Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: MFpw/jjz78g3PGimnOSguIcChWvFesZukZONKE8Xyos=
Subject key identifier: 6F:B0:F0:3C:BB:AD:A4:15:25:2C:F7:7F:CE:F0:84:A3:58:43:E0:B2
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 019D38D2EA0D0B890409522979E0116A7102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0CEE
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: NrfStUQjoE9zLuwcnKaQ7ZdkPPlZTVWsd+N0UKRWS3I=)
2: u0QvJos6aQuVHi55RUrNrXgfUVw.asa (hash: ACtAtsRiatajmXHP1C5zTlEQsTPl4TCmsquEFaxzwfI=)
3: xLJtQXm9P6maxGC-hxArjHM1WvQ.roa (hash: fh/uCHUwOCAmoBiX5Ih0Qna/9cR2PxvxnSe6Xn99zr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ea:0d:0b:89:04:09:52:29:79:e0:11:6a:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=6fb0f03cbbada415252cf77fcef084a35843e0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:7b:7d:21:3d:0b:ab:24:97:df:b6:c1:b5:
e4:7a:d0:32:26:d7:f6:f8:e4:c0:6c:8b:03:57:d6:
26:6d:0e:b6:3d:0d:1b:86:58:1b:ac:15:8f:f4:b4:
3b:1f:d0:fb:66:69:e4:7d:bc:a1:f6:be:df:8d:72:
2a:b4:44:a6:b4:10:9b:b1:99:13:32:7e:42:b8:97:
97:ca:61:78:d0:b1:41:d9:2f:ba:2f:2f:d8:57:d8:
cd:f3:5d:05:a3:2a:1e:f0:cb:c5:2d:76:9f:82:27:
f1:f0:e7:8d:ed:7b:49:4e:ca:85:cf:27:6d:c4:13:
46:ad:95:d5:25:80:2e:64:c1:0a:0b:16:dd:a5:3b:
10:47:93:83:a3:18:05:b3:f6:07:48:fe:35:3a:45:
0a:65:f2:1a:53:71:84:dc:48:22:93:38:79:d8:9b:
c3:10:c5:c4:a9:a1:54:6c:00:43:95:74:a9:aa:89:
78:57:71:fe:59:b6:8f:af:14:70:58:69:3e:c6:a7:
9b:05:fd:ab:ed:db:b5:b2:0e:a6:19:6d:43:68:d8:
ab:6e:a2:36:7f:f5:00:98:18:ae:2e:12:aa:f9:6e:
68:d4:bc:33:2b:b7:99:30:64:de:af:a5:af:38:cd:
b6:07:95:84:10:a8:77:52:7b:8b:e4:38:34:fa:83:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B0:F0:3C:BB:AD:A4:15:25:2C:F7:7F:CE:F0:84:A3:58:43:E0:B2
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c5:e9:6f:19:e3:ee:0f:7a:99:a8:3a:5e:94:14:ae:1d:d5:
9f:92:18:c6:8b:81:38:29:ba:cc:82:84:bb:51:2b:eb:79:e5:
cc:1c:cc:6c:1d:30:40:1d:f4:7c:62:aa:3f:32:8b:41:12:55:
07:af:d4:e5:ef:bf:8e:b9:26:55:5f:35:8a:10:c0:33:61:46:
d6:1d:0d:bf:21:33:c9:c2:50:42:d5:34:2c:4a:22:eb:19:bf:
91:a7:4e:9e:7d:2c:f7:9a:b1:d0:0d:68:db:8e:43:d3:24:56:
b2:d1:5e:68:00:ed:80:5c:be:41:f2:cb:5d:e2:14:8d:00:42:
39:9f:1d:e7:e5:a8:e0:7d:7b:5c:4b:9c:26:e6:34:f4:6e:ad:
56:d3:4a:cd:ab:4e:a2:05:c2:6f:82:85:2b:1f:07:c3:ba:4e:
3f:36:d4:0e:db:cc:20:f2:69:58:e5:db:1a:bc:58:ae:db:c2:
dd:d6:88:33:66:0a:3b:72:e8:22:ab:de:7c:9e:22:78:09:d2:
8e:6c:05:d8:f4:10:a8:61:bc:b1:04:94:be:c1:2c:0f:93:e8:
c7:e2:ce:5d:d1:f1:18:f3:4f:65:3e:08:1a:94:ce:bd:0d:6a:
ee:31:01:c1:0c:59:48:14:4d:f2:88:29:54:e4:d4:46:39:54:
a7:40:a4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:40 2026 by rpki-client