Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: 4tWN8H4fX7jvtbbY+w3Z+HbTQyj9ihVqdT1YFarzMCc=
Subject key identifier: 04:ED:0D:3C:86:FC:0B:02:A3:56:A6:4D:A8:84:26:57:E0:36:5F:69
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 019D382E5078A009AA02822403CC5F239780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: 0Zc__kN3HwhsJoBnO7wdin2RQss.roa (hash: CXzPpL1BSz7J6w6QJARe0QxvknuDCjM8a8ZeWT+w+XI=)
2: 8NpquuKtmcdUrFKy47Sj9fT29Os.roa (hash: JUFOjZ1XBHrYKPUOA3cAyXpp/9fbGuZHL5PKFslhQ7k=)
3: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: 6Xq4qOfIRx2galPrWbBkRBMkEkNPbOGc37B6UvlP6yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:50:78:a0:09:aa:02:82:24:03:cc:5f:23:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=04ed0d3c86fc0b02a356a64da8842657e0365f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:35:ce:1b:74:a4:95:c0:34:d6:ed:1e:e1:
98:06:99:c4:be:d8:be:7f:bb:da:50:e5:c1:1f:e3:
e7:17:22:2f:b1:ec:4a:d6:d0:c0:11:45:d5:b7:46:
82:44:6e:2b:4e:9d:c3:ff:bd:49:0e:d7:da:ca:07:
b9:96:80:55:70:e1:c2:9a:31:83:d6:18:25:7a:d2:
38:13:75:88:e6:b3:95:ba:c2:09:16:00:63:3d:c2:
ac:fa:6b:02:40:83:cf:2a:c5:0c:2e:5e:6b:fd:68:
98:ae:b2:0a:2d:9a:c0:d5:a6:c6:82:bd:9c:90:eb:
65:55:89:e2:ea:5e:62:d6:0c:25:3d:fd:d5:81:0f:
fa:ad:a6:fd:37:d4:d0:c9:78:57:bf:20:b5:8c:02:
08:f7:64:40:6b:f5:c2:d3:75:5c:a3:8a:6c:fa:56:
5c:96:8d:5e:43:d5:2f:e0:2d:fa:0d:a8:b1:cf:bd:
f8:73:e7:f0:a2:52:71:fd:ad:34:57:97:bc:4f:2f:
4d:17:cc:cf:7a:f2:5f:4f:2e:04:4f:fb:11:6f:f6:
01:db:9b:1d:48:7a:58:89:84:1d:dc:c1:db:9c:d2:
ac:73:69:15:16:84:53:76:ee:22:9f:85:af:04:fb:
da:7e:00:78:0e:3f:66:fd:ef:90:91:9d:c2:29:99:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:ED:0D:3C:86:FC:0B:02:A3:56:A6:4D:A8:84:26:57:E0:36:5F:69
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:33:97:39:2d:a5:a0:69:ae:61:4b:b6:bc:fb:6c:c6:32:7f:
46:89:64:21:0a:cd:a1:18:82:ae:7c:8a:ee:8e:16:54:e0:20:
2d:69:91:92:df:a0:14:56:19:94:a4:29:24:a5:c8:cb:a2:a5:
9b:a3:8f:dc:14:2c:f8:00:f8:73:7c:a8:50:ea:b0:87:d0:e8:
31:a5:b4:5a:2c:5a:af:56:ae:a5:f0:b9:c0:9a:3a:0a:81:39:
3a:4b:44:12:a8:8d:26:0b:e7:50:80:45:4a:55:46:9c:f0:d7:
ff:7e:0b:4e:59:80:37:f8:68:0a:5d:0f:0a:a3:28:28:99:1f:
a1:eb:df:3a:dc:a0:43:9e:69:0e:07:cd:0a:39:96:a0:7c:e8:
3c:4c:e1:d5:5a:57:6f:27:63:56:22:2e:df:4a:23:d0:f7:fb:
97:44:46:3b:f6:27:25:a5:12:69:f0:f8:38:16:31:0e:20:e7:
20:20:bb:40:76:ca:c4:ae:08:eb:c2:31:6b:7d:d7:62:6a:4e:
77:54:a9:d1:ac:74:a4:48:a8:9a:d2:87:ec:56:de:08:af:8e:
ac:05:8d:4b:f0:6f:b7:e3:1a:3b:9f:e6:28:35:97:7f:64:93:
d7:59:d4:56:1e:36:55:4a:0c:75:ad:e0:e0:2c:c8:db:c4:d2:
f7:05:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:03 2026 by rpki-client