Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier: nKqDZnYtTqEU7z4lihkoA+s6Yz+u2KIq9G8lahaCmJ0=
Subject key identifier: 4D:D0:51:AD:07:86:91:7C:D5:46:5D:FA:04:30:BD:CB:68:0A:A5:28
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019E8835CC73EA4ED4D84026DEFA0665B989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number: 0239
Signing time: Tue 02 Jun 2026 12:01:27 +0000
Manifest this update: Tue 02 Jun 2026 12:01:27 +0000
Manifest next update: Wed 03 Jun 2026 12:01:27 +0000
Files and hashes: 1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
2: 1-IsyXimgStm6iFdQzOtOH_LpB-w.roa (hash: cwbLRv/LdraPm/ncl7j6i/Fdy+jmyYNWU7iKuNjynNk=)
3: 1-Ltnis49LppJocd3k7gXrTQpkNg.roa (hash: fES976vUY7+JDOXisLep1HRMnouImf0rWbzUHBGyogQ=)
4: 2Za9dVMumbJLSFClL77aVj2ULF0.roa (hash: qlmsqbUXglSigqm8nRIHNKmW1s8wDeCWA2RRZbXlpQg=)
5: Qa8jr4r9oUMQqXWjabdDfQ7gmpU.roa (hash: THpSlkIZjg5gNVTxY4YREvnaBYJcv0jhBmfGA2+voJQ=)
6: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: Y4qNVQjjVKSQC/uL7dZK26bVIQSC8KyB+mz/1gsz670=)
7: WwtbUDEcYKOBmbiB4ccytduAdws.roa (hash: 1KKu453lPDcs/h9S9JRacXBXWjGi0AAYJKEx+9blrYA=)
8: lh9y2z8BjPboXQB7En0Art145ss.roa (hash: WeVrGCLtXYuvgZeAFcelbJV4mJDRhqOFt2yLKIQQeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:35:cc:73:ea:4e:d4:d8:40:26:de:fa:06:65:b9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Jun 2 12:01:27 2026 GMT
Not After : Jun 3 12:01:27 2026 GMT
Subject: CN=4dd051ad0786917cd5465dfa0430bdcb680aa528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:5b:0f:da:d7:a4:e7:d8:43:84:10:07:15:
7b:61:e6:0e:15:86:a4:2a:b9:96:10:29:79:ad:92:
89:1b:3e:d1:16:89:e0:29:95:d5:2d:f8:46:fd:11:
c3:df:8b:9e:a2:df:84:8b:58:84:e0:73:6c:69:db:
06:7b:e4:d3:d3:b8:6d:41:8e:cd:f7:c2:8b:d8:48:
b0:8a:c3:56:51:f9:de:64:65:58:65:d8:ed:2e:35:
29:26:cd:92:90:6c:c1:54:e4:a1:24:27:a7:34:fa:
7e:ab:ea:92:04:b9:86:fc:de:0f:52:6c:45:f1:f3:
7e:2a:e1:e4:af:5f:89:5d:a1:d9:d3:13:29:c9:c4:
8c:51:31:84:3d:0a:03:c0:af:1f:5d:48:94:c3:28:
08:f5:16:b4:01:1d:43:b3:47:fa:3f:a7:c4:25:97:
0f:04:31:8a:e2:e6:ef:00:a4:15:d0:c0:fb:91:10:
a7:5a:3f:3e:fb:12:39:8f:cb:b2:b8:5a:57:bc:cb:
fc:cf:e0:e6:56:03:57:5b:c5:82:b1:74:b6:2a:b1:
cd:1e:0b:85:67:5f:48:fe:01:9d:b2:82:84:28:fa:
e7:09:1e:30:fa:97:ee:7f:cf:ac:27:fa:c1:7f:43:
25:41:5e:1c:b4:d0:03:f8:cc:f5:01:28:77:0b:3f:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:51:AD:07:86:91:7C:D5:46:5D:FA:04:30:BD:CB:68:0A:A5:28
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5e:cd:f8:80:7f:b9:51:ae:24:87:e5:b2:4e:71:8c:f2:e8:
f8:39:57:2a:df:f2:39:89:8f:1e:3f:ff:28:92:52:51:1a:a2:
83:2b:6d:cd:b7:63:a3:af:b8:cb:70:58:d1:21:95:50:8b:af:
65:f0:1c:0c:aa:71:67:e6:77:1e:dc:5b:5f:8f:00:f1:29:2a:
f0:3c:88:9a:21:66:0d:5a:92:ee:9a:64:03:85:0d:a8:c2:04:
15:5a:da:c7:35:03:6d:f5:e3:97:40:11:57:78:a2:bc:6b:b8:
68:24:6a:4f:53:6b:ba:57:83:b7:bc:a2:f9:df:b6:a5:61:8b:
de:29:03:50:ce:cd:50:5a:2f:55:a5:87:38:40:92:81:ff:f1:
2d:f1:51:38:4d:ca:66:8d:bf:13:83:70:c6:38:25:d2:02:c9:
19:21:9b:75:83:a9:85:1a:a4:b4:87:c7:93:ed:3d:d0:d8:14:
50:03:5e:e6:c9:ee:8c:d9:8c:76:3f:2f:84:5a:ca:0f:3a:1f:
6a:c4:b4:38:c0:20:99:ba:2d:b7:ef:75:0d:cb:b0:58:9b:fe:
3e:ce:e4:bc:4b:b0:1a:00:03:03:29:e8:db:ac:e7:fd:05:8e:
45:98:a7:6f:19:f2:95:c9:b9:6d:b4:62:8e:a4:8c:91:e4:b1:
6f:50:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:21 2026 by rpki-client