Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File: S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier: 9qTYr9k/QFM0RuaYEIjZUC12FuYscOZc87DVs+2VRhc=
Subject key identifier: A8:4A:8F:B3:45:CE:76:E5:1A:F0:2D:A7:D4:90:26:16:48:BB:AD:26
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer: /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial: 019D39AEE3A2AA1A759D620D8310672064E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:00:56 +0000
Manifest this update: Sun 29 Mar 2026 13:00:56 +0000
Manifest next update: Mon 30 Mar 2026 13:00:56 +0000
Files and hashes: 1: 4pR5djsHM2EsPS0T7-XycSFJxHQ.roa (hash: ZnT7/tbRl9arj2zsaTehaLwj6F/LDx/pFFbSN9w0fi8=)
2: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: 9GIzdBEXtIgHGsau4u7JSMlKi/L+mo9vsYGD4exAfRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e3:a2:aa:1a:75:9d:62:0d:83:10:67:20:64:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Validity
Not Before: Mar 29 13:00:56 2026 GMT
Not After : Mar 30 13:00:56 2026 GMT
Subject: CN=a84a8fb345ce76e51af02da7d490261648bbad26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:db:61:d8:55:1a:6e:77:fc:ea:f5:d4:f2:
f7:10:63:ab:fd:da:b3:d1:eb:de:1f:21:e7:de:89:
5f:c1:39:13:67:5b:f9:a7:a1:4d:18:49:30:88:cc:
89:1e:3a:6b:1c:7f:45:39:8a:1c:a0:97:33:97:f3:
7b:1e:5d:cc:73:59:a6:ae:36:da:be:42:3b:47:25:
0f:10:17:96:28:5f:7d:2e:4c:96:74:e8:f9:83:c6:
e0:bb:0b:ed:6d:bf:00:1a:ba:f7:fe:f4:34:49:ca:
0a:34:d4:2d:c8:80:47:90:c9:97:27:e6:ea:37:04:
4f:a8:84:9c:7f:44:3f:73:4e:fb:97:9d:3b:8f:64:
1c:7c:92:ce:67:30:c2:23:a7:d1:4b:28:8a:51:29:
da:6f:81:8e:3c:c3:31:8b:3a:b9:ec:45:13:d0:08:
aa:ad:df:9c:1d:c5:72:40:40:56:71:89:0c:dc:a1:
2b:5e:3d:f7:7f:b9:d6:f9:30:b9:02:66:98:bf:8c:
23:ad:a2:18:6d:7c:5f:48:b0:d2:2c:4d:a3:71:f8:
77:85:02:82:81:01:31:07:0d:fb:92:f0:35:ff:fe:
2b:48:b0:c0:f9:70:f3:75:4e:56:d3:47:87:fb:95:
c6:d5:4f:74:b8:71:35:09:1b:71:06:07:5a:35:dc:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4A:8F:B3:45:CE:76:E5:1A:F0:2D:A7:D4:90:26:16:48:BB:AD:26
X509v3 Authority Key Identifier:
keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4a:49:ca:75:f3:74:f6:7e:d8:8f:2d:d8:63:a2:f2:82:3f:
53:b6:31:f9:7d:bc:c9:59:03:83:a6:33:ca:35:b4:aa:8f:bb:
37:ba:84:cd:2d:83:ba:a8:d7:16:08:e0:59:5b:ba:fd:06:dc:
7a:60:80:74:d4:10:18:03:e9:d1:f2:a7:74:93:63:68:b4:1c:
1e:73:30:5a:63:90:5c:b2:02:21:3c:b1:99:49:e3:5a:c2:25:
c6:44:1d:4e:c0:42:1f:6d:d4:54:1c:25:86:5e:bc:b1:84:42:
c4:1c:02:39:73:28:e8:a5:cc:23:f1:c6:8c:e7:5e:41:2e:93:
d0:7b:21:dc:91:32:bf:9f:d9:dc:b7:b2:cd:11:10:0d:20:d5:
a1:2c:3e:3f:fc:71:0d:58:65:b5:0a:17:4e:36:c4:39:dc:c6:
df:c0:e9:6d:0f:0e:fd:0b:17:36:f0:55:76:d7:fb:b0:b4:b5:
c1:a6:db:10:b4:22:8e:f9:88:eb:bc:6a:a0:da:cf:e5:a4:c5:
af:8b:69:05:89:d6:36:a7:27:e0:b8:53:1f:27:45:d3:6f:67:
bc:11:e7:f2:67:f8:08:e9:a6:2a:28:82:bb:44:c3:7b:2c:32:
e7:77:f3:12:b2:88:a8:0b:b6:bf:9a:2c:2d:17:f5:f7:9e:9b:
34:7f:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:17 2026 by rpki-client