Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
File: S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json)
Hash identifier: n/mBAlFSEwr4/tos5Kb240Ky9uESJTMDw3ctsMf6aT0=
Subject key identifier: 4F:B4:C4:71:0E:E3:A2:1E:A8:D6:E4:E5:3A:A9:D4:2D:97:CA:2B:41
Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Certificate issuer: /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Certificate serial: 019D3AC118BE755FB3C309698BF1EE989CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
Manifest number: 0416
Signing time: Sun 29 Mar 2026 18:00:26 +0000
Manifest this update: Sun 29 Mar 2026 18:00:26 +0000
Manifest next update: Mon 30 Mar 2026 18:00:26 +0000
Files and hashes: 1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: oIQY2g4+RmrkABdwY1D/Gbwwh0GjEQgZwplPStYU9SU=)
2: stwCeWMzGL7ZQca28YuX50xe0DI.roa (hash: UrA8IbR6QSjufOgIOzy59dzg6O9c8YCged1nYroTzqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:18:be:75:5f:b3:c3:09:69:8b:f1:ee:98:9c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Validity
Not Before: Mar 29 18:00:26 2026 GMT
Not After : Mar 30 18:00:26 2026 GMT
Subject: CN=4fb4c4710ee3a21ea8d6e4e53aa9d42d97ca2b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:90:9a:7d:d6:87:07:19:79:75:b2:58:66:
bf:cc:d9:fd:6b:62:8b:b4:b6:80:f1:ea:ff:dc:f9:
3d:c2:27:84:33:94:20:7c:c1:0d:5b:e6:5e:1d:13:
37:53:ce:cc:1b:9d:4e:2f:f1:30:29:97:6b:28:71:
60:bf:8a:18:d7:9d:79:06:3a:34:95:6c:9f:57:23:
a8:52:3f:84:86:03:5a:6b:f9:14:11:6d:2e:2e:6b:
7b:2b:e7:b7:da:86:80:db:5a:bf:e5:27:73:5f:af:
0b:b8:e8:5c:f6:48:e4:22:c7:72:26:57:09:78:fa:
6d:92:b5:ed:7f:0f:ae:07:02:96:e6:24:e1:56:01:
74:ff:e1:01:c8:b0:59:61:68:d0:36:95:82:82:61:
b8:a2:2e:0a:5b:57:a3:14:24:08:e1:7d:d1:64:19:
17:e0:e4:e2:d8:d3:cd:2b:95:16:e3:e4:3f:9b:ad:
59:ca:86:1d:76:45:76:48:25:f1:95:f3:5b:24:5b:
5f:1a:13:63:f8:1d:b0:b5:7f:1b:3b:e2:80:32:cd:
f9:d5:f7:69:42:7d:c3:00:9b:dc:bf:3d:d8:8c:fd:
1b:89:38:27:6c:46:13:a7:b2:e4:15:ef:d2:e9:a0:
ca:bd:d1:bd:e3:70:17:e7:96:e9:08:63:70:29:a6:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:C4:71:0E:E3:A2:1E:A8:D6:E4:E5:3A:A9:D4:2D:97:CA:2B:41
X509v3 Authority Key Identifier:
keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ae:54:4c:02:cd:f6:27:69:2e:a6:c3:1d:4e:72:e3:af:20:
66:5c:2f:5d:1d:22:e7:50:7b:64:a9:05:78:64:08:a6:8f:b4:
f3:2d:ee:76:69:07:ab:84:11:24:7d:ff:8c:f5:ff:73:2d:bd:
24:c8:20:f1:36:a1:05:7f:ce:a3:ef:85:6c:60:31:38:d3:2d:
76:b4:7b:34:f8:f0:d7:b5:ff:68:92:af:bb:50:1a:ce:4a:57:
87:c8:ec:b4:9c:6b:1e:0b:3c:83:82:d1:85:7f:4e:ec:42:17:
ca:bd:de:b0:1c:e5:7f:db:ad:94:36:81:6c:27:9c:43:a1:b4:
a0:cf:b9:9a:19:3e:5a:c1:72:39:9f:76:37:f7:60:52:f6:62:
eb:4f:e4:de:0b:a1:30:8f:bd:24:b1:b4:bf:51:36:e8:f6:c6:
c8:49:cb:40:ca:7d:d5:77:0f:86:b6:66:cd:81:00:9b:f2:e1:
b1:19:b7:2f:b2:25:84:51:c7:8b:34:a7:46:42:5c:a3:7b:04:
e2:59:68:a3:24:bf:f2:9d:c2:f6:75:f7:7a:f2:3f:0e:a9:70:
1e:d9:6e:e0:b2:83:02:68:c7:89:7e:91:7a:9e:46:51:fa:ce:
0a:e4:35:c0:ff:31:36:ec:29:c3:5b:f8:28:6a:4e:46:f2:93:
f1:3d:83:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06wRi+dV+zwwlpi/HumJyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZmQ5YzE0MDZjOGNhMTJmZjUwMGIxZmQ0YzgwMDQxNDZh
MmRhNGIwHhcNMjYwMzI5MTgwMDI2WhcNMjYwMzMwMTgwMDI2WjAzMTEwLwYDVQQD
Eyg0ZmI0YzQ3MTBlZTNhMjFlYThkNmU0ZTUzYWE5ZDQyZDk3Y2EyYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8mQmn3WhwcZeXWyWGa/zNn9a2KL
tLaA8er/3Pk9wieEM5QgfMENW+ZeHRM3U87MG51OL/EwKZdrKHFgv4oY1515Bjo0
lWyfVyOoUj+EhgNaa/kUEW0uLmt7K+e32oaA21q/5SdzX68LuOhc9kjkIsdyJlcJ
ePptkrXtfw+uBwKW5iThVgF0/+EByLBZYWjQNpWCgmG4oi4KW1ejFCQI4X3RZBkX
4OTi2NPNK5UW4+Q/m61ZyoYddkV2SCXxlfNbJFtfGhNj+B2wtX8bO+KAMs351fdp
Qn3DAJvcvz3YjP0biTgnbEYTp7LkFe/S6aDKvdG943AX55bpCGNwKaaCyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+0xHEO46IeqNbk5Tqp1C2XyitBMB8GA1UdIwQY
MBaAFEv9nBQGyMoS/1ALH9TIAEFGotpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQt
NDgzNDY1YjBjOGY1LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQtNDgzNDY1YjBjOGY1
LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvK5UTALN
9idpLqbDHU5y468gZlwvXR0i51B7ZKkFeGQIpo+08y3udmkHq4QRJH3/jPX/cy29
JMgg8TahBX/Oo++FbGAxONMtdrR7NPjw17X/aJKvu1AazkpXh8jstJxrHgs8g4LR
hX9O7EIXyr3esBzlf9utlDaBbCecQ6G0oM+5mhk+WsFyOZ92N/dgUvZi60/k3guh
MI+9JLG0v1E26PbGyEnLQMp91XcPhrZmzYEAm/LhsRm3L7IlhFHHizSnRkJco3sE
4llooyS/8p3C9nX3evI/DqlwHtlu4LKDAmjHiX6Rep5GUfrOCuQ1wP8xNuwpw1v4
KGpORvKT8T2Dyg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:14 2026 by rpki-client