Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: k9IZRgnr13xyF5hJoXkISU9tgbm7HoA9khbTPGoxF00=
Subject key identifier: 0C:F7:CF:11:28:6A:EF:69:EF:71:72:67:46:8A:4B:9A:C3:D3:3C:06
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019F1D8EC4ED4287EF2426CDFF400AC484EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 16AE
Signing time: Wed 01 Jul 2026 12:02:03 +0000
Manifest this update: Wed 01 Jul 2026 12:02:03 +0000
Manifest next update: Thu 02 Jul 2026 12:02:03 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: 3rKjbmmbG6GG4eWhbWN9GVWVcFqgLMB7kcEW2uYmGvI=)
2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=)
3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:8e:c4:ed:42:87:ef:24:26:cd:ff:40:0a:c4:84:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Jul 1 12:02:03 2026 GMT
Not After : Jul 2 12:02:03 2026 GMT
Subject: CN=0cf7cf11286aef69ef717267468a4b9ac3d33c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:f2:2a:1a:15:b2:73:43:2b:fd:87:5d:ca:
54:8e:d7:4e:c7:b9:c8:d1:62:e5:5f:bc:a2:1e:8b:
2d:35:3b:99:fe:84:a4:39:1e:14:2b:22:58:a5:e9:
74:25:72:5b:7d:a6:a7:0f:9a:3f:e0:ba:f3:49:aa:
2a:da:70:fe:ee:d2:ed:b7:01:ba:1f:37:bd:4a:52:
4c:c7:87:f4:32:ec:2b:bc:69:d2:29:e2:e6:bd:55:
46:ab:d4:39:64:38:a9:a1:a6:87:f6:b2:6c:6e:5e:
51:c6:7b:93:b8:b4:67:27:32:f7:88:a1:fc:a4:9f:
fc:91:db:1b:da:f7:c3:0f:ea:be:0c:a8:ac:ed:a0:
42:e5:88:e4:ab:5a:51:fe:96:08:e6:95:78:a3:4f:
20:02:41:ba:40:3e:73:00:75:56:28:a1:90:31:cf:
ba:3c:2a:1d:0f:d9:25:a1:10:fe:9d:42:b2:8e:2f:
e1:59:3e:57:21:bf:b6:90:18:12:27:e8:06:2c:94:
be:7f:cb:ac:eb:5c:6b:c8:e4:89:e1:82:d2:77:df:
6c:67:44:a5:32:73:2a:ab:b7:da:fc:15:97:cd:3f:
b4:cf:52:d2:25:a3:8c:00:33:1c:74:79:50:db:ea:
bb:7d:84:12:89:ee:1f:4d:a7:e8:94:11:74:13:e7:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F7:CF:11:28:6A:EF:69:EF:71:72:67:46:8A:4B:9A:C3:D3:3C:06
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7a:a8:79:dd:1b:d4:e4:f9:cb:51:fa:13:48:72:9c:b3:b8:
2a:e6:6f:a0:1a:e3:e4:08:ab:8b:e1:05:63:5c:75:e5:97:0e:
83:6f:48:16:43:38:27:5c:4f:f6:73:ba:35:8d:6a:00:3d:08:
27:6c:05:97:81:ba:cd:06:7f:b7:b5:95:02:17:a0:5c:d1:af:
5f:bd:92:2e:c4:08:f3:30:e9:9b:d2:67:8b:20:0c:88:8d:03:
70:3e:dd:ee:51:1c:86:d5:10:77:b8:9b:60:85:64:5b:80:77:
eb:c5:2a:e6:8b:d3:9f:89:c7:67:f5:03:34:a1:97:64:e3:78:
45:be:78:16:29:d5:8e:d3:4b:96:40:1f:1d:57:12:eb:db:4e:
24:a0:0c:c6:38:7b:da:89:3f:e8:54:a8:f2:06:7f:2b:45:bf:
ca:4e:29:9b:1c:82:89:98:b6:81:0f:a7:38:8f:44:ff:6c:51:
c4:33:38:50:85:c2:10:9a:e2:85:69:6d:fa:35:99:53:6d:73:
8b:c7:9b:b5:16:e6:fc:69:d7:12:17:81:d1:60:c6:a7:1c:8d:
bf:de:79:1a:ed:1d:d9:14:cf:2d:53:a1:97:d0:d4:59:f4:de:
14:e9:1d:34:52:4b:18:eb:46:6a:44:15:3b:3c:20:43:f4:27:
0f:d2:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 14:51:33 2026 by rpki-client