Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
File: S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json)
Hash identifier: Z8ss+ADxphlMuMNPMWFL+0RVplUThfxOGMaScvePiIM=
Subject key identifier: 25:44:6A:76:D9:FE:6E:84:B3:89:22:F8:4E:AA:F1:55:F5:23:C4:32
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 019D3789940F5CC633B4CA7C1E4EA14632C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
Manifest number: 1845
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: A7oH_fLfnOw7C8Ezc6fn-0zm-WM.roa (hash: p+2iqj6NoeYI6sIm7F3U7seEwOT2LgHbpeFNruLRw/8=)
2: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: ueflObleWqi560vBECGSiSESodQTUPIVAET6V9D1HFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:94:0f:5c:c6:33:b4:ca:7c:1e:4e:a1:46:32:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=25446a76d9fe6e84b38922f84eaaf155f523c432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:f7:32:ad:3c:bb:0a:cc:eb:3d:66:dc:6c:
f2:63:e3:e9:ce:a7:bf:cf:cc:f1:c9:91:f9:e0:6a:
d8:ea:39:cb:f6:04:38:94:a9:21:09:1b:08:7a:48:
21:04:09:6b:f0:6b:16:de:c9:05:54:34:23:1e:01:
f3:77:ca:ff:6e:97:39:b2:4e:4a:f3:47:18:e4:fa:
aa:e0:bd:f2:0b:f8:80:aa:85:24:ee:26:e7:b9:0f:
90:9d:67:f1:34:9c:cd:c8:a5:7c:78:80:9b:d6:38:
7d:e2:b6:7e:04:6d:56:45:c5:90:b8:14:64:e8:f7:
c8:db:1c:74:71:c6:8f:ad:3c:b2:48:d3:35:cb:f9:
2b:a9:14:d0:b9:44:5d:83:e8:0d:30:cf:08:bc:57:
77:92:f6:3e:d8:18:6d:17:be:c8:5b:f7:83:55:e6:
61:05:85:90:27:de:ba:f8:24:c2:f9:a9:0b:d6:9a:
cd:e2:16:e7:16:89:3e:37:e8:04:b4:3c:1b:0e:06:
c3:f7:76:63:80:67:25:a8:4d:d3:5a:44:6f:64:d8:
66:ac:e8:22:65:26:fc:c1:c5:79:5a:f5:b7:7e:bb:
6c:c9:98:41:76:0e:91:d3:5c:c7:05:47:33:82:5d:
bd:be:cc:e1:86:45:3e:7f:7a:26:f6:ae:76:ca:9b:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:44:6A:76:D9:FE:6E:84:B3:89:22:F8:4E:AA:F1:55:F5:23:C4:32
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b3:f7:90:9f:4e:18:be:bf:8b:d3:e1:a0:23:09:2d:7a:99:
39:ee:ee:43:f9:ef:0e:34:fb:6a:ee:8c:18:04:bc:48:bf:e0:
9b:bd:a5:f5:76:9d:13:69:14:0f:fe:8f:a7:04:22:33:bc:11:
e4:84:6a:19:2c:8c:c7:ed:23:04:b3:53:ed:1c:12:31:1f:18:
18:8a:5a:c0:c4:5c:ff:6c:b0:50:fc:8a:9a:c5:73:a4:bc:76:
19:97:bc:27:69:5a:75:69:2e:c3:d5:5d:90:2d:3e:db:e8:f1:
e8:ec:87:b5:f1:b6:d1:89:f2:0f:73:ed:04:e8:3c:10:e3:9c:
6c:09:43:b4:2d:d5:30:e8:a1:eb:65:01:b4:db:1c:56:14:fb:
d6:72:c4:d8:8b:33:5a:42:15:3a:ec:66:7a:49:73:ae:31:15:
a5:3b:08:1f:a6:14:f3:91:f1:ce:a0:e8:0d:4a:da:6a:84:eb:
cc:f4:99:0b:0c:8f:fd:bb:a2:3e:cd:6a:6f:fa:21:aa:23:63:
66:b4:98:dc:3e:7a:77:d1:a5:40:ca:d9:f2:31:2e:66:26:45:
05:d3:2b:58:78:06:26:2c:32:1b:7b:91:59:c6:de:07:ae:c3:
2b:0f:bc:20:04:e7:c0:93:32:10:13:c8:35:0a:29:af:20:70:
81:8e:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:17 2026 by rpki-client