Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: 0dnl9+st8LBrTRuPRoKrPQXOa/vHw7mp2ASzIO3hCa4=
Subject key identifier: 64:4E:72:92:0A:56:D0:14:25:48:D4:48:B6:5E:9C:4A:D6:EE:3D:CE
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 019EFC4C3951CDB542AF3228CB8CEE602EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 197C
Signing time: Thu 25 Jun 2026 01:01:54 +0000
Manifest this update: Thu 25 Jun 2026 01:01:54 +0000
Manifest next update: Fri 26 Jun 2026 01:01:54 +0000
Files and hashes: 1: 1j-cndh73up45TjcJHDMi8wQ8Xc.roa (hash: KpN3w6f7/yCpGmCh1vdlXsD6GVlxoKm9AQfV9ZcUMXk=)
2: 44Nps6a4A0iJ-S5FNbgCYPVDl-g.roa (hash: +egeaF2cFoduaGGr7Icg4ElpBQ+dGnmrC99v7y4WFaA=)
3: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: 1mHqS+MzzEF7J9e3QnPtssIxyuy7GpH8wqOrGxmbafg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:4c:39:51:cd:b5:42:af:32:28:cb:8c:ee:60:2e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Jun 25 01:01:54 2026 GMT
Not After : Jun 26 01:01:54 2026 GMT
Subject: CN=644e72920a56d0142548d448b65e9c4ad6ee3dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:10:5f:1e:ce:3f:28:a7:92:b6:0e:34:4b:c1:
a4:2f:4c:7f:78:c1:06:aa:6d:2e:24:2d:e3:34:bd:
cf:7e:4b:d5:20:4b:f9:6c:fe:0d:93:fa:b0:47:71:
ac:aa:dd:5c:ca:7c:58:55:db:c4:29:32:db:cd:50:
82:d7:eb:cd:99:34:57:3f:c2:78:70:af:03:54:66:
33:b4:e6:3b:30:02:22:f1:5c:44:ad:29:c7:ed:ce:
68:48:88:c4:0b:8c:8e:51:08:44:90:c2:02:11:56:
33:1f:ee:d0:65:15:c7:a4:12:c9:e7:d6:8d:70:0b:
62:2b:62:4a:3a:dd:e4:15:0a:0d:25:42:8e:07:93:
f8:96:95:d3:cc:22:af:91:ad:36:c1:77:a5:88:32:
f6:71:67:73:aa:53:cb:ae:27:db:63:b2:62:cb:cd:
6f:e7:a9:6f:b1:a6:23:06:fa:90:dd:d6:5d:c3:ba:
34:59:b5:02:89:33:a3:99:29:82:7e:0b:2a:08:77:
10:7f:f2:35:32:e5:bb:52:01:96:78:7b:95:82:90:
51:5f:8f:37:15:eb:3c:a7:b6:dd:d5:80:1c:4e:34:
ee:76:13:68:0f:8e:0b:37:2a:be:e2:72:d9:1a:43:
e6:3b:46:73:d3:3e:e3:e4:bd:b5:3e:4f:25:e9:4b:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:72:92:0A:56:D0:14:25:48:D4:48:B6:5E:9C:4A:D6:EE:3D:CE
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:78:58:45:4b:50:16:07:1c:54:a8:a4:5c:ae:15:17:98:1b:
43:48:fc:ce:d5:cc:e7:77:82:46:e6:72:b7:68:55:78:72:af:
23:a2:c6:ca:2a:d1:08:e0:41:c8:1a:42:9a:0e:1f:e8:de:c6:
16:a9:1b:c2:3b:80:b8:2c:ee:e1:fc:e3:f8:59:c8:90:7a:ac:
5e:f9:e3:9d:fb:aa:d0:62:e8:48:ec:ac:9e:ae:d5:20:46:8a:
05:2d:55:89:c3:b3:04:26:23:84:3e:83:91:ee:14:94:f8:00:
22:ac:63:ef:9d:8f:0c:52:9c:19:5a:1f:a5:10:3a:41:e7:d8:
5b:f0:7d:ab:1d:c7:cd:cf:64:41:14:b3:82:bd:60:bc:74:f5:
71:3c:c1:c8:41:62:e2:11:e9:b9:0f:b2:75:4f:4d:b5:c6:bd:
c9:6b:2c:63:15:18:ae:07:ac:e2:33:b0:11:5d:f4:3e:11:8b:
42:d5:70:66:34:2f:51:a4:4e:6d:1b:67:27:3e:ba:04:d1:5b:
ab:6c:8a:c7:c5:65:90:c9:04:08:b5:c5:7f:ed:99:71:67:3b:
12:61:c3:72:b9:f3:fc:56:ef:6e:22:0b:7e:51:62:fe:a7:d5:
78:b4:07:d2:47:4f:ab:f9:a0:d8:6a:73:f3:e8:96:dc:49:16:
38:64:8c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 12:22:16 2026 by rpki-client