Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: 7E7Ko2k6/YSJLOHtiNPD2zDjrASP4qVQ2OzMzZvRfpQ=
Subject key identifier: AF:4F:06:CB:A7:57:2F:3E:A5:04:6C:12:3B:85:BE:FC:7D:C2:EE:6B
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019CE5C8707EDA11323AAFEBF52F5B701C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 1588
Signing time: Fri 13 Mar 2026 06:00:44 +0000
Manifest this update: Fri 13 Mar 2026 06:00:44 +0000
Manifest next update: Sat 14 Mar 2026 06:00:44 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: HZI1+d8+sCPsCZvZZEU2zajmiEsKoBe52uJHcWePYOU=)
2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=)
3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:70:7e:da:11:32:3a:af:eb:f5:2f:5b:70:1c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Mar 13 06:00:44 2026 GMT
Not After : Mar 14 06:00:44 2026 GMT
Subject: CN=af4f06cba7572f3ea5046c123b85befc7dc2ee6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:cc:f9:ca:06:d0:9e:49:ad:73:c5:ed:81:
00:a5:bf:7c:e7:f6:1e:ae:6a:5f:af:e5:2f:de:78:
90:72:d4:1c:8e:aa:ae:45:63:6f:f8:5a:9a:ac:0a:
1d:63:a5:ed:1b:ae:00:4d:f4:50:e2:0a:44:41:bc:
2a:56:1c:bf:f3:b0:06:e1:a0:10:8a:d3:5a:5c:24:
5c:83:1e:25:e3:e4:71:4f:15:e7:e2:50:79:34:fa:
d2:6c:b8:44:08:54:c9:a8:ff:5a:df:36:79:81:2f:
f6:1c:5e:6f:79:ec:94:85:79:df:93:03:74:1b:f7:
ed:47:5a:33:78:c1:bc:93:8d:84:0d:ff:64:6a:2e:
eb:80:e2:d0:e8:ab:c4:37:80:57:74:c7:4c:97:76:
27:4f:bd:58:c1:61:72:6d:71:6e:34:43:f3:92:ae:
b3:60:4b:41:c6:ff:47:d4:c7:48:47:a6:d7:d8:9b:
cf:36:9a:2a:25:98:2c:41:c5:8c:6f:48:61:6e:1e:
74:84:c1:d8:54:df:5c:b8:fc:df:17:0d:3e:b1:de:
6c:ca:2a:be:a4:53:dd:dd:79:7e:65:96:a7:38:39:
27:ee:2c:f8:8e:f8:8c:36:1a:a3:17:cf:d4:a3:a2:
68:7f:5f:9f:83:7e:09:46:07:e1:7b:ca:bb:99:e4:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:06:CB:A7:57:2F:3E:A5:04:6C:12:3B:85:BE:FC:7D:C2:EE:6B
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8b:d7:56:a3:b6:82:1d:c1:43:91:48:6d:63:97:af:fb:7a:
14:e7:42:a9:37:6d:a8:2f:5c:b1:6a:58:59:d7:17:8f:bf:2e:
5e:5c:f9:8f:f9:f3:fa:04:ec:a0:1c:bd:fb:1c:78:ab:b1:6d:
a2:9a:dc:58:7a:a2:9f:7d:59:11:9d:ef:a3:7d:cd:c2:3a:fe:
bb:a9:58:4d:33:84:5b:22:d1:b8:3b:b0:1a:3e:17:01:26:a2:
e1:6e:d7:9a:3e:ba:12:8b:42:fe:a1:79:42:e6:68:da:7f:e8:
94:93:24:60:9f:38:79:37:de:41:94:8c:ad:67:1f:03:9f:73:
a5:19:9e:82:a2:c6:f8:32:60:ad:4c:06:94:d9:2d:c5:97:86:
f0:7a:11:ff:50:05:42:f4:e4:6b:d0:93:63:cf:06:e8:4c:7b:
32:f6:e4:98:ae:dc:c8:d7:5b:ff:63:46:14:1c:5b:b2:c9:61:
b3:43:6d:a3:67:b5:b0:9d:53:ff:31:bb:51:c8:a5:7a:58:a2:
aa:bd:71:98:65:62:75:c3:2b:08:71:ca:c6:ba:50:6d:e1:ec:
8e:47:73:55:a3:55:0e:48:e9:78:80:3a:28:0f:d7:b4:1e:e6:
5f:97:b7:69:ba:86:48:9d:e2:57:25:09:bb:50:fc:b7:c1:e3:
e7:c2:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:14 2026 by rpki-client