Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: eTC+I+94/Jj/q1K9nEUWa7X39P8igiXiQSwqePpTskA=
Subject key identifier: 7A:9B:F8:36:79:B6:05:88:36:1D:FA:18:31:1F:CB:CA:A7:65:B3:43
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 019E284BC6E5DD5920E911CAAA4D592B77F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0D6A
Signing time: Thu 14 May 2026 21:01:55 +0000
Manifest this update: Thu 14 May 2026 21:01:55 +0000
Manifest next update: Fri 15 May 2026 21:01:55 +0000
Files and hashes: 1: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: wjkpt8k8Yuq8b4RLXG4E7xCECmUYSVhhbw6I3p7suL8=)
2: u0QvJos6aQuVHi55RUrNrXgfUVw.asa (hash: ACtAtsRiatajmXHP1C5zTlEQsTPl4TCmsquEFaxzwfI=)
3: xLJtQXm9P6maxGC-hxArjHM1WvQ.roa (hash: fh/uCHUwOCAmoBiX5Ih0Qna/9cR2PxvxnSe6Xn99zr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4b:c6:e5:dd:59:20:e9:11:ca:aa:4d:59:2b:77:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: May 14 21:01:55 2026 GMT
Not After : May 15 21:01:55 2026 GMT
Subject: CN=7a9bf83679b60588361dfa18311fcbcaa765b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:69:5c:f7:1f:3c:d3:de:4c:f8:30:4f:7e:1a:
b7:f7:7a:f5:4d:0f:8a:0b:ce:2b:b9:25:fe:fc:de:
78:21:68:68:a1:24:d5:cc:67:3a:0e:41:70:51:97:
01:5f:88:87:d7:a9:8e:a9:d5:6e:57:49:df:14:5a:
fc:18:37:4a:73:33:04:4d:59:9d:dd:64:42:86:46:
9f:ef:bb:d0:2e:fc:3e:93:0c:66:5f:d6:b0:86:e4:
44:5a:b3:49:63:7f:5b:0d:9f:fb:27:71:6a:f0:4f:
02:aa:f7:2d:26:9d:51:b3:cc:99:9a:7b:69:4c:f0:
79:3c:87:08:5d:e9:47:fc:81:4c:5c:e0:39:47:90:
6e:bb:57:af:14:3a:7e:bd:3e:f4:68:e7:18:a4:4d:
5a:12:18:8d:8f:ef:52:bb:df:d4:5a:3e:35:d4:dc:
22:ce:fe:e1:fb:57:f3:28:72:ad:c2:81:c1:b2:2d:
61:a0:93:34:e5:58:08:4c:32:56:73:ff:05:fe:a5:
9a:4a:1f:bc:ec:6c:44:cf:95:90:06:06:14:00:1e:
9e:2a:52:61:45:9f:b9:06:d1:37:42:f6:1a:95:7e:
f9:d1:0e:cc:a9:a0:08:b3:e4:31:30:10:02:73:fd:
cd:e4:d0:3b:e3:22:b6:6e:0f:01:93:44:bb:23:a9:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9B:F8:36:79:B6:05:88:36:1D:FA:18:31:1F:CB:CA:A7:65:B3:43
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5a:ef:7c:e4:ea:ef:53:b9:a6:cf:d0:2f:2c:17:c1:ca:f2:
3b:25:b1:e9:31:35:b4:1d:b0:e8:9f:8a:61:a6:63:4c:74:fa:
9e:f7:71:cd:3b:14:c5:87:fe:65:1d:f0:4e:d7:3b:64:d5:53:
f3:7c:74:2d:55:73:ae:2e:ea:83:3d:9d:7b:c4:a6:07:d2:dd:
11:b9:a8:e2:51:1a:79:00:87:ba:46:63:0b:28:6d:2a:71:4f:
c6:49:fd:95:77:f3:f9:14:3a:22:a7:63:6e:66:b8:38:b1:f9:
70:89:3a:0d:ab:fb:88:e1:8f:3e:1b:79:49:0a:f7:72:6b:54:
12:12:41:cb:88:97:c2:b1:9a:a9:80:88:70:01:52:5a:4e:a2:
40:52:cb:de:93:fb:82:de:f6:be:d3:fb:0c:64:f2:f9:72:c8:
02:6b:9b:a3:d1:9a:5c:97:21:6e:4e:d0:54:38:fd:17:05:6f:
eb:b5:f9:48:e8:4b:f0:16:30:92:3a:ca:e8:d1:12:99:5e:87:
a0:64:19:80:78:f2:c9:da:96:69:8e:9c:76:fa:73:34:d2:69:
2c:74:64:d6:ed:e3:a1:86:6d:33:3c:15:e5:b7:9d:db:f9:52:
0f:1d:d2:28:53:9a:19:b6:9d:8c:35:09:22:5d:de:bc:db:fa:
4d:69:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:00 2026 by rpki-client