Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier: CPrRYSAacOeoaAi5GHjfXGHy9x84M0PcYp4c0BzkCNw=
Subject key identifier: F1:8C:2F:EE:2A:27:EF:74:EB:81:57:34:95:4B:28:57:5D:7B:D9:AB
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial: 019D2583D328077B60E5ACBF903164216334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number: 06EC
Signing time: Wed 25 Mar 2026 15:01:29 +0000
Manifest this update: Wed 25 Mar 2026 15:01:29 +0000
Manifest next update: Thu 26 Mar 2026 15:01:29 +0000
Files and hashes: 1: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: 1aip4L9cSWMYQ/Ha5w2sCZRrsfEt5X39nQ9oYQQzXz8=)
2: SnZyrIF6RABx6JSbJPFXyEaoM4o.roa (hash: 5p3rhTPu7aykKsYkOURaS1avQK2tbYJAoNaTXCxX5Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:d3:28:07:7b:60:e5:ac:bf:90:31:64:21:63:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Validity
Not Before: Mar 25 15:01:29 2026 GMT
Not After : Mar 26 15:01:29 2026 GMT
Subject: CN=f18c2fee2a27ef74eb815734954b28575d7bd9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:6a:e7:f8:b5:7f:cb:88:e1:b7:ad:36:5e:
70:64:a7:26:4d:18:7d:d7:af:89:4f:54:ef:6a:e8:
38:77:b7:d1:15:e6:e3:46:cd:27:d7:f2:a7:ac:41:
65:03:70:4c:86:09:d2:20:a2:b6:5c:e6:6d:27:ac:
79:b8:df:05:a1:b9:3f:bc:f5:6a:bd:30:9f:d5:d9:
69:16:78:e3:30:f8:ee:f8:9f:b3:c6:e2:90:95:58:
a9:70:1a:47:31:b2:bc:89:e3:0f:16:e9:8b:ce:01:
d4:2a:60:84:ec:d8:87:2e:3b:97:8c:45:65:e9:a0:
49:bf:85:7d:3b:b8:a7:85:72:10:92:81:65:c3:66:
96:95:75:91:c0:c7:5a:11:d7:08:b8:ef:ab:69:37:
72:bb:c1:2e:67:3e:17:3d:77:13:d6:16:44:73:e9:
74:08:d1:fa:93:08:46:da:b3:a7:f2:37:92:70:d5:
b2:a6:f3:de:1c:01:56:bd:09:ab:5c:83:62:d0:dd:
d1:87:c1:60:5d:f8:b8:94:1a:74:bd:33:02:f5:5c:
54:6c:a0:00:7a:4e:48:e9:da:ff:8b:6d:73:2c:7d:
1f:17:65:ea:e5:b3:8f:37:6a:5e:ee:59:a3:b8:7c:
8b:93:72:38:b8:a1:93:e9:c2:91:a5:bf:6e:ae:65:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:2F:EE:2A:27:EF:74:EB:81:57:34:95:4B:28:57:5D:7B:D9:AB
X509v3 Authority Key Identifier:
keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7e:60:dc:f3:47:b9:24:c0:d9:ee:33:17:97:53:c6:8d:14:
54:2a:48:b6:cd:83:80:6b:d0:94:7b:c7:b7:05:69:2f:b0:d8:
73:fb:61:6e:8d:f9:84:9d:8d:a9:1a:83:2c:e2:08:de:03:28:
bb:04:3d:57:fe:f0:e3:70:3e:07:d7:97:7b:56:25:ae:13:43:
49:49:9d:2a:9b:3f:fb:30:3a:36:8c:4f:61:b3:2f:91:d3:0c:
3d:6e:51:2f:9d:06:2d:17:b4:50:0c:27:05:9d:74:0a:2d:61:
9c:0a:67:a9:22:07:f1:b8:85:60:5d:5b:8c:92:d2:bb:0b:09:
1a:95:a3:76:a8:a2:75:60:32:23:be:b2:e2:ee:a9:74:c1:d8:
03:85:8b:75:07:07:bd:b0:fc:9f:a9:4f:ec:4b:3b:ec:2e:78:
e1:bd:5c:0d:42:b2:79:b7:9b:ce:be:a3:ad:5d:19:8f:b0:06:
d4:19:1e:bb:e2:34:8b:cb:64:58:a9:e4:80:4e:6b:39:58:a2:
90:97:96:0d:a4:d1:f9:c9:72:15:dc:26:e1:30:c2:b4:e8:33:
e2:4b:6b:8c:e3:0a:ae:00:d7:e6:ba:2e:8d:7f:73:9d:dd:11:
7c:96:3f:ff:4d:ef:15:c6:53:09:9a:c2:f7:19:26:96:02:6a:
a7:54:eb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:16 2026 by rpki-client