Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: cUJESTbwLgetL8hXCac8qCrShp1+5s7c0KmMle3kQj0=
Subject key identifier: 9F:2E:EE:FB:BE:30:3D:6D:FB:B0:8A:2D:8D:BC:77:6E:A9:B7:4F:2E
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 019D38667A7E3FC38638AB61AF58ACB0AAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: 1AZM/udm89WOA/QOXPk2UEvnLqeTyxvOKy1U7gZSBZw=)
2: gArRCC3q1YnlfTTgUixtQVGvcFs.roa (hash: narCCTYRY9LX6p6g8xSiiHiFz+JGuLFkwOfUQUNN3Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7a:7e:3f:c3:86:38:ab:61:af:58:ac:b0:aa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=9f2eeefbbe303d6dfbb08a2d8dbc776ea9b74f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:b1:f9:f0:78:61:26:a1:22:0c:7d:59:39:
29:c4:7b:e8:89:4d:56:99:70:58:1e:4c:d2:49:99:
a8:82:de:02:d4:b0:0d:97:ec:a5:c3:8d:39:9f:ce:
86:96:bd:58:ca:96:a2:74:f7:59:19:43:b8:68:55:
bf:33:ec:05:a5:9a:1a:14:75:4b:de:8c:85:92:c7:
b4:2b:14:f5:82:7e:1f:2b:dc:be:95:d5:78:86:6c:
e5:56:a8:90:b3:06:37:fa:40:26:82:ae:8e:44:79:
f3:8b:e7:96:3c:24:74:45:3a:da:44:7b:48:12:c7:
3e:32:ee:04:10:1a:04:1c:d9:92:e9:9f:89:51:8f:
5b:64:54:87:dd:a6:b7:f8:e0:b1:83:75:0e:dd:21:
e5:c4:0f:da:e4:ad:fa:6c:e3:df:84:2c:91:2f:94:
46:f5:6f:36:60:b2:03:36:23:d4:06:92:c2:c5:76:
0e:a8:28:8e:57:90:31:2c:da:65:8e:2e:70:e3:b7:
a7:a2:6a:91:32:b6:d0:7e:3b:ce:05:e5:9a:cf:0e:
15:db:25:19:c8:85:43:91:19:71:58:e8:b8:80:8d:
18:0e:01:54:a4:07:00:7c:b5:81:a2:15:a9:0a:85:
5b:a0:1a:2b:0a:2f:95:4b:b6:c1:28:18:80:95:0f:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2E:EE:FB:BE:30:3D:6D:FB:B0:8A:2D:8D:BC:77:6E:A9:B7:4F:2E
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a5:88:e3:e6:b0:4f:85:a2:d0:8b:e8:b6:f3:05:d0:ab:92:
c3:e4:0e:68:09:13:6c:16:9b:39:f0:09:e0:6c:f8:1f:79:24:
8b:c0:ea:3f:23:0c:3c:8b:c9:cc:11:84:1b:0a:ec:a8:cf:25:
ef:5b:05:98:c2:91:63:b7:d1:b9:b7:3c:31:0c:b1:c4:66:55:
ce:3d:b5:92:ee:7d:ae:6c:22:0e:35:89:7f:47:96:06:cd:86:
be:b9:4d:59:29:ca:b6:ab:bc:e3:e6:dc:ff:d6:39:3e:0e:22:
18:b8:60:a1:56:69:97:cd:d5:e2:af:14:af:dd:41:5a:56:ce:
2d:01:c3:b1:a2:ee:8d:62:63:a7:53:28:35:03:68:50:d0:d5:
80:d4:05:1b:1c:88:75:b6:c9:de:25:38:2b:7f:1f:83:49:de:
b0:85:1d:a8:e5:73:db:8c:c3:17:cf:b0:be:b9:33:44:fc:5f:
94:98:6a:12:87:c5:f4:61:bf:0b:56:ad:85:9b:3d:6c:b2:b2:
79:b0:ad:f1:09:63:eb:c7:0d:76:8e:3f:e0:7b:c5:9d:3c:77:
c1:78:d2:7f:e7:b5:0c:1d:6c:27:9e:1f:fe:45:d5:8b:8a:be:
ae:73:37:04:c7:70:62:e2:ee:b2:f9:4b:17:b2:6a:ec:1a:84:
5a:67:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:22 2026 by rpki-client