Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: GvMI/hu6BRIe0DYqR8IUl0/lu9EC4Sg3O84xEk2qvXE=
Subject key identifier: 4B:4D:A6:15:74:14:5D:27:9A:68:E6:23:71:58:60:07:8A:BD:83:81
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 019D371B5A00AB2E1266B999D296BE863FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 157C
Signing time: Sun 29 Mar 2026 01:00:32 +0000
Manifest this update: Sun 29 Mar 2026 01:00:32 +0000
Manifest next update: Mon 30 Mar 2026 01:00:32 +0000
Files and hashes: 1: IIymt_gIxj1wQiBNwoPBz_3n-qE.roa (hash: yR49/WGoG8+bW4KA9QnfHmFC2bKX29hGh6JWaLIVXdA=)
2: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: HdW2d+uo2OeOdK+AZ40/yRfd+uanCutU0N8IYaj/JmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:5a:00:ab:2e:12:66:b9:99:d2:96:be:86:3f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Mar 29 01:00:32 2026 GMT
Not After : Mar 30 01:00:32 2026 GMT
Subject: CN=4b4da61574145d279a68e623715860078abd8381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:7f:95:b9:57:4a:95:57:ad:f7:8d:50:12:
15:32:c9:6f:00:b9:92:34:49:6f:f6:59:2b:db:41:
c2:8c:77:37:42:d5:69:7c:c2:94:bb:1d:71:b5:00:
5e:0e:16:e9:df:84:5a:5d:c7:10:bb:b3:0b:a2:1f:
3c:8b:bf:b7:3b:0c:9a:93:90:51:db:c6:11:14:b9:
4e:d3:71:7f:13:f8:6a:c6:09:ca:c3:0c:33:23:c4:
0d:97:1f:f8:cd:9f:27:63:54:19:48:38:83:18:b7:
d4:38:7c:e5:f9:8a:4c:d7:1e:54:bc:da:81:38:03:
57:ae:0d:cb:b6:19:a3:bf:57:e0:bf:39:3c:e4:9f:
9c:14:a8:df:d7:32:9f:a1:45:80:01:d1:c8:f1:66:
84:1d:3a:e3:ab:c1:6f:76:b5:18:05:a6:9e:5b:ff:
57:54:17:c5:51:26:90:8b:85:28:e1:96:8a:09:68:
a6:e4:10:b8:9f:8f:9a:5e:ba:73:35:59:06:1d:13:
90:ee:62:30:8e:0d:1c:ec:4c:d7:59:3b:87:1c:86:
ea:b7:f8:9e:9e:6c:66:33:75:7b:e9:41:40:b7:39:
d1:9c:42:c2:92:12:90:77:f4:f8:16:85:3b:76:5f:
23:f9:db:4c:ba:ef:74:59:55:cf:0b:da:a9:67:b6:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:A6:15:74:14:5D:27:9A:68:E6:23:71:58:60:07:8A:BD:83:81
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b7:26:a4:c0:42:76:0a:60:a6:5b:57:f9:54:31:8d:e6:f3:
6e:dd:63:9b:bc:e1:e3:67:e1:28:96:7f:17:a0:30:5e:97:31:
56:16:5e:a4:05:60:12:00:8e:c1:91:08:b6:63:92:59:26:0b:
e2:46:dd:f3:f7:74:88:af:f6:97:fb:97:7a:fa:54:39:c5:66:
93:57:24:d4:48:54:fd:54:39:e5:0b:b4:b2:22:c8:38:f3:06:
4f:4e:bf:e2:1e:e0:e3:4e:b8:77:92:41:e3:b1:f2:fb:b8:af:
60:fd:cf:b0:5d:c0:56:54:1a:0a:85:f2:e4:ab:8a:11:9c:28:
a3:35:a8:78:bf:f5:04:ad:71:74:db:e5:42:44:f0:97:db:00:
48:49:4b:06:c9:a2:11:f1:84:5f:a7:ce:9a:30:35:af:89:c0:
e0:ce:f8:87:bd:c7:9e:b6:bf:fd:31:24:4e:25:e9:2f:8d:0c:
ce:43:de:86:85:33:96:4c:69:9d:96:1c:2b:f4:80:d5:1f:36:
e7:af:13:86:44:e8:f1:b1:c7:69:eb:57:8b:f7:ee:2f:31:01:
c6:62:ea:0f:cd:fc:9f:33:f4:23:7f:a4:14:ce:4f:4b:cd:df:
47:6e:1e:e2:c3:3c:c4:fa:b3:0b:12:7c:d2:72:1e:13:2d:72:
ae:9b:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:23 2026 by rpki-client