Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File: S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier: BtKmqowLei3YYHkvjJ9fIrG7pewbIEhpPlvRKjcW1lI=
Subject key identifier: 9C:5A:4C:8E:13:21:B4:56:B0:6C:F1:84:7D:96:2D:67:F9:EB:B9:08
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 019D382DD3A44975847F124E3B49B3B68CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:20 +0000
Manifest this update: Sun 29 Mar 2026 06:00:20 +0000
Manifest next update: Mon 30 Mar 2026 06:00:20 +0000
Files and hashes: 1: P0ZNxLk1sdECgdi1Tm-5Bi4YFqM.roa (hash: 3tOX45ZYiLFtcCM+7LWZEAit3POwqgmH66Hrj3e5Vfs=)
2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: SxGoCR6U4r4RLAwo2WYR5jf/kVWr629VycHMQ5VSBCg=)
3: cZRfewhlPFdbhtSL2-IO-d8yDz8.roa (hash: /ZuVeMzeVzi++K3VrthuhTskTcvhDVAWNr2p0osd/jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d3:a4:49:75:84:7f:12:4e:3b:49:b3:b6:8c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Mar 29 06:00:20 2026 GMT
Not After : Mar 30 06:00:20 2026 GMT
Subject: CN=9c5a4c8e1321b456b06cf1847d962d67f9ebb908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5e:ab:7a:76:59:3d:d1:9a:e7:bd:49:45:ef:
56:6c:56:00:24:c9:90:72:58:78:79:60:73:7e:45:
db:d3:87:ee:03:54:40:f6:20:6f:f4:5d:6b:e7:c2:
7c:bf:d1:54:03:f7:6b:4b:a6:bb:26:f5:4b:ff:17:
f9:55:52:03:73:83:34:e4:e9:65:69:d8:86:26:f0:
2d:ba:8e:3b:bd:56:6b:30:bc:d6:b8:02:b0:2a:05:
13:a2:f6:ee:5a:1f:59:e0:20:c6:ac:a7:ea:35:1f:
e3:df:8e:a7:08:6e:2c:43:6d:25:e7:01:36:5c:dc:
70:e1:ec:fc:ad:63:02:10:61:4b:ec:97:f9:0f:ec:
62:e9:9e:a9:11:d2:f5:2e:a4:17:87:ec:33:5c:90:
74:0c:d7:aa:a6:16:1b:e7:ff:1d:64:67:3e:ca:7e:
a8:ee:12:ed:1c:2b:7b:f5:3d:9b:a3:1f:5b:e8:18:
06:de:40:99:8a:76:6d:97:05:a6:dc:30:4e:ff:4e:
d2:d4:a1:df:82:6d:9e:3f:2e:9c:f4:85:89:c3:ce:
a7:87:0d:33:84:b8:fb:5d:a3:e8:f6:c3:98:62:28:
05:d8:9d:41:20:94:d3:06:d6:4c:74:f2:4c:81:16:
05:8c:b3:c0:c6:c9:31:2d:a6:32:1e:47:cf:b1:ad:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:4C:8E:13:21:B4:56:B0:6C:F1:84:7D:96:2D:67:F9:EB:B9:08
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:28:71:06:f0:3c:5a:ca:67:00:0d:14:98:00:b4:69:80:b3:
b5:98:c6:93:bb:cb:04:99:02:97:b6:6d:76:2b:30:1a:c7:d0:
49:ec:89:a9:70:b2:f7:3f:4b:16:c5:f5:42:52:e6:f3:6d:a9:
9b:45:81:f3:bf:e4:a4:8b:5f:98:3d:c5:4c:9a:93:a1:76:ee:
98:dc:57:d4:68:f0:cb:a2:b1:92:20:63:d9:a2:37:83:7b:8d:
7c:e0:ca:43:70:f8:84:02:e2:73:58:a3:f3:bd:bc:6c:25:5a:
37:28:95:a3:fd:29:af:21:ea:72:d9:91:7a:e2:ba:5f:23:38:
79:f5:3f:e0:7e:eb:56:1e:be:1f:f8:2f:c7:1c:35:0b:7f:02:
ec:25:07:12:cf:ef:6f:a7:ba:44:39:89:8b:02:74:df:f4:fe:
53:bd:92:3e:ce:3b:c3:01:9a:3a:21:5f:80:c9:a5:2d:51:e6:
88:cd:12:f4:0e:0b:f4:6e:3a:f9:00:c3:71:aa:da:8e:55:e3:
61:f2:56:e2:21:6e:90:60:d3:86:c5:e3:81:5b:4e:b5:32:26:
b6:b3:de:35:50:05:f2:c9:e4:ff:1d:f0:a6:64:c6:71:4e:64:
5e:bc:3d:b4:76:82:05:02:a1:ab:8a:2a:a4:42:a7:4b:10:f6:
e7:af:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:31 2026 by rpki-client