Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier: o4kZkirIwrWe6ATaXeccLjcNjx8zKJFPxtXTRcjFvcM=
Subject key identifier: 25:87:FE:B0:D3:DF:FA:35:84:8E:62:20:AD:77:21:69:B8:EB:7C:E7
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 019CEC6FD4094FEC91447708F323A1471521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number: 0541
Signing time: Sat 14 Mar 2026 13:01:17 +0000
Manifest this update: Sat 14 Mar 2026 13:01:17 +0000
Manifest next update: Sun 15 Mar 2026 13:01:17 +0000
Files and hashes: 1: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: YEG3kG4i4tdJHk4+eZy8lLSYNQPFLDwG/umr7iPXqdA=)
2: TK0mGYfamFzjvmIKhbAYXRFUv18.roa (hash: mEStbrRzYyO+KhV7aEr8CwcL0UmalaKifwEWpoVMtQg=)
3: Yjfy-v-HKMEWBvN16nQfiAd0IRs.roa (hash: uBEQAFGBVO4swE9ohNLmgnxXcBg9SBRkpgcmULSTVLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:6f:d4:09:4f:ec:91:44:77:08:f3:23:a1:47:15:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Mar 14 13:01:17 2026 GMT
Not After : Mar 15 13:01:17 2026 GMT
Subject: CN=2587feb0d3dffa35848e6220ad772169b8eb7ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:07:f0:56:27:02:31:b1:26:14:26:01:22:
ed:2b:02:5a:2f:6c:4e:0e:e5:30:5d:5e:a0:fb:b4:
24:8e:f8:4b:4c:da:b1:a6:a1:51:1c:14:0c:d2:1b:
70:10:33:70:53:de:07:d7:81:fd:15:04:4e:cb:9a:
68:05:6d:ac:17:25:b7:a8:ec:c2:26:14:de:91:82:
9b:9f:36:e3:b7:08:4e:c6:3a:a2:16:b8:02:3b:ab:
59:78:da:12:f3:b9:e2:ee:47:8b:da:c0:44:40:a8:
3c:be:63:85:9f:b3:b8:bb:d5:0e:18:bc:08:0e:d9:
21:35:a7:c3:a3:14:92:b4:b9:c1:96:05:04:08:9d:
59:76:8a:96:2c:18:22:80:fb:fb:3e:cf:1d:28:79:
fb:67:7b:2f:4f:7a:c5:0b:29:77:13:6c:57:89:e5:
13:02:9c:e8:c6:b3:50:ab:c3:c0:1e:7d:02:b4:85:
ff:a4:7b:a1:2b:a7:16:66:97:60:c9:c5:bf:e1:ae:
e1:6e:f2:6d:64:be:83:35:7d:a2:c3:d9:52:09:83:
23:4f:e4:9e:58:86:68:b7:df:1e:63:1b:91:17:eb:
b4:fc:0f:3d:28:b5:04:05:df:1e:28:46:c8:5b:aa:
7d:da:b1:4f:dd:27:10:70:bc:a3:10:f9:72:9d:77:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:87:FE:B0:D3:DF:FA:35:84:8E:62:20:AD:77:21:69:B8:EB:7C:E7
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:9a:ac:69:4f:23:02:fe:5b:f9:a2:de:92:91:1a:17:30:51:
64:87:b3:7b:7d:ae:cd:22:01:54:d5:86:2c:66:6c:eb:f5:90:
c7:c4:04:b3:0f:af:96:00:68:8c:5f:1c:68:04:c6:9f:14:44:
6a:ea:b5:26:d9:7b:f1:91:9c:72:40:0c:36:ec:7b:fd:b2:ba:
30:9f:ba:f0:9f:8d:f3:ea:21:91:aa:15:f1:6f:12:f6:50:ed:
8b:15:04:2c:d1:23:40:0a:c0:7b:37:2e:9a:f8:c6:f1:21:4a:
0a:a3:ee:07:a5:bd:ed:c3:5a:73:67:9e:fd:9c:14:65:c8:81:
e6:30:cb:5d:61:a8:14:06:8b:c7:d1:fd:6b:bb:a9:49:54:82:
5f:02:52:af:c4:6b:e3:f6:fb:f0:11:2d:c7:0b:19:c6:5e:c2:
1e:2d:d6:b3:4c:6a:18:32:30:ae:f5:98:ce:dd:86:a2:aa:76:
d4:4a:dd:51:e8:bd:77:41:49:15:89:e7:08:e9:3d:c6:b2:65:
5f:88:54:31:0c:75:7e:f9:ec:61:30:49:2e:50:c7:11:61:6d:
e4:23:db:b4:79:ca:bf:8d:aa:d3:00:d9:ce:d5:1e:3a:cc:28:
28:b4:8d:e4:4f:48:21:df:ba:b0:2d:e0:38:d5:e2:81:87:b7:
35:a6:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:22:21 2026 by rpki-client