Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: hinsF42Vg35QLud8EtbVa7Q94KqCamlTunc33INTf+4=
Subject key identifier: E3:CC:F5:2C:81:C3:C9:30:F7:C9:89:9D:6C:60:42:67:5D:36:E0:44
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019D29614CAA21230C5A8E77BC89E042B7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 15AB
Signing time: Thu 26 Mar 2026 09:02:15 +0000
Manifest this update: Thu 26 Mar 2026 09:02:15 +0000
Manifest next update: Fri 27 Mar 2026 09:02:15 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: 5KO2wDBBw9xzV+4cJCTJsuK7aW//V/yEw0T5f5o4eLI=)
2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=)
3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:4c:aa:21:23:0c:5a:8e:77:bc:89:e0:42:b7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Mar 26 09:02:15 2026 GMT
Not After : Mar 27 09:02:15 2026 GMT
Subject: CN=e3ccf52c81c3c930f7c9899d6c6042675d36e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:3e:24:e7:78:51:9d:99:71:48:db:2f:ab:
68:e5:f6:54:9f:8a:74:3c:bc:56:2f:d5:dc:b3:1c:
09:66:ac:8d:a4:14:b5:9b:87:ab:b5:5c:c2:b9:f6:
07:4a:43:37:10:97:42:a4:2e:e5:12:29:5a:d2:e9:
30:fe:56:af:fe:39:8f:aa:51:37:c2:17:b8:d6:78:
a7:0d:73:50:cb:83:a4:7b:18:9d:9f:f0:fb:a3:ba:
76:38:16:57:f9:f3:b9:e3:1c:e9:dd:4a:af:6e:1f:
98:b5:4e:1e:21:91:c6:22:2b:34:32:31:3e:0e:25:
0a:15:c6:ea:62:12:f1:62:5a:14:31:b9:fe:bd:1d:
9f:fc:73:9f:03:3b:db:bc:21:81:53:c9:e0:df:6f:
6f:bb:c9:8e:14:12:c8:ec:4c:71:3d:58:93:d9:5d:
3e:16:c9:e9:52:de:9b:94:36:64:08:18:82:87:ca:
d3:9a:e4:62:8c:bf:76:29:e1:6e:8f:16:91:da:7c:
ba:ae:4c:f0:1a:69:47:8d:79:a9:76:f9:a4:45:24:
5d:bd:e6:2e:b6:14:66:aa:df:53:da:8b:2f:cc:31:
65:05:d9:9a:96:28:85:52:17:fc:2b:dd:c9:87:6f:
9e:fd:57:86:b6:f3:39:c1:7f:c8:0e:a6:de:1a:1a:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CC:F5:2C:81:C3:C9:30:F7:C9:89:9D:6C:60:42:67:5D:36:E0:44
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:34:00:94:26:29:e0:3c:e2:74:68:1a:98:3e:71:52:6f:80:
e1:1a:d2:60:0d:6c:d7:9f:a8:74:0f:2e:1c:78:7b:8c:91:49:
83:20:b9:ec:48:33:6b:f0:7a:30:d4:a5:16:86:d4:80:1c:fc:
6b:f4:c8:aa:da:eb:8c:ec:c2:ee:06:62:35:24:8b:09:81:38:
fe:82:1c:27:0f:3e:05:a4:4d:b1:80:e0:e0:5f:8f:ae:bc:39:
ed:df:6c:aa:84:4b:d0:12:c4:f1:b1:78:fc:7d:46:7d:d1:01:
f6:08:10:cb:e1:4e:97:1f:38:b2:45:f9:a5:2f:f7:ed:6e:52:
e7:bf:6f:d9:7e:5a:e7:a7:20:10:7b:2b:f4:ef:9c:b2:74:d2:
e7:73:c7:0c:0a:14:69:1d:cc:40:b4:eb:fd:82:45:9e:1d:67:
92:b2:a8:91:99:78:f8:ab:c1:82:cd:61:f3:3a:9c:d8:34:43:
4b:03:9f:2c:0e:56:f7:fe:dd:ef:f2:87:f1:b7:fb:b8:73:01:
b6:0d:b9:bc:ee:cf:aa:f7:c9:81:45:76:18:a4:fe:56:90:aa:
f9:5d:dc:c4:36:7e:1a:5d:6c:bc:01:76:c3:20:c4:2b:b4:c2:
da:43:1e:f5:c0:4d:3e:7e:50:49:a5:34:3e:7c:4c:29:e0:47:
1c:80:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:15 2026 by rpki-client