Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: AZr6N1HU8kCdwfTKwB1wntDaaxduHiP+49sLZDz5+Wk=
Subject key identifier: 98:D2:95:BC:37:F0:00:41:CC:23:FA:3F:8C:00:48:31:08:F9:BC:CD
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 019D29CDF4DE05C7B3B2DB8A811D2A427464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 10F8
Signing time: Thu 26 Mar 2026 11:00:56 +0000
Manifest this update: Thu 26 Mar 2026 11:00:56 +0000
Manifest next update: Fri 27 Mar 2026 11:00:56 +0000
Files and hashes: 1: KaaC6M28k9adFlDm0sQNkvGUIIw.roa (hash: 2H0fCcqXWjgAUaS5LPxTPaJ+kJQB9vSGvCYiGO5pfEU=)
2: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: ei/PrKkWOmgJ0fkOaEUwT/FqmgYmJFrrLNm9UV1K+uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:f4:de:05:c7:b3:b2:db:8a:81:1d:2a:42:74:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Mar 26 11:00:56 2026 GMT
Not After : Mar 27 11:00:56 2026 GMT
Subject: CN=98d295bc37f00041cc23fa3f8c00483108f9bccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:68:95:11:76:ef:60:17:04:11:ac:c8:eb:
73:08:56:11:67:0c:5a:8f:f8:da:6b:bd:dd:ba:d8:
82:4c:af:a4:fe:2f:08:f0:4b:fd:2d:73:b0:07:97:
ec:cc:88:90:f3:7b:22:27:0a:35:00:c0:34:3b:ab:
96:49:94:fe:df:fa:6d:8c:3f:6e:ea:0a:66:cb:df:
b2:af:b2:f3:8d:34:1a:3d:af:04:2c:d8:39:30:34:
14:ad:31:83:4a:e3:a8:ee:35:45:66:ea:ed:08:ba:
3c:1e:c7:6f:ec:2f:0a:bb:05:1e:9a:00:f6:87:0d:
ba:15:47:07:51:9a:2d:a6:b8:b8:25:b4:0e:61:0f:
fc:8b:3e:02:d9:7d:42:11:e0:67:13:d2:d1:5d:02:
d7:50:24:87:5a:b4:7a:db:54:06:5d:bd:51:9a:87:
e2:75:ab:d1:d1:65:e6:c9:6e:03:e4:37:e1:d3:17:
42:dc:ca:9e:f6:bf:5c:aa:25:33:7b:fa:02:2e:cb:
97:bb:a7:71:27:5e:79:70:45:99:cc:31:c1:0b:b5:
2c:1d:d7:26:18:29:b9:68:c9:96:a8:87:b3:c8:73:
db:20:23:c1:6b:6a:34:cb:cb:3d:f0:2a:e4:be:4b:
c6:7a:50:0b:0b:99:06:f4:59:2d:72:2c:0f:64:e8:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:95:BC:37:F0:00:41:CC:23:FA:3F:8C:00:48:31:08:F9:BC:CD
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:43:b9:5f:fa:59:5a:9d:f1:b1:22:22:50:47:49:1e:98:6d:
fa:ce:a6:ee:80:58:d8:79:ca:a6:07:a6:32:0c:4f:8f:2c:ad:
1d:c8:15:f0:c8:4d:f1:d5:c1:1e:f5:0a:08:3c:fd:ae:d1:48:
42:d5:cb:66:b5:e2:ef:a1:e1:a7:bf:6a:e5:c1:a2:66:8b:41:
ae:d5:60:fc:42:11:fe:94:52:a5:b2:dc:f7:8e:07:fd:b3:4b:
7d:02:89:f9:af:01:22:07:a2:26:74:ee:e7:bb:8d:69:73:12:
69:a1:43:25:7b:7e:f4:4d:24:4d:5d:a7:d2:d8:43:30:d5:f8:
0e:f8:d6:c2:7c:5b:28:de:17:23:83:7c:5b:1b:58:ed:27:5b:
b4:c9:53:36:ba:54:89:11:0d:45:5b:11:24:7d:d7:5e:c7:a6:
29:51:7e:65:70:70:c8:11:af:82:5d:b4:49:c9:8e:25:f7:30:
5a:58:7a:7c:68:6f:5f:50:f7:d1:62:81:14:80:17:ee:a0:b0:
bd:13:51:16:b4:fd:53:85:66:6f:62:bb:81:d3:c2:69:82:75:
74:6c:b1:d9:d1:55:ef:37:2f:d6:72:fd:99:e1:c4:c7:af:f3:
9c:a0:4d:55:c6:e4:e3:60:6d:7c:dd:31:97:bb:38:b6:1b:19:
39:e7:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:31 2026 by rpki-client