Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: YAMEjulEqpguB1BxHb8tGCKBGNNs2Kb9xKpQcOjxutU=
Subject key identifier: 94:76:B2:53:05:B9:13:78:43:0F:C2:EB:E4:B0:6B:DF:55:76:E4:EA
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 019CEFA7A95F8ECA37DB3A66B8A29D4CA14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 186B
Signing time: Sun 15 Mar 2026 04:01:08 +0000
Manifest this update: Sun 15 Mar 2026 04:01:08 +0000
Manifest next update: Mon 16 Mar 2026 04:01:08 +0000
Files and hashes: 1: 6E64GXrgmXNa9YSBiY3OujAPTwo.roa (hash: yS+gCnb/d3MQ3vFkPLZAQVV6eBJuu9tDUWcxSfLgTIU=)
2: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: UTFBscqwW3DkH7IMZiKBvKdgvwBHRmLLnXBZxa1CkmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:a7:a9:5f:8e:ca:37:db:3a:66:b8:a2:9d:4c:a1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Mar 15 04:01:08 2026 GMT
Not After : Mar 16 04:01:08 2026 GMT
Subject: CN=9476b25305b91378430fc2ebe4b06bdf5576e4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:17:cb:7a:12:11:53:11:d1:8d:3b:ed:36:
cc:2a:11:aa:08:58:c4:2a:c0:7e:61:73:f8:e9:8a:
98:28:eb:6f:fe:27:46:66:f6:6f:34:11:e0:61:4b:
47:0c:ed:76:6a:eb:0b:4a:26:ac:db:66:dc:34:a2:
27:a2:07:7d:82:1a:85:ef:c6:50:34:1a:af:cc:cb:
f9:7d:22:29:3f:7f:ca:f1:07:64:07:b9:ac:56:5f:
9f:82:69:42:e9:03:aa:b9:e8:fa:24:ed:6e:3e:45:
77:ca:c4:33:fc:3f:15:1c:05:02:8a:d0:7e:4a:a0:
5e:16:f2:fe:8d:02:3d:25:11:99:be:9b:cd:3c:4e:
88:dc:77:98:65:65:d6:fa:45:7d:97:c0:04:3c:ee:
70:43:55:04:ce:24:78:f3:1d:bc:74:54:1a:f0:aa:
1f:5b:ab:c9:39:c7:ab:d2:42:68:81:63:64:6c:04:
39:68:61:1c:ce:e3:03:f5:9a:c3:fe:34:dd:47:1b:
e6:f8:32:66:7e:c9:51:4f:f1:a6:46:39:3f:7c:3c:
5d:0a:6a:10:f0:93:b1:7f:7b:ca:1a:e0:9c:3c:a0:
fd:35:41:0c:fa:7b:7e:fb:4c:f0:67:e0:ae:4d:a8:
0d:db:30:fd:a5:08:3b:b7:33:43:74:f5:ef:13:87:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:76:B2:53:05:B9:13:78:43:0F:C2:EB:E4:B0:6B:DF:55:76:E4:EA
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ca:bf:89:6b:6d:f3:7e:4e:8c:26:e8:40:9f:9d:bf:78:1a:
9c:0d:a0:8d:09:45:b7:b6:4a:38:87:5f:d3:b1:da:3c:6f:a4:
d6:9a:5c:fa:45:c8:06:27:87:1c:9c:12:58:a2:cd:f7:60:ad:
8f:03:27:05:63:50:94:2b:07:e2:6b:a9:1f:7d:ec:62:7b:59:
a8:a6:ac:54:b9:95:fc:9b:87:fb:9a:58:aa:88:00:1e:4c:42:
75:a1:d8:0a:8a:6c:5a:81:5b:b4:38:a8:bc:44:5d:1b:ad:7a:
af:c7:7b:f8:b3:a4:80:0a:a9:45:df:92:c8:ab:67:c7:67:ed:
6e:3f:04:2c:ec:ca:fd:10:8f:66:e9:32:1d:b2:40:81:a8:9e:
20:ce:9f:19:93:76:5c:fc:b1:47:d6:15:1c:eb:44:45:df:8f:
4a:f4:fb:4c:5f:86:b5:d1:a5:68:fa:4a:9f:f0:2a:e5:16:58:
a4:10:a4:98:56:1e:9e:35:d5:d2:7b:92:70:50:c3:39:69:bd:
1b:86:fd:2b:15:08:44:2b:bd:c1:45:8a:bd:97:fc:bd:83:55:
01:80:38:c9:6b:2a:53:6c:ae:3b:5e:bb:96:62:17:1b:e6:f2:
e4:af:ab:a3:9e:53:f4:65:b0:e0:b2:b8:17:bc:2b:a3:72:81:
e3:26:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 13:05:59 2026 by rpki-client