Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
File: S5IeM_-6Ocahgd1C7jwK-gwiINA.mft (raw, json)
Hash identifier: 0n0pSN2oSXQN/WaRT6xbnrq0ri69v2UqnYrTfH4f5uY=
Subject key identifier: 8A:DF:20:41:A3:03:5A:C0:A9:8B:B4:D8:C7:FD:52:7B:98:4E:83:0D
Authority key identifier: 4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
Certificate issuer: /CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Certificate serial: 019E58259A6D3ADA52A801132D6836DD3855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
Manifest number: 0D
Signing time: Sun 24 May 2026 04:01:59 +0000
Manifest this update: Sun 24 May 2026 04:01:59 +0000
Manifest next update: Mon 25 May 2026 04:01:59 +0000
Files and hashes: 1: S5IeM_-6Ocahgd1C7jwK-gwiINA.crl (hash: F8/bA2aqs1XF31Wwia9NaPgkB/F5i7dwnhR0RqbZ9Ww=)
2: zQ6JtQe6ANshosjASGiX3HEOrVM.roa (hash: K4kNGYoNbxGtFYvRjMbuvsJfpbwJrRENNuvEwmp7Hp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:58:25:9a:6d:3a:da:52:a8:01:13:2d:68:36:dd:38:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Validity
Not Before: May 24 04:01:59 2026 GMT
Not After : May 25 04:01:59 2026 GMT
Subject: CN=8adf2041a3035ac0a98bb4d8c7fd527b984e830d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:ea:10:a0:bd:0a:2f:cc:24:c2:7d:23:46:
5c:68:95:89:df:d4:e0:fc:c2:2d:8c:2f:78:a1:6d:
11:ee:3f:6a:7b:5f:dd:b3:fb:dd:f7:69:9a:28:4d:
cf:33:77:c4:43:94:20:48:0b:37:43:4a:a2:0c:fd:
d4:10:3e:30:88:c4:a7:2f:39:98:69:4d:23:30:f6:
2d:be:24:6a:89:f4:8e:21:ce:b0:79:d0:12:7f:86:
ed:a7:9d:9f:3c:fa:0c:bd:54:61:c8:35:3c:06:29:
e6:10:27:e3:97:8f:2e:73:fb:40:43:3b:22:7d:da:
c3:fd:bb:7e:5c:db:16:00:3b:bf:57:2f:0e:91:ba:
ef:52:82:15:dd:a4:3b:66:7e:ee:ce:0b:02:2a:fc:
93:df:45:d6:50:e7:ea:f3:e6:f2:74:0d:e0:38:d6:
d3:46:a1:4b:d2:99:fe:16:01:94:ba:14:4e:53:39:
8f:51:51:f2:0a:4a:4c:63:2f:fa:0d:4a:fb:de:a7:
7b:cd:39:b4:21:9a:85:b9:2e:ea:bc:b8:e2:ea:b3:
56:13:0b:14:49:76:77:c6:07:46:95:c0:e1:aa:ee:
11:0e:6b:60:43:26:f9:4c:0c:1c:bb:b6:04:c6:f4:
c2:ef:3a:a4:49:93:71:b9:5d:42:ad:38:5d:ac:f5:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DF:20:41:A3:03:5A:C0:A9:8B:B4:D8:C7:FD:52:7B:98:4E:83:0D
X509v3 Authority Key Identifier:
keyid:4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7e:75:46:52:cb:76:6c:16:76:60:c5:63:c2:da:16:38:76:
38:e3:d2:9d:7e:85:bb:a8:9b:fb:e1:7c:04:ee:09:f0:b6:66:
5e:22:93:11:a9:99:47:8d:e8:c0:40:47:6e:63:26:73:9f:0f:
e7:f1:3a:31:48:4a:e0:73:65:28:e7:58:b8:a2:5c:2f:9f:01:
71:71:6e:08:6c:90:25:89:81:20:85:8b:db:63:a7:d5:2a:c4:
9c:23:15:1d:30:81:31:05:0e:1e:14:e6:71:47:f3:74:f6:09:
5b:e7:e0:fd:b2:8b:07:f0:08:b3:e3:3e:dd:5d:86:84:eb:f7:
ac:41:1d:a4:3b:db:7b:d4:d9:9e:1c:c8:97:10:38:56:19:b9:
6c:21:15:53:c9:1a:9b:e6:e1:9d:17:b2:c0:ac:e8:71:79:59:
1e:60:47:b5:a6:18:5f:c8:df:a5:85:15:6b:b0:8b:8f:b8:fb:
76:54:d3:9e:80:ba:d7:1e:e1:b1:45:94:c5:b5:ef:98:b1:cc:
97:12:d8:77:60:26:b3:fb:38:7e:f6:52:88:01:73:3c:5a:d7:
7d:ff:1f:17:3f:c7:f7:3d:ec:d4:c9:d7:17:b4:ad:3b:09:bd:
31:ab:70:a2:9c:5b:4c:af:1b:1a:eb:20:86:fb:ac:aa:63:09:
ec:33:78:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:45:26 2026 by rpki-client