Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: XfK/e9yggTer0biwfgVmExRIXWK96tktPVN4cSbkQC4=
Subject key identifier: 89:52:25:93:6D:67:73:64:7B:18:82:D0:66:0E:2E:00:C0:01:00:4B
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 01A03D4D291E65649199E580279492C4FFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0E7E
Signing time: Wed 26 Aug 2026 09:01:02 +0000
Manifest this update: Wed 26 Aug 2026 09:01:02 +0000
Manifest next update: Thu 27 Aug 2026 09:01:02 +0000
Files and hashes: 1: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: Yhrson3xPoU4+bhjzawGckJANyPbLizLuaFPyr+d91Q=)
2: u0QvJos6aQuVHi55RUrNrXgfUVw.asa (hash: ACtAtsRiatajmXHP1C5zTlEQsTPl4TCmsquEFaxzwfI=)
3: xLJtQXm9P6maxGC-hxArjHM1WvQ.roa (hash: fh/uCHUwOCAmoBiX5Ih0Qna/9cR2PxvxnSe6Xn99zr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4d:29:1e:65:64:91:99:e5:80:27:94:92:c4:ff:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Aug 26 09:01:02 2026 GMT
Not After : Aug 27 09:01:02 2026 GMT
Subject: CN=895225936d6773647b1882d0660e2e00c001004b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:56:99:bd:30:f2:be:6f:34:71:25:f1:3c:
04:fd:15:d6:49:c1:6c:22:47:2f:7a:9b:4b:75:34:
51:5a:26:e2:43:e7:bc:8d:9a:b8:55:5a:89:2e:af:
e1:dc:1f:60:7a:bd:15:ac:33:76:7b:11:47:99:d6:
c4:73:10:c5:44:bd:c4:e5:0f:03:2e:9c:c8:a1:bc:
a0:30:4b:5a:e0:c3:e2:f8:96:1a:44:ee:be:d7:d9:
f1:41:84:55:1e:87:40:41:13:d4:81:db:9c:1a:cf:
26:54:95:9f:5b:39:9d:2c:c9:64:32:1b:1a:86:2d:
c8:c7:b0:17:7a:7d:b4:5f:5a:f7:94:90:c6:34:d6:
89:4e:e5:2d:45:6c:fe:78:d7:a6:85:b8:e7:aa:01:
bc:af:14:8d:d4:e8:6e:e0:c1:a0:5e:f2:bd:56:44:
91:07:dd:34:c0:e8:a7:c1:5c:d5:8d:14:f3:e0:22:
69:3d:87:fd:a3:e4:ea:40:d4:bd:3b:08:68:13:b7:
90:28:bd:fe:27:03:7e:21:e3:ad:ef:27:14:ab:2e:
08:cb:5c:1f:9a:de:8a:f7:68:aa:34:60:44:07:e1:
2a:a8:95:b7:d3:44:e5:2c:5a:3a:9c:1d:35:83:f4:
3f:b1:d5:4f:20:8c:9b:bf:00:e0:63:87:2b:94:06:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:25:93:6D:67:73:64:7B:18:82:D0:66:0E:2E:00:C0:01:00:4B
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:89:09:81:6c:4f:8c:2b:3c:03:fe:3a:5a:e2:87:13:88:ef:
e6:59:e3:b2:d2:f2:a5:50:3d:90:28:93:2d:e8:81:0a:c4:66:
71:ae:a6:e7:23:aa:99:5a:2d:00:21:70:8f:25:80:98:4a:e9:
c3:6e:69:69:38:bd:f8:ea:c6:aa:6a:13:eb:a3:bc:81:ff:ff:
fa:a2:d3:57:04:91:01:0d:c5:6c:4d:f7:23:a1:fc:1e:5c:fe:
e1:6d:a3:21:33:74:82:fb:bb:34:d7:d2:9b:73:61:2f:20:d7:
73:85:04:eb:52:74:85:7e:46:ed:9c:d6:0b:6b:6b:7d:ba:02:
a4:db:fd:78:c1:d1:26:e6:51:96:5b:7d:8c:30:a2:3a:b5:0f:
36:6f:26:7f:fe:fb:b6:8b:3f:55:92:e9:3b:7f:12:af:d4:fe:
2d:c5:df:07:2b:e4:58:85:9b:87:f4:51:12:d2:27:28:a8:45:
c7:7e:ac:d8:3f:3c:c8:e1:b8:f2:03:7f:5b:28:ca:99:d6:bc:
4c:e6:f9:66:5e:9a:45:49:d2:90:a8:e1:48:0a:27:bf:09:27:
3e:22:46:b7:6b:a1:0a:22:2e:6d:43:62:de:fa:b7:8b:47:a6:
6b:d9:6b:0e:2d:54:18:63:ae:d9:66:db:cd:f7:42:d7:f9:e4:
74:63:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:07:08 2026 by rpki-client