Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: rw81ST+hiK2a9w6jS9TJHHJRzWPfcyjw2A4RL6tfZ5M=
Subject key identifier: 8B:0E:A0:B9:6F:D2:96:83:AC:C1:5B:A5:50:DC:BE:9B:0E:D8:FE:17
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 019F11F7A30B772597A29D604A5F88ACF857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0DE3
Signing time: Mon 29 Jun 2026 06:01:09 +0000
Manifest this update: Mon 29 Jun 2026 06:01:09 +0000
Manifest next update: Tue 30 Jun 2026 06:01:09 +0000
Files and hashes: 1: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: vSr+y0Bj6yaNe8DjudcWEKG9o8I47GlvaL2o/6wfgzo=)
2: u0QvJos6aQuVHi55RUrNrXgfUVw.asa (hash: ACtAtsRiatajmXHP1C5zTlEQsTPl4TCmsquEFaxzwfI=)
3: xLJtQXm9P6maxGC-hxArjHM1WvQ.roa (hash: fh/uCHUwOCAmoBiX5Ih0Qna/9cR2PxvxnSe6Xn99zr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:a3:0b:77:25:97:a2:9d:60:4a:5f:88:ac:f8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Jun 29 06:01:09 2026 GMT
Not After : Jun 30 06:01:09 2026 GMT
Subject: CN=8b0ea0b96fd29683acc15ba550dcbe9b0ed8fe17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:7d:f5:62:33:72:fe:94:ac:91:73:eb:bf:
cb:3f:c2:fa:11:c4:b9:1d:15:c3:c1:da:5e:77:83:
bc:05:bb:04:5b:1b:17:f0:ea:95:87:82:91:8c:b2:
78:24:01:47:0e:7e:44:1e:15:5e:e5:2f:b3:81:a1:
b8:85:4d:87:7f:af:a9:33:51:56:d1:db:da:c0:cd:
8c:14:38:8a:a9:82:6b:2e:bf:cf:34:f1:16:6d:44:
df:05:dc:3a:a2:2e:14:e1:44:9d:37:91:11:f6:88:
aa:e1:26:12:7b:86:8f:85:d9:47:db:4e:6d:92:fb:
cc:13:ad:6c:04:ca:46:84:35:9f:ae:b0:06:42:6b:
e0:d5:a4:61:e5:85:7d:b4:49:36:43:ea:28:ee:cc:
b2:85:dd:c2:57:ff:fa:1d:13:b1:25:b5:34:63:2b:
45:40:9e:5d:40:2e:61:bc:8b:e7:28:c9:c5:bd:cd:
7a:2c:2f:18:8e:f0:e1:81:3d:88:c2:bd:f7:ae:f7:
49:93:19:6b:07:d3:a1:4f:ce:f0:87:b7:72:00:6b:
1a:32:64:e9:66:16:c9:fb:7e:03:3d:f8:63:c9:e6:
70:c7:26:d5:dd:b0:da:19:50:61:86:ea:c7:54:c6:
32:45:4e:08:79:54:fd:d2:3a:be:38:a5:de:c6:b5:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:A0:B9:6F:D2:96:83:AC:C1:5B:A5:50:DC:BE:9B:0E:D8:FE:17
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f7:ff:de:91:56:0d:42:8d:de:26:78:57:f0:40:f6:97:d4:
50:86:d8:f2:25:8b:f6:1b:56:c5:ea:dd:9b:7f:fc:6e:f8:62:
cc:12:ac:c9:a8:89:bb:df:f7:30:a6:69:a8:c0:3c:30:0e:f7:
83:94:65:60:d9:f6:68:b3:98:95:de:df:36:f9:69:1c:8c:9c:
0c:e4:98:b1:f4:40:73:54:d5:38:f9:4a:65:cb:e8:9f:1c:56:
ab:49:95:a4:c2:3a:95:ac:60:19:0c:76:19:5a:d2:50:eb:1d:
43:79:e3:62:8d:cc:b2:7a:c7:c3:27:83:ba:90:c8:31:88:78:
94:b0:cd:90:ca:38:c5:57:3d:db:18:be:45:1b:04:5b:b7:2c:
03:95:6a:30:85:8f:da:1a:44:aa:a6:5a:4e:2b:f5:b5:ce:7b:
b9:95:19:ad:56:65:e6:c9:f2:bb:17:1d:22:cd:7b:e9:6f:93:
2b:b3:60:b7:02:0a:0d:23:e8:05:58:a3:2f:c4:d2:2b:35:b7:
c7:8a:fb:34:b1:e7:85:23:ea:a8:5e:9a:92:6c:26:c3:36:00:
d4:92:d1:ab:76:c8:0d:26:d3:16:15:d7:80:65:d8:f2:9f:8b:
54:21:c0:52:1c:cf:fb:c2:41:52:3a:4a:bf:c0:3a:4f:a7:1e:
8d:43:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:01 2026 by rpki-client