Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
File: S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json)
Hash identifier: 7lXJd3cCraKZ/ENe0XkOfGzYl1OSLsZIflUlm/W0cbI=
Subject key identifier: E1:7B:8F:58:7A:8A:F2:D4:CF:71:DA:D4:E1:D9:D0:DD:7A:7E:1A:CA
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 019CB994859BECD6FE39FB3F077881E09790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
Manifest number: 1852
Signing time: Wed 04 Mar 2026 16:00:44 +0000
Manifest this update: Wed 04 Mar 2026 16:00:44 +0000
Manifest next update: Thu 05 Mar 2026 16:00:44 +0000
Files and hashes: 1: 2_wCqEw8GddDou0kZW8e_OaYD-Y.roa (hash: jjHwHZbG+GUWLcD8cL/6tiQl9nk7+E15Y7xl904tgmA=)
2: FZP0qnMU98q0kSnM0Y7a2dQIups.roa (hash: F2I7NyVWwkoVb+PwDC36i4TLCjQA6IVa44WyV4KoqdE=)
3: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: k3O0suuh2q+fep6hf7urug98jR9xerQn9kXtkAvvZV4=)
4: a-x6eM06-S3ToMMPNzVnCccJ_0A.roa (hash: llcid5NErLNnpgu+7VTqgT/2o1JfflGSyuP3ZqonSuk=)
5: fwJb8-jhU9FPP5mFjgyO3uAZ7W0.roa (hash: HXqX6pFclK626D8/+3kEYMPmqF/qpQmRvVZYEHowAb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:94:85:9b:ec:d6:fe:39:fb:3f:07:78:81:e0:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: Mar 4 16:00:44 2026 GMT
Not After : Mar 5 16:00:44 2026 GMT
Subject: CN=e17b8f587a8af2d4cf71dad4e1d9d0dd7a7e1aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:27:5f:38:b1:a0:5e:4f:da:8a:dd:d6:e9:
7c:2e:05:d0:4f:97:1b:cf:31:ef:71:2b:22:32:2b:
cb:1b:d9:bd:62:b5:25:ce:86:0a:86:f8:e9:24:4b:
a2:b3:06:06:b2:08:c3:37:f8:e9:41:98:9a:66:dd:
b2:78:82:11:eb:20:6f:38:ba:83:fc:d7:f5:54:fc:
eb:2a:ab:4f:12:bd:98:0d:8d:0e:dd:6a:76:f3:33:
d8:14:b1:3a:eb:d8:97:2f:36:f3:39:60:f6:e0:7c:
9d:d5:09:e9:2a:1c:ce:a4:ca:b6:22:dc:b7:bc:81:
ca:28:ae:80:6e:91:d1:a2:d0:97:49:b1:7d:ae:16:
c9:33:af:3f:5e:7f:ce:6b:b9:27:0f:56:e1:3e:c8:
c6:0e:6a:40:42:2f:8f:1f:0e:21:f5:fe:4f:28:7b:
7e:a3:23:9c:bf:3f:dc:59:70:0a:c4:b5:42:6c:0c:
5e:66:0c:86:59:fc:c8:54:e6:b3:78:e8:2b:a2:b4:
60:29:2a:14:67:93:a3:c7:81:50:17:4a:e5:f3:41:
43:ae:25:45:b9:ad:96:47:01:15:be:5a:e7:77:5c:
72:11:ec:d3:5d:83:1e:68:2d:c4:fd:0a:24:8e:c9:
ef:94:e1:28:40:01:11:36:02:82:e9:5c:26:e2:f1:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7B:8F:58:7A:8A:F2:D4:CF:71:DA:D4:E1:D9:D0:DD:7A:7E:1A:CA
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f9:04:11:20:90:21:a0:fe:c2:ef:3b:12:81:d0:e9:6f:bb:
57:0c:79:f2:79:60:49:5b:84:cb:53:84:0d:96:e0:85:d8:09:
12:b8:a3:5a:b3:b0:e7:36:64:d8:c8:90:af:72:7a:16:6a:37:
8d:53:26:c6:11:5e:00:97:13:64:a5:44:be:4c:61:ae:4e:f9:
40:9c:0f:a5:2e:e6:06:87:d7:62:fb:b3:d5:59:df:1e:7d:92:
9b:d9:a4:00:3c:c9:5f:53:9f:a0:59:26:a8:b8:d5:4f:34:5d:
ed:5b:09:05:a6:53:01:a0:ae:90:69:41:2c:c6:8d:59:c6:44:
46:1c:d2:db:05:4f:cf:4e:0a:b9:1b:3d:05:01:29:c2:0c:ac:
77:43:0b:60:22:8a:e7:e8:9b:22:0c:07:c7:ed:56:70:1f:c6:
5c:5b:34:cd:a0:51:f4:8e:a8:f3:b2:c4:d5:97:00:6e:e4:bf:
87:28:92:0c:03:73:9b:ec:fc:c0:dd:3e:0c:59:1f:2e:36:53:
67:d1:e7:9e:04:eb:e6:f3:e0:55:a0:da:ba:79:be:c5:99:29:
78:ce:f4:a1:41:8b:21:bd:25:8e:41:49:d2:6f:46:e1:bd:72:
b9:ef:3d:d9:2e:3d:6e:5e:4a:63:d0:65:50:74:57:0c:e2:68:
b3:4b:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:24:00 2026 by rpki-client