Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: cCKZ5y8OfonzlncYQYPwubF1TiWdhp2BbDwWq0JAM+4=
Subject key identifier: 8F:2F:DF:FB:3B:3A:F6:EE:72:87:09:5E:60:F3:2E:ED:BB:A7:66:46
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 019D389BC53A0A399E6CA3CFEEC5F8B86502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: QxwdEpVgo81_-mwIpi91_VPBVXk.roa (hash: W+b58r8ZTGE9pnt5zsRnperhoba0alTWik9Mki5Rn8o=)
2: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: TiJ8nSCTDSGOyajLcY3vtR8R0+IW5y0u8fmVHHnVLFA=)
3: nrZgqd06tq3-TkmE8GvRCD0Cb7I.roa (hash: IUqtPA4/rBBGflH10rVAdWMwA0mA9sN2XLQ3y4ih8sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c5:3a:0a:39:9e:6c:a3:cf:ee:c5:f8:b8:65:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=8f2fdffb3b3af6ee7287095e60f32eedbba76646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:13:f2:0c:75:0a:c5:ec:86:d7:65:75:c2:
81:b5:fd:c9:9a:68:1e:15:a5:62:35:c8:de:72:de:
f5:6a:95:6d:47:fd:26:20:46:24:48:ba:6a:95:2b:
86:0b:ff:1f:5e:7a:04:c8:73:30:db:ed:18:06:9b:
f3:ad:79:ba:59:01:57:fa:25:c2:86:04:1b:95:52:
7b:a7:8e:1d:61:45:12:40:e1:74:81:4a:20:ea:8c:
3f:0b:af:10:d8:da:b5:00:f0:43:2e:a2:6a:fc:93:
6d:1b:36:94:36:81:cf:0a:74:9e:a9:1e:ae:02:0d:
86:b9:b6:d2:d9:a6:33:07:c7:21:3b:5c:5c:58:19:
c5:4d:8f:0d:b0:90:0d:7e:9b:58:96:90:f1:19:73:
7b:08:1b:a7:12:7a:66:f2:c0:b7:0e:34:2c:e9:11:
61:5e:74:02:81:a7:2b:d5:15:20:8d:7d:51:ad:a5:
e7:c3:70:81:6d:cb:cb:7e:16:1d:0a:fb:d9:81:47:
9c:c8:83:8c:10:e9:fb:0b:c2:74:d0:c8:90:e7:29:
58:56:ed:18:96:49:f0:55:5d:e0:67:3c:e6:b8:ad:
4a:f4:ac:10:1e:ab:80:dd:2b:4e:95:a6:8e:a2:6a:
1d:a5:fd:be:87:2e:7f:5e:1a:94:64:b2:31:36:81:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:DF:FB:3B:3A:F6:EE:72:87:09:5E:60:F3:2E:ED:BB:A7:66:46
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ad:7c:68:c0:31:ad:ce:f6:34:1f:cd:d6:fb:c9:87:f4:d1:
6f:d6:d3:83:41:9b:d3:67:86:07:45:ef:97:2a:3e:89:aa:c9:
cf:c9:f4:50:ed:1f:ab:b9:f2:c5:aa:1c:61:2d:49:9d:55:21:
5c:cb:51:f8:8f:f1:bf:9a:c9:b7:af:49:44:56:5c:ce:8d:da:
a2:d8:54:c6:4b:24:0e:38:22:46:0b:d8:00:a3:35:44:c3:a7:
ff:e4:21:de:fc:55:1d:04:6f:bb:e4:99:08:cd:8f:08:c3:5a:
ab:c3:fd:87:57:e0:6f:1a:21:34:e1:a2:77:3e:85:12:98:d0:
ac:55:47:3e:d8:81:a2:80:3c:09:cc:4e:9e:01:7f:14:59:d7:
fa:86:c5:d0:b3:32:e5:39:77:c0:f7:0e:24:70:4b:b0:bc:29:
74:88:ab:8f:3d:c3:0f:6e:84:bb:f7:15:67:98:63:35:39:be:
50:d3:78:94:6b:f9:44:d6:7e:39:43:d8:69:d3:2c:30:7a:be:
5a:d3:16:d6:4b:6f:f7:08:7c:b9:1e:9c:bc:bf:1f:a4:f7:ba:
ca:d0:82:f2:71:00:e9:35:09:0d:83:66:23:e1:44:54:c7:ba:
19:a4:2d:4a:2a:b1:0f:fb:2c:84:6f:1d:3f:cc:d1:09:c0:7b:
16:a3:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:15 2026 by rpki-client