Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: +gVdxKgyiCUqJVkLkfpe2rthcNPjUkqOGt4OXgtjIKA=
Subject key identifier: 7B:FA:75:B3:E1:7B:4F:71:B6:A4:86:57:E1:45:CD:A5:33:A5:8B:56
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 019D386590B91699C3D04177815D6A4BBCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 06EE
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: 0BJuBVxjSdXsph85MS86HogqU6Y.roa (hash: oglBxgTG0Cvmu+e7zp3i2v5YTMsrt5rMaLc4kAaFK7o=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: ab8BSZWHFOqZVAn7zrm3VXI9EbANQO0BlHiqcDhyBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:90:b9:16:99:c3:d0:41:77:81:5d:6a:4b:bc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=7bfa75b3e17b4f71b6a48657e145cda533a58b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:57:ea:58:d8:05:77:59:94:1a:5c:fb:26:
e0:37:33:10:f2:c1:74:b8:15:31:28:54:02:0c:11:
e8:a8:4b:2b:e1:1b:d7:fe:96:09:74:78:0f:f0:f6:
e4:13:1b:ae:d3:4f:0a:32:4d:f1:fe:9f:8c:29:ff:
0b:fb:04:6a:0e:4c:c5:59:71:5e:54:80:53:89:9a:
fb:80:00:8f:d8:fb:d5:fc:27:a2:0c:58:76:d5:5f:
33:6d:c4:fb:f5:34:f7:2c:3b:21:0c:12:16:a9:79:
6c:74:5e:c3:a1:6f:ae:e1:3b:8f:2f:da:b7:4d:68:
7e:83:50:c2:b0:c8:4d:9a:1c:26:af:b1:c8:2f:cd:
40:ea:aa:a5:1c:5d:1d:f7:e2:b6:c1:02:a4:6f:e4:
5a:16:42:47:c4:1e:6d:9e:a9:ef:4f:0b:fd:9b:a1:
8f:de:9a:53:70:9b:ed:39:e9:72:25:ce:2d:62:7c:
3e:ee:60:79:44:33:a8:a2:5f:0e:35:69:0f:98:17:
b4:8d:1b:5d:d3:76:ef:f0:32:0f:9c:fb:95:46:2e:
08:f7:e3:ab:15:0a:78:62:98:10:ed:43:8e:f8:31:
6d:63:2c:cb:ec:4f:7b:74:4f:3a:e1:e2:77:0a:6d:
0f:9f:e8:3d:28:6b:18:7c:36:09:b9:62:9d:48:5b:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FA:75:B3:E1:7B:4F:71:B6:A4:86:57:E1:45:CD:A5:33:A5:8B:56
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fa:1c:f2:bc:77:e1:ba:e3:39:ac:30:09:23:4d:e6:80:1e:
d3:26:c7:d9:fa:21:b7:42:d4:95:3f:d9:5b:af:f5:05:fc:26:
12:77:e7:2e:c5:a4:ab:64:4e:f7:89:8f:ec:41:98:2c:f4:6f:
a9:27:01:32:c6:81:90:6a:d3:40:94:70:51:fa:dc:c1:bf:f2:
55:4e:bc:e4:a6:77:b7:20:c2:28:53:91:36:c1:04:ad:42:e3:
5e:66:6a:cc:f0:33:94:e6:ab:7f:94:73:9d:0e:81:cc:b5:6e:
39:a5:d4:e3:56:d2:4b:17:cb:0f:5a:d6:43:ac:05:79:9d:3f:
6b:17:46:ab:25:88:78:7a:86:9f:70:95:9b:d3:89:9d:9e:59:
3e:f6:c4:84:71:98:df:c0:cf:39:6c:80:05:3d:a4:d7:3c:bb:
bf:f5:61:2d:73:e9:57:22:f4:71:c0:01:a4:5b:5e:f0:e6:4a:
d7:e1:30:4e:e7:1d:40:9e:b4:95:b5:16:24:5c:6c:4d:66:1d:
d4:04:8b:64:df:18:61:6e:19:ad:42:ee:c8:35:6a:4e:39:d0:
b5:b6:2a:fa:33:a6:88:bf:03:0d:0d:6c:08:cb:52:d6:cd:b3:
1f:01:c7:5c:6e:7d:9e:d9:1a:f4:7f:3e:cb:22:09:00:29:ff:
98:f2:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:04 2026 by rpki-client