Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier: 0mMA6XSXeoUULCs0F1yIuM/3amRp+VxeLLy0x8VL6lU=
Subject key identifier: 89:FC:76:FB:36:6B:F8:60:D9:01:D5:57:78:A9:3B:BE:E7:35:CB:C4
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019DA076AAC4C56BF9B1EE88576F19740EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number: 01C1
Signing time: Sat 18 Apr 2026 12:00:24 +0000
Manifest this update: Sat 18 Apr 2026 12:00:24 +0000
Manifest next update: Sun 19 Apr 2026 12:00:24 +0000
Files and hashes: 1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
2: 1-IsyXimgStm6iFdQzOtOH_LpB-w.roa (hash: cwbLRv/LdraPm/ncl7j6i/Fdy+jmyYNWU7iKuNjynNk=)
3: 1-Ltnis49LppJocd3k7gXrTQpkNg.roa (hash: fES976vUY7+JDOXisLep1HRMnouImf0rWbzUHBGyogQ=)
4: 2Za9dVMumbJLSFClL77aVj2ULF0.roa (hash: qlmsqbUXglSigqm8nRIHNKmW1s8wDeCWA2RRZbXlpQg=)
5: Qa8jr4r9oUMQqXWjabdDfQ7gmpU.roa (hash: THpSlkIZjg5gNVTxY4YREvnaBYJcv0jhBmfGA2+voJQ=)
6: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: lntNX2o6iqgd1Sle/xO211rkkDeIotn2a7oC9q9QyOo=)
7: WwtbUDEcYKOBmbiB4ccytduAdws.roa (hash: 1KKu453lPDcs/h9S9JRacXBXWjGi0AAYJKEx+9blrYA=)
8: lh9y2z8BjPboXQB7En0Art145ss.roa (hash: WeVrGCLtXYuvgZeAFcelbJV4mJDRhqOFt2yLKIQQeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:76:aa:c4:c5:6b:f9:b1:ee:88:57:6f:19:74:0e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Apr 18 12:00:24 2026 GMT
Not After : Apr 19 12:00:24 2026 GMT
Subject: CN=89fc76fb366bf860d901d55778a93bbee735cbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:d3:98:1e:5c:5b:87:87:c3:ed:3a:e3:76:
50:75:52:2a:a2:ff:26:6d:02:0d:65:a8:de:53:57:
8c:17:66:17:12:ca:bb:1c:c7:25:37:26:eb:b0:1f:
8d:96:20:6d:b5:38:bf:16:e3:50:ec:01:dc:82:41:
fe:f1:4f:43:03:2e:69:86:0b:a7:ac:94:09:54:cb:
cf:11:85:77:04:00:11:d8:9e:6c:65:bb:80:d7:06:
28:c7:c1:05:7f:4f:a1:80:24:55:3f:80:f7:f5:ee:
ce:ba:fe:51:25:d5:f2:65:4b:2b:1a:94:8c:e1:88:
a1:d8:59:c5:b4:de:26:58:27:25:70:33:6b:03:01:
30:5c:d9:ae:52:4e:46:f1:48:8b:5d:20:29:d8:c0:
a0:78:f9:ac:69:d4:1d:dd:bc:7a:f0:dc:10:c5:4e:
2b:58:ae:3b:64:d8:e6:bf:88:e4:14:1e:b7:31:bc:
ac:a2:24:1b:4e:b5:ed:ff:89:bf:c3:af:c1:8f:a3:
a5:5f:66:2f:f7:20:59:7a:d9:06:83:b1:69:31:e6:
4d:db:01:ef:06:10:6d:17:f9:55:16:03:25:f5:02:
3a:c0:85:c6:7d:a7:81:30:99:14:3c:64:b0:3d:8d:
6f:82:9e:25:fd:af:aa:ca:2a:21:1e:a3:8f:72:ef:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FC:76:FB:36:6B:F8:60:D9:01:D5:57:78:A9:3B:BE:E7:35:CB:C4
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:64:e1:20:60:3f:13:d5:36:7b:8f:d5:06:26:1d:cd:53:51:
28:4f:ce:db:ae:d4:1d:b2:28:70:d6:65:de:74:3d:99:64:47:
89:af:fc:12:05:c7:e6:68:f2:ae:6d:a4:3d:60:34:19:d8:d4:
c0:ec:de:30:f6:84:f3:5f:c1:d6:ad:8c:68:9a:18:cd:e4:c6:
80:00:24:2f:89:74:81:90:1f:7f:ca:a6:d4:ed:6a:8b:fc:0b:
ee:d1:05:2b:b1:41:ae:f8:44:1c:a2:d6:7c:c6:cc:ba:7f:3b:
a5:8c:e8:5d:0b:29:57:e6:e9:9a:d8:29:ab:f2:de:37:7a:29:
43:e8:13:0f:a0:c3:f4:02:5b:0c:c9:3c:ae:2a:cc:33:b7:25:
5b:10:c5:ea:86:f3:6f:0c:98:e9:e8:8c:8f:4a:d9:fd:05:bf:
41:ff:7b:08:84:31:41:d7:e1:5a:73:48:5f:28:a8:f9:f5:24:
a0:d1:b7:ab:f0:33:5b:6e:db:8c:31:c4:b5:c0:02:c2:4e:55:
d5:0f:63:79:a8:7d:ea:3c:5c:23:c8:e3:c1:b8:44:98:41:fe:
65:3f:e1:24:fc:03:ad:1f:80:f9:a4:39:a7:a4:15:fc:d6:ba:
91:64:93:1f:0d:16:78:3a:ff:ea:d1:01:e8:66:a4:5e:71:ca:
4d:05:06:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:24:54 2026 by rpki-client