Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: g4UJQ4TLj7mOZCaRqdWAjeOKGb/Cz3VC7kSIcJ8/irw=
Subject key identifier: CD:0E:D2:88:3E:A4:FD:F3:4B:2C:02:7A:D1:DD:E7:E7:4B:81:BC:EA
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 019CE6A45F2399AFAE34BE4CFB526F0F274D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 10:00:57 +0000
Manifest this update: Fri 13 Mar 2026 10:00:57 +0000
Manifest next update: Sat 14 Mar 2026 10:00:57 +0000
Files and hashes: 1: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (hash: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E=)
2: S84INADK9hbzUCAynI1288S4OaU.crl (hash: 9HrWSm4WuGvFZhFQnjrEK8y2nyKU05/x0Atjnro+vpk=)
3: rCfZiz4VYjIBfKu68sLkrutitjY.asa (hash: Ybi387bthNpyIWhQISnJAR9yyGDzSsTDc5P3pmLLByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:5f:23:99:af:ae:34:be:4c:fb:52:6f:0f:27:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Mar 13 10:00:57 2026 GMT
Not After : Mar 14 10:00:57 2026 GMT
Subject: CN=cd0ed2883ea4fdf34b2c027ad1dde7e74b81bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:f6:a6:a9:48:68:7f:17:5b:d9:dd:49:97:
21:32:18:53:ff:eb:01:46:20:82:c7:ce:1a:c4:3d:
1d:67:de:2b:17:a9:24:02:46:f0:a0:a0:aa:62:ac:
51:f1:a0:a1:6f:7f:e5:7c:dd:d5:f3:d4:c0:35:d7:
df:84:8c:a6:fc:1f:2f:37:2a:d5:b7:24:1e:3b:74:
d0:47:17:df:f4:d2:84:54:20:22:6f:ab:57:87:0f:
33:9a:3b:49:3c:e2:61:8a:c1:e0:72:f6:12:58:7e:
23:97:6f:dd:d1:7a:56:9e:71:25:12:01:bc:d4:da:
3e:9c:5a:a3:a7:46:4f:19:6f:67:a4:25:f4:76:a9:
2e:be:37:96:96:47:34:c5:9a:87:d5:3b:08:74:98:
7c:fc:17:1a:3e:11:d6:38:a0:6f:2d:7d:ed:52:84:
20:97:c9:3a:9f:14:66:bc:82:5c:9b:64:2d:b7:bf:
cc:9b:e1:df:5c:69:0e:0c:82:a8:8d:98:bd:d2:45:
5b:dd:39:60:a4:43:22:1d:9d:ce:0b:79:ec:7a:10:
22:f8:9c:e4:69:a7:f4:e4:22:ee:31:09:79:87:5d:
69:2d:82:22:65:66:06:96:ab:24:14:45:c4:4b:10:
d3:18:08:58:8f:0c:f4:1f:d8:59:94:fa:7c:36:f2:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0E:D2:88:3E:A4:FD:F3:4B:2C:02:7A:D1:DD:E7:E7:4B:81:BC:EA
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:dd:30:bf:32:9e:9e:f3:3b:50:93:68:0a:c0:5e:2b:3d:
6d:f0:1a:29:ce:3c:86:0f:40:3e:98:7c:12:12:f7:67:45:0c:
d1:c1:f5:b1:1c:f4:c5:44:c2:6c:d4:cb:6f:87:c4:fb:9e:5b:
51:7f:86:f9:ae:e8:4f:d9:4c:87:7a:9b:b2:26:b6:ad:b3:eb:
86:cd:ea:9f:75:2c:af:97:4c:fb:3e:d7:0b:57:4c:9d:71:0a:
4e:38:96:d4:2c:2c:6c:1c:45:2f:22:31:4d:3a:9c:7d:39:cb:
a8:f2:04:46:20:d5:52:03:e5:4c:dd:89:06:d1:68:27:d0:32:
77:48:e0:41:11:ff:63:6e:38:54:cf:c4:2a:f9:cb:57:62:43:
a4:c2:b3:61:14:39:59:e9:8a:96:d5:60:0e:90:e2:c0:50:82:
89:15:15:5b:56:0b:dd:21:af:13:39:e0:e2:47:57:e2:d6:9e:
f1:9a:63:d3:96:67:eb:ac:8e:21:e6:a4:43:61:df:2a:cc:b9:
ed:a5:0b:ff:3b:f9:87:a4:b5:8c:1d:48:a4:bf:1c:51:d6:75:
52:89:ef:c3:d6:40:c4:f1:38:e2:8d:dd:2a:1f:62:50:14:ca:
97:b6:e4:02:fc:88:58:49:a0:9f:c7:fb:8a:2f:bb:3f:4b:8f:
e6:82:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:15:42 2026 by rpki-client