Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: 8BLR1b6rmhY6fltBDWBSvo8001/SABudjwG9tdT3zic=
Subject key identifier: 48:14:B3:FD:11:19:5C:11:15:B0:7E:56:12:21:76:91:C5:44:43:1B
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 019D39AEE75530C8FAF2C9AD28E09EE1DE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:00:56 +0000
Manifest this update: Sun 29 Mar 2026 13:00:56 +0000
Manifest next update: Mon 30 Mar 2026 13:00:56 +0000
Files and hashes: 1: NW-rkeD4Q3i4CBn4OpnLQGqqn1o.roa (hash: h8M7ms2bpqiMtf9k+v+XnZ9DC8UMB3Fa8eDf6MLIXMk=)
2: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: kr0TuPUO1rhpcBUusz/WcLsE242tFR1pd2ANZyFS9NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e7:55:30:c8:fa:f2:c9:ad:28:e0:9e:e1:de:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Mar 29 13:00:56 2026 GMT
Not After : Mar 30 13:00:56 2026 GMT
Subject: CN=4814b3fd11195c1115b07e5612217691c544431b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:22:a9:5e:dc:f3:34:27:79:d3:86:44:a8:
f9:32:36:37:49:5c:95:1d:e8:ec:1c:45:dd:64:2d:
8c:3a:eb:7f:4c:e2:be:54:06:a8:e4:c5:f9:c4:71:
3e:c7:df:39:09:25:66:46:a1:01:99:5b:a3:1f:6a:
0a:b7:15:1b:5e:c0:83:53:24:6c:4c:3a:74:1b:ad:
ae:ef:39:74:af:2f:48:17:91:a8:8c:2c:38:6e:56:
4e:5f:83:e0:c3:e6:86:f9:1d:70:25:b2:65:57:28:
6e:b4:e1:ff:43:d3:6e:d3:97:48:5e:c4:10:eb:47:
ef:70:96:d9:ce:f3:53:a1:c4:0d:44:22:8b:e1:e5:
05:71:b3:1a:07:1f:84:a0:a4:fa:ba:6d:52:1b:66:
5e:6c:3d:72:a1:40:85:3c:e1:09:90:b9:e4:8e:21:
3d:c1:3c:4e:45:65:98:7b:6b:91:1e:d3:af:08:67:
c8:f9:75:e0:95:3b:71:9d:9f:b6:02:37:37:19:ff:
9e:26:29:37:31:08:76:fe:ff:34:0a:8a:81:13:41:
45:60:30:26:95:ab:14:e7:26:2f:08:71:c1:9c:15:
82:83:8c:d5:10:dc:8f:d4:1a:1e:d9:dc:8d:cc:b6:
78:87:d9:33:26:a0:71:19:82:4c:cd:eb:6d:6d:d4:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:14:B3:FD:11:19:5C:11:15:B0:7E:56:12:21:76:91:C5:44:43:1B
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6d:11:28:ea:c1:0e:16:4c:18:f2:53:e8:08:84:01:8b:4a:
ad:69:33:5f:17:93:e5:d3:2e:6b:7c:42:ac:2b:9f:15:1b:17:
1d:f4:4d:15:3c:bb:e5:62:ce:ff:a1:d4:4f:23:6d:86:93:b0:
73:2c:77:e2:25:01:2f:43:08:82:aa:da:be:ac:54:59:8a:10:
22:f7:e0:35:e4:e8:41:a7:70:6f:e9:ad:b3:97:a0:f7:10:b0:
f4:1a:fe:7a:2d:1b:1e:15:00:2e:a1:7e:2e:b5:23:0a:10:d1:
7f:2a:90:ef:be:47:38:69:dc:f5:65:7e:52:d9:66:5d:e6:86:
2e:8f:f8:f9:eb:4b:f9:2b:7a:96:91:fc:2e:79:24:6a:d5:cc:
12:44:4c:4b:25:e6:b5:c8:a5:78:4b:4a:60:a8:2a:a6:9d:46:
c2:42:b5:49:62:36:08:26:14:aa:1b:41:7f:b0:3c:81:af:e9:
de:f8:43:aa:90:de:0f:29:67:80:28:eb:b5:be:29:0c:c6:cb:
3e:16:8a:21:f9:13:c7:ea:37:8d:fd:a6:08:87:8b:6e:cd:4f:
37:7d:c3:5d:f3:e3:3a:7e:e0:c0:49:34:36:cc:b4:c7:f1:77:
27:a1:f8:26:7a:4a:66:68:15:d8:99:51:a2:c5:84:c1:34:7e:
62:81:35:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:32 2026 by rpki-client