Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier: iqxUP9IK6ddfaUuxVHHPBGUIh8YPdTHOEvHtVlZSDgs=
Subject key identifier: F5:7A:20:27:79:F8:12:CC:25:1D:64:D3:7A:D7:0A:D5:01:B6:26:90
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 019DCE629A93C8C887A72E7338F6310ECFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number: 0B9B
Signing time: Mon 27 Apr 2026 10:01:01 +0000
Manifest this update: Mon 27 Apr 2026 10:01:01 +0000
Manifest next update: Tue 28 Apr 2026 10:01:01 +0000
Files and hashes: 1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: js8iZd6bZdz3xmIvLLIDgae3wjnpM7e8JNyUe5ost8c=)
2: hOCqHr0-rwjOn6wU8z8C-ggKXAo.roa (hash: aczilg5expuAqkln7fFu+xj4eV4HRQvyQA+wDQF1/60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:9a:93:c8:c8:87:a7:2e:73:38:f6:31:0e:cf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Apr 27 10:01:01 2026 GMT
Not After : Apr 28 10:01:01 2026 GMT
Subject: CN=f57a202779f812cc251d64d37ad70ad501b62690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:00:db:a9:61:13:f6:08:b2:c5:cc:45:f0:
e7:59:8e:9c:f2:42:2b:c6:92:55:bc:36:29:03:24:
0f:ea:1b:71:b5:f8:a5:86:fa:ec:4e:de:09:a2:f5:
cb:7e:d2:72:6b:0a:4f:84:9a:a3:26:a6:29:1a:09:
47:f4:e4:a0:58:f7:51:fb:1a:11:56:87:95:74:ec:
2c:3c:bf:e6:3d:a6:db:18:12:82:c9:f0:a7:13:42:
12:90:01:6d:1a:d2:73:2b:59:2e:6a:ce:2f:fd:0e:
0f:b3:b4:92:60:a1:7a:a8:36:a7:64:14:89:ee:2d:
27:1b:2c:0d:b6:b4:f6:08:e0:8f:b7:de:ee:a4:58:
0a:f7:f5:3d:23:a0:16:77:86:48:68:26:99:ce:08:
2e:f6:11:fe:8d:03:e7:d0:f9:44:0d:87:0f:84:fb:
1b:62:aa:4a:e8:b7:ec:e4:80:cb:1f:c2:a2:51:ed:
f0:d1:73:38:23:2e:b3:e1:31:8d:fb:c1:aa:95:54:
a8:ac:ac:ef:29:9d:f1:7b:cd:89:f7:e6:8f:80:b8:
6c:87:40:eb:c8:86:b6:c8:e4:e7:17:75:b8:2d:f5:
6b:79:bf:8a:28:68:0b:8f:ea:70:3a:09:45:39:21:
a3:1f:d1:13:2f:a4:99:55:da:33:49:53:e0:b9:4a:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7A:20:27:79:F8:12:CC:25:1D:64:D3:7A:D7:0A:D5:01:B6:26:90
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:42:9f:5b:19:2a:51:0c:7b:0e:a0:db:f4:94:cf:eb:44:df:
cc:c4:7a:b8:48:22:25:6d:e4:c4:7d:1c:59:af:ab:60:a8:98:
10:a3:a7:40:d2:97:48:5a:0c:f4:2a:f9:23:7e:74:73:51:ef:
1d:d3:d1:c8:d9:09:50:9f:65:66:e7:25:fe:6d:dc:dc:4c:4f:
e4:0e:09:52:6f:e4:50:48:67:1f:ab:4c:9b:42:3d:fd:6a:0a:
4b:1e:24:ed:c8:0c:fa:57:20:7a:50:29:88:84:64:55:76:35:
85:7d:32:1a:6b:c7:38:ba:60:65:ac:d0:cb:a7:cf:86:e8:61:
7c:aa:7b:fe:99:ed:4d:05:0a:5d:88:78:4a:d8:fe:a9:b1:02:
ee:38:25:d5:04:8b:03:f9:62:a4:fe:7d:1f:23:e0:58:84:13:
06:1b:52:a1:bb:2e:e0:31:dd:6f:de:a7:72:d0:4c:30:b2:48:
44:c7:29:bf:81:77:12:84:79:3e:7e:e0:00:00:db:2d:c7:70:
40:7e:13:54:f2:29:61:9e:d2:8f:70:cf:59:1f:8b:8b:da:50:
2e:8d:53:78:5f:96:2b:b7:5f:b7:6c:a5:24:9f:27:26:6d:fd:
a6:4b:5d:84:cb:b0:44:38:d1:db:33:a2:c2:f9:31:9b:73:c4:
52:bd:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:50 2026 by rpki-client