Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier: VPhY75SsBA5NmlD54n/6roTQm5Pj5Wj1BbVTtts+jwo=
Subject key identifier: 4B:56:21:5B:7A:13:A0:A9:D1:D9:EE:53:08:BE:39:8C:6D:C4:A4:58
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 019D389C4E59B8E9C6121FB269A886881FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number: 1166
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: NtzUoTARnkc4QLuLuKK3L5i08Gg.roa (hash: WHzeIB9oGHBY17wslEieeVrvaTIjdjtqABPLJfiC5Hs=)
2: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: GaY4RbGwfCK7oRTf+PKIDRBhmPRzq2VoAFDNZMvzxj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4e:59:b8:e9:c6:12:1f:b2:69:a8:86:88:1f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=4b56215b7a13a0a9d1d9ee5308be398c6dc4a458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:02:bb:e8:f7:86:4d:2f:cb:c9:47:b0:bf:
cd:fc:cd:16:49:51:20:3c:95:96:fc:c6:7a:6a:9c:
97:86:d0:69:0c:2c:d7:ee:b6:b9:99:63:0a:92:b2:
3a:c2:f6:c2:31:99:32:74:ee:dc:25:dc:e3:3e:d4:
bb:f7:3e:7e:3b:cd:93:0d:42:19:91:91:39:f5:0a:
ca:75:39:8f:db:7f:b4:1a:80:92:57:0c:94:7b:71:
16:9e:b5:7c:27:16:6d:dd:57:73:2a:9d:85:2e:21:
e2:18:0d:7a:bf:93:26:54:67:2d:86:79:1f:04:85:
60:d2:61:69:77:46:a7:d2:89:8e:3e:8a:ea:3d:98:
8a:c7:1f:e0:8a:89:ea:0b:57:45:8d:30:2c:09:ad:
4a:07:b9:15:a3:1e:ad:5f:3e:7e:aa:78:0f:df:3a:
3a:9c:93:c8:d5:b8:e1:ce:d6:f8:3a:fd:9a:9c:1b:
1f:64:06:51:66:f8:c3:52:c1:0e:3b:a8:17:36:e7:
15:a5:8c:6a:6e:18:b6:b9:ef:1d:ae:aa:f0:11:9c:
58:ba:72:24:b6:71:2e:ca:bb:67:8e:9c:fd:50:e8:
52:68:11:a3:ac:9a:5a:c1:81:f9:cf:fc:9e:df:f0:
1c:c5:9b:fd:4e:49:48:d6:c9:03:9d:16:0d:f8:90:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:21:5B:7A:13:A0:A9:D1:D9:EE:53:08:BE:39:8C:6D:C4:A4:58
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:26:63:4a:11:30:30:91:6c:79:fc:13:b4:0e:e4:d2:81:cd:
87:a1:2f:23:37:3a:4d:29:aa:5c:a7:14:ca:27:3c:79:90:71:
10:81:6f:60:11:98:10:56:df:ce:72:28:72:f6:f3:45:0c:ba:
17:6d:3d:f6:cf:e1:e9:1d:8d:51:85:32:8a:a9:29:39:a9:46:
37:a9:65:8d:96:4b:53:03:d7:c4:c1:9c:2e:95:6a:51:ac:03:
7b:47:4c:67:55:60:84:5a:5e:9d:84:71:0e:57:70:4e:3a:62:
7c:07:64:ba:c5:ad:bc:70:0a:2b:a8:ad:9b:6e:92:a4:a1:e2:
5f:d1:72:29:9d:9e:91:45:6c:fd:1e:c3:4f:14:04:59:30:c4:
a6:f7:e3:65:f3:c1:db:ce:1f:72:a9:01:2e:ee:1b:42:d7:dd:
a2:1b:a4:2b:13:3f:ce:93:cb:1b:bd:10:5c:3d:e1:b4:32:f4:
ed:67:77:8a:d1:e2:ce:83:32:6b:e8:65:bb:cd:5f:15:30:de:
b0:5f:a0:2e:6b:7f:fc:e9:31:fb:ec:97:56:8f:f2:ba:14:9e:
84:77:2e:55:13:61:17:21:15:24:91:a9:08:39:10:5e:42:15:
4f:df:f9:13:52:d4:98:37:86:04:dc:43:a0:da:4a:2e:bd:31:
47:7e:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:04 2026 by rpki-client