Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: sygIdov3+KYss6uU0pwfWwAaZtMY4mWuK8z3nrg9qGg=
Subject key identifier: 0E:00:AE:80:D3:46:9C:D8:06:99:A0:DC:BC:CB:06:C4:4A:AF:27:12
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 019D081D9466ADAA7D60BEEBBD2515CB8EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 1878
Signing time: Thu 19 Mar 2026 22:00:49 +0000
Manifest this update: Thu 19 Mar 2026 22:00:49 +0000
Manifest next update: Fri 20 Mar 2026 22:00:49 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: ABiMeEnHVp48hf/otLWi5XLJk0A5lYFXsoYxs9Z7W/o=)
2: oVwWnlXDmkKEJPwq_QTywUic6pg.asa (hash: vXDqor38fMbrJg0yNnP/TrAYe/tgp8ecmN/4akEFjw0=)
3: rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa (hash: RRythu0hdE7VczlwlFEUnLZKoxWCSbWPkOFFbdjDuKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:1d:94:66:ad:aa:7d:60:be:eb:bd:25:15:cb:8e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Mar 19 22:00:49 2026 GMT
Not After : Mar 20 22:00:49 2026 GMT
Subject: CN=0e00ae80d3469cd80699a0dcbccb06c44aaf2712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:d3:81:0c:60:c7:61:a6:5c:40:49:c0:78:
cb:d9:f0:9e:86:72:bb:80:08:c3:45:25:91:7a:2e:
c5:f9:0a:dd:a8:bc:2a:8a:b6:c1:31:aa:6f:0d:af:
96:b0:e9:42:83:e1:a3:87:fc:a7:ff:ed:95:84:b6:
59:63:69:16:43:a5:28:cb:d2:53:dd:ac:7c:da:58:
40:15:8d:3d:ea:4c:80:78:d6:b2:32:3d:f4:09:d5:
7c:a3:68:e2:6a:00:9a:b2:20:a8:0d:a8:67:be:cf:
80:dd:59:50:a7:fb:32:7e:ea:9c:6d:39:6b:ca:32:
bd:3e:70:ba:6a:85:e1:20:c7:fe:f5:62:d7:94:ee:
ee:b6:69:98:ed:2c:97:c4:d9:ad:e7:fb:f1:d3:dd:
20:53:ae:0e:ef:d1:74:93:11:f7:bb:45:65:e9:86:
1d:9a:62:68:4e:43:d5:af:c3:fb:b8:18:4c:64:2b:
1f:58:99:f1:95:77:ca:c2:90:65:c7:ea:c2:ba:1e:
ed:b3:f3:02:9e:1a:dc:56:ca:ea:9f:4b:42:a3:4f:
63:5d:a4:d4:42:38:82:73:94:1d:a8:39:03:86:0f:
fb:ce:02:61:00:da:c5:0a:7a:3c:c4:22:cf:b9:1f:
9b:b2:64:10:f1:e7:39:0f:98:7e:e2:c6:37:88:7a:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:AE:80:D3:46:9C:D8:06:99:A0:DC:BC:CB:06:C4:4A:AF:27:12
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:40:32:38:71:9e:68:57:b0:3e:86:5a:69:c3:10:f9:54:bb:
a9:29:f1:42:27:44:af:c4:98:23:82:82:01:e0:2e:97:6a:ef:
81:78:e2:9f:64:fe:c4:a0:9b:cb:9d:e9:fa:ca:54:4e:55:df:
0b:21:47:84:35:c0:03:a6:77:a9:b3:1a:ec:2c:59:5c:ef:e6:
72:03:f3:a3:97:8c:ce:3b:0e:e5:4a:7a:02:64:14:77:58:a9:
90:fd:72:f4:8f:73:79:d2:cc:c1:1e:1b:2d:23:71:3f:53:c3:
ef:ac:24:96:42:28:f0:84:ba:ea:84:0e:81:6a:80:07:38:a2:
ab:a2:9d:de:6f:07:30:35:2e:a9:d0:83:3a:3b:ac:54:43:f6:
87:25:99:cb:55:fb:68:a3:e9:9c:4c:33:05:14:b0:95:41:23:
9b:01:76:fb:84:07:3f:35:37:ff:6e:74:2c:69:ef:38:b6:83:
82:cd:35:d3:dc:09:b2:95:ec:f1:f1:6b:ce:e2:3e:99:e1:b1:
a2:ae:72:49:2a:ff:17:7f:25:de:e1:4d:ec:88:dc:15:77:ee:
9a:8d:ae:58:46:9c:d3:30:c0:55:8c:44:8a:0b:85:c5:ad:75:
7d:cc:bb:ad:4a:b6:6f:20:94:50:b2:06:50:02:46:80:3f:8a:
53:d3:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 03:17:25 2026 by rpki-client