Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: 3vbXHqW41KpM2Vob6hm0FBooBEe1xiGdfcH4uv0bILE=
Subject key identifier: DD:20:3D:C6:7F:80:F9:A5:EE:88:72:42:2B:68:D1:2A:B2:D6:D9:EE
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 019CB40062F0D5E0F2E0B0365A9183769B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 1866
Signing time: Tue 03 Mar 2026 14:00:50 +0000
Manifest this update: Tue 03 Mar 2026 14:00:50 +0000
Manifest next update: Wed 04 Mar 2026 14:00:50 +0000
Files and hashes: 1: 2km5CePTq7_BnWDbbdzBAnFRzXw.roa (hash: odLHriDBowdLruRMyp7oP30CTWfC4IMigBLHf3TCMXY=)
2: P3pMTXaPEJ3pF-gEwjCXB342FMw.roa (hash: ctsyJFlW0Oa24uSpietN5XHoRYpf4UiDm+Wb7QP+anM=)
3: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: 3vbWgG8bB1QtU/bNblWZgKbeqDTE4BWAe5z96H5JZIk=)
4: sncS8S2NsUSvaykCM37LNBlWYeU.roa (hash: qh0is7RUGO8WSotkmc+90Ufb2ZAu2P4HHEPVCF4ovi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:00:62:f0:d5:e0:f2:e0:b0:36:5a:91:83:76:9b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Mar 3 14:00:50 2026 GMT
Not After : Mar 4 14:00:50 2026 GMT
Subject: CN=dd203dc67f80f9a5ee8872422b68d12ab2d6d9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:ef:1f:46:fe:41:1d:ed:cd:90:b6:b7:08:
3f:61:11:77:24:41:94:ab:98:6a:a6:ad:a7:4f:c4:
85:61:70:2f:a0:b4:4a:47:50:15:75:64:bd:3d:76:
3a:c1:f3:cc:f2:c5:4b:a0:91:09:3d:ed:bd:5f:96:
ba:be:30:7b:f0:ca:1b:2b:00:96:10:03:20:2d:90:
ef:f9:ec:90:51:10:d3:d5:27:44:1f:15:9d:48:cd:
d4:b3:76:69:86:9e:38:7a:ba:98:ca:39:95:14:1f:
d2:29:54:1c:1a:12:25:22:30:08:f7:ff:43:dd:ab:
c5:96:f8:4e:81:66:96:57:a3:b9:19:fc:3d:5e:df:
f2:c3:09:db:e1:28:58:75:15:5d:3c:48:54:67:24:
39:53:2f:31:9e:8b:dc:49:b3:78:6e:cd:cf:e7:24:
88:02:35:16:4d:ae:32:22:d7:ab:81:66:48:1c:e2:
d9:5f:77:bf:2a:b5:59:02:86:7b:74:bc:59:cb:e3:
ff:a1:08:1f:6c:28:48:6d:05:91:9f:cd:3f:66:66:
40:e1:42:23:74:5c:26:47:9e:c8:4d:1c:80:fb:8d:
ce:6b:e1:fd:6d:07:1e:79:f6:8e:f7:a8:34:de:f9:
bb:59:a7:09:ba:8a:16:db:15:0e:29:ff:dc:e7:4b:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:3D:C6:7F:80:F9:A5:EE:88:72:42:2B:68:D1:2A:B2:D6:D9:EE
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2f:82:30:5c:f1:67:b3:d5:d8:ee:6a:72:99:33:fc:9c:d0:
98:73:4f:e5:8b:57:5a:5f:a8:4a:c9:f8:1e:cd:91:e6:ad:59:
f0:74:7c:e6:25:12:65:4d:0c:a3:58:89:19:1f:27:37:9d:e0:
f4:60:fc:73:6c:f4:bc:56:21:44:d9:70:e5:09:09:76:03:2e:
b3:d8:ea:fe:ef:05:07:ef:ce:3e:22:bb:ee:06:78:07:f4:0f:
ab:de:65:53:cb:c4:aa:ca:ef:02:fe:59:4b:5f:bf:b5:4a:c0:
96:18:ff:5e:2c:7b:b2:c9:26:74:9e:72:d0:e9:e2:b8:d1:5e:
a4:fd:72:53:77:1c:17:a3:e0:f8:49:19:94:23:e7:3e:cd:d3:
a9:b1:0a:55:40:e7:e2:1f:fa:a0:83:e5:02:98:ea:c5:3d:4f:
bd:3c:1c:03:6b:7b:a7:7b:4a:3f:ca:f7:a4:5b:96:48:70:79:
6b:81:d8:56:39:ba:fb:c6:ed:fb:88:3f:0a:ff:c2:5f:34:83:
f2:2d:3d:36:3a:97:8b:bd:c8:0b:da:2f:13:8a:d7:fe:b0:9a:
94:87:6e:77:1f:1a:40:4f:84:09:f8:10:90:dc:7a:0f:c6:c9:
39:7e:3b:82:b4:3c:13:d5:c3:25:e3:2a:46:14:9e:ef:44:86:
a8:ee:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:57:23 2026 by rpki-client