Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier: UX7y9/4MUcOsZX4ZOGCm3+nE/LOKOLeIGQd5/ooqYbg=
Subject key identifier: 12:88:EA:2B:8F:38:DD:37:01:16:E6:28:23:F1:19:D0:28:49:27:FA
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial: 019D3977C56859378A33209E1D7A94B01BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number: 0C23
Signing time: Sun 29 Mar 2026 12:00:43 +0000
Manifest this update: Sun 29 Mar 2026 12:00:43 +0000
Manifest next update: Mon 30 Mar 2026 12:00:43 +0000
Files and hashes: 1: 4vUJXm8eNnXrmzWPEJu4hyJ74bE.asa (hash: E4sIlw3AAVJ0Z5hHy6GY0z+mLPDpAHtRm2YAKcmDuRI=)
2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: 4fsLZjPuZewSu2udjt3y/2WiswamHqyIYRULocIXfDs=)
3: q7Y942LXE7VDqi3CVQGg7s-T4B4.roa (hash: um+Nzf6xvoV3Y4Z8bfjOD2xB6Pty18EAptHerBiWZz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c5:68:59:37:8a:33:20:9e:1d:7a:94:b0:1b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Validity
Not Before: Mar 29 12:00:43 2026 GMT
Not After : Mar 30 12:00:43 2026 GMT
Subject: CN=1288ea2b8f38dd370116e62823f119d0284927fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:30:61:c3:44:1c:a9:7c:ba:ff:fa:39:fd:
81:be:2e:fa:6b:28:a0:2b:d7:69:b5:47:f3:6e:18:
07:cd:82:cf:3b:3d:7c:ab:65:f4:53:c2:0b:d1:0f:
b6:fb:f1:d0:8a:ce:ca:3e:99:53:dd:b5:a8:5c:c4:
9c:d7:6d:83:dd:71:23:4f:06:bf:b9:f0:1c:03:b0:
41:06:3d:ca:98:05:a1:00:e6:54:d0:18:5f:cf:97:
54:19:a2:bc:c9:b4:14:be:79:0b:61:b9:4d:76:82:
5e:d3:3d:d4:fc:a5:21:ee:5a:c2:7d:e2:f4:74:f8:
8f:b2:01:5e:a9:5c:89:d3:7b:bb:85:3f:cd:98:11:
b6:17:d2:42:91:fc:df:49:dc:5c:71:fe:1d:ad:cb:
b8:5d:8c:78:04:2d:ce:f9:5b:72:55:ca:6c:bd:07:
d1:26:02:29:ac:d9:9f:fe:44:f2:25:b2:24:24:df:
53:d9:a1:41:62:31:ec:79:b6:2c:28:d9:33:d0:5a:
3d:d8:dc:dd:0d:7a:2f:84:e0:d7:15:ff:d5:fa:17:
56:70:e6:1c:d6:d8:99:64:f9:f5:bf:6f:bd:cd:6f:
9b:00:4d:bb:e3:03:2c:cc:5c:a0:f5:ba:e6:02:91:
99:2b:c7:8a:c0:ed:06:2e:11:66:04:5a:a2:b9:db:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:EA:2B:8F:38:DD:37:01:16:E6:28:23:F1:19:D0:28:49:27:FA
X509v3 Authority Key Identifier:
keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d3:17:7e:0a:64:e6:c4:67:0c:be:35:6d:0b:af:bb:31:13:
4d:47:7c:4d:82:3f:30:dd:72:3e:e4:c1:eb:f9:c5:11:23:db:
bb:30:60:bb:0b:da:e8:9c:44:57:05:d6:81:0f:49:73:2d:f9:
3a:83:1e:2b:51:49:06:07:a2:01:5a:75:0c:85:95:bf:c0:8d:
55:0a:33:25:20:3f:fe:a7:69:9b:36:3c:9d:94:4e:9b:bc:ef:
9b:86:95:1c:3d:07:eb:6a:1b:37:ff:43:09:9e:f1:59:46:15:
f9:6b:d8:8b:13:08:fb:ed:33:1a:c8:73:0e:b8:e4:f8:18:e5:
24:47:42:bc:0a:4d:0d:07:83:77:7b:db:86:18:26:32:d4:14:
57:8b:23:92:65:d5:1d:64:cc:f6:dc:54:be:9a:af:11:7a:24:
c9:3a:6b:98:6b:d4:32:3c:3d:51:59:2f:38:6b:db:80:b3:f0:
97:54:67:c0:a7:ce:be:e1:6e:b2:51:56:96:50:3c:77:b8:ce:
7d:66:39:f7:11:21:35:47:fe:b7:e5:96:b5:ae:06:03:8b:3f:
53:32:6a:7a:70:bf:67:12:b1:83:d4:94:7e:43:be:14:59:ef:
2a:e7:e6:1d:3e:ed:a2:40:fd:ab:be:0b:49:0c:0f:3e:2b:a2:
23:b0:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:17 2026 by rpki-client