2:93:c3:d9:bc:65:da:19:
c1:a1:54:25:42:dd:99:cb:ed:ea:48:af:99:ae:79:
78:7e:bc:2c:ee:fa:d7:58:0a:86:61:ba:f7:73:fa:
05:2f:f3:79:19:01:d3:29:ee:80:89:08:07:e5:a7:
40:80:52:8c:a1:c7:e9:6d:49:26:23:70:f5:77:fc:
d2:76:34:a3:e3:aa:77:ae:45:00:20:d8:b0:cc:d8:
33:6f:18:13:bf:c6:45:89:14:ae:76:8a:28:a7:5c:
5c:d1:2f:6f:03:7a:17:f4:b1:8b:6c:bd:4f:9d:b2:
69:2c:d7:cf:a7:77:4e:e4:7c:c7:c3:57:f8:7f:42:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:6A:F3:9B:D8:42:A2:DE:54:2D:2F:00:B0:3F:D4:CF:B8:84:5E
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:76:27:20:cb:01:dd:83:bb:13:d4:d9:5a:5f:d8:ec:d1:f3:
19:eb:74:07:a0:df:2c:a0:15:89:8e:e1:01:b4:61:54:11:69:
a9:fa:f9:af:3a:61:6f:92:1d:c9:ff:44:01:1d:f2:54:50:6e:
02:13:ad:45:77:82:61:00:46:df:fc:cb:3b:09:3e:84:08:5a:
4e:f6:0f:04:c5:1e:56:96:7d:e5:9f:ab:e2:58:46:29:31:e5:
5a:bd:dc:17:89:ac:7e:a8:91:17:f0:b2:2d:98:e6:19:f0:81:
d7:08:7e:05:6a:39:a8:7f:50:8d:72:ad:e8:ea:14:c4:37:a9:
e7:eb:fc:03:42:d8:5c:e8:58:c7:5a:0b:22:86:e3:fe:52:bc:
81:dd:3f:ed:a9:02:ca:b3:52:a2:3d:bd:51:47:e6:17:42:b6:
a3:01:a0:36:a3:3e:24:66:4e:dd:08:e4:a2:e1:c2:c1:15:0d:
1b:8d:ec:ec:77:d3:53:df:9b:74:b5:fb:3b:39:fe:ce:cf:80:
c7:7e:12:61:76:2f:5b:92:94:7d:ad:a5:7f:e2:c2:13:b4:49:
f7:ef:ca:93:65:b1:6c:ef:70:6a:6a:3b:3c:6f:91:2b:c6:19:
29:b6:e3:0d:f8:39:8a:31:ed:80:2d:0e:6b:92:b0:7e:a5:6b:
e0:24:4b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 10:21:11 2026 by rpki-client