Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: Vc76BQzsBrUtJgKnBv4tYQqgQJgz4cL/uAzL9ECpeHM=
Subject key identifier: 9F:78:B6:61:2D:B6:72:4B:C0:EE:69:92:51:D2:0E:76:D4:EE:E1:EB
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 019DEF370668F0570415008029D5DC9EDA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 18F0
Signing time: Sun 03 May 2026 19:00:53 +0000
Manifest this update: Sun 03 May 2026 19:00:53 +0000
Manifest next update: Mon 04 May 2026 19:00:53 +0000
Files and hashes: 1: 1j-cndh73up45TjcJHDMi8wQ8Xc.roa (hash: KpN3w6f7/yCpGmCh1vdlXsD6GVlxoKm9AQfV9ZcUMXk=)
2: 6E64GXrgmXNa9YSBiY3OujAPTwo.roa (hash: yS+gCnb/d3MQ3vFkPLZAQVV6eBJuu9tDUWcxSfLgTIU=)
3: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: SOYXAiBXQsiRWVUiQGv6hJdD5GgRIHf3NbCZBOcwZ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ef:37:06:68:f0:57:04:15:00:80:29:d5:dc:9e:da:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: May 3 19:00:53 2026 GMT
Not After : May 4 19:00:53 2026 GMT
Subject: CN=9f78b6612db6724bc0ee699251d20e76d4eee1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:72:60:a2:b9:48:51:4a:11:46:ba:01:01:
f5:b7:06:d7:bb:66:30:a8:1b:e2:e5:7e:a2:5b:d8:
09:99:fd:68:d0:00:6c:59:19:e8:af:ef:e5:63:f3:
f7:b8:96:af:c0:b3:f7:ac:09:fe:c4:79:bd:9c:31:
35:bd:9f:2b:75:a8:ee:a3:65:db:f0:1b:a4:57:68:
57:be:6d:a1:03:a2:12:61:57:a3:90:5b:6b:e4:a1:
7d:fe:53:53:d4:f3:f2:c5:93:4e:d5:94:e2:54:a8:
80:56:9b:f9:04:12:08:5c:81:ee:be:e7:1f:49:78:
33:0e:6b:72:ad:64:e2:c6:0e:39:a0:87:57:c4:17:
2e:cc:dc:78:f7:8e:94:88:86:2b:87:e9:39:38:07:
60:5b:c6:e2:58:5f:18:d5:41:fb:fa:cc:34:86:b7:
6d:dc:39:06:cd:8f:56:00:b0:8d:a8:34:5b:77:7d:
2d:65:e9:99:fd:4f:fa:1d:5a:a7:ca:c3:e3:15:8f:
fa:c2:e6:1e:c6:0e:84:74:16:c8:c0:6b:14:3e:55:
58:8e:bb:bd:3d:37:a4:e2:77:97:ff:18:e1:19:4a:
d3:6d:06:e1:1b:c5:79:70:73:01:be:80:bb:ba:1a:
3a:95:79:4c:31:16:67:f8:31:5c:ff:a1:62:70:0b:
e0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:78:B6:61:2D:B6:72:4B:C0:EE:69:92:51:D2:0E:76:D4:EE:E1:EB
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:db:e5:d8:35:e8:59:4a:eb:69:b4:fa:82:b9:00:6c:08:43:
75:ac:7a:08:d4:e1:bd:d3:d3:85:cb:10:83:d6:cb:0c:89:3e:
9d:37:5c:a2:d3:ba:65:8c:f3:7d:fd:0c:df:48:2e:43:d5:b4:
66:37:e1:a4:df:e7:59:5c:65:d1:4f:03:1b:e5:63:47:80:33:
2e:92:47:cd:28:64:5b:6b:a2:e2:3d:6a:60:a8:29:74:54:10:
5f:8a:7a:3a:99:ec:55:d8:21:b9:a3:f2:d7:bd:1e:a5:69:cf:
c7:cd:9d:d7:6d:1e:ac:fb:ec:68:33:5c:13:b1:33:d7:fb:d5:
df:88:16:af:6d:9c:f8:98:22:f4:c2:16:a0:66:3b:68:df:b3:
86:dd:80:fb:c9:8c:82:0a:b2:0d:39:e9:ca:67:7a:80:74:98:
15:56:18:01:1f:90:e6:48:6d:8f:98:2c:7e:5c:7b:c1:f7:71:
9d:43:bc:c1:70:1d:75:01:e2:74:a2:f3:72:cf:7b:ef:65:e1:
e9:6e:f6:02:d5:c9:33:f4:af:31:f8:08:45:f8:f5:67:c0:12:
1e:c1:e4:1e:5d:05:ac:48:35:35:95:57:c6:b0:c6:4a:70:35:
05:e9:5e:cb:43:d2:9c:32:66:78:bc:54:91:44:a8:f8:35:6c:
c1:32:4f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 01:30:07 2026 by rpki-client