Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: XVcdz35HZp60s2x70DJ/rctxixY9ePq8CjEMP3oPspY=
Subject key identifier: 1E:8B:9F:B3:68:0C:73:6B:C7:7E:EF:E8:83:F6:5F:99:5D:36:24:33
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019D2B4E5C305226CCD760C8814DCBF78599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 15AC
Signing time: Thu 26 Mar 2026 18:00:48 +0000
Manifest this update: Thu 26 Mar 2026 18:00:48 +0000
Manifest next update: Fri 27 Mar 2026 18:00:48 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: lVyWH7Hm416Vy/ASpRXsiSjiEsLfAMiGUAxKI9KSgUI=)
2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=)
3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:5c:30:52:26:cc:d7:60:c8:81:4d:cb:f7:85:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Mar 26 18:00:48 2026 GMT
Not After : Mar 27 18:00:48 2026 GMT
Subject: CN=1e8b9fb3680c736bc77eefe883f65f995d362433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:d7:88:ce:07:9d:59:63:03:da:da:2b:d2:
06:56:6d:9e:48:d8:36:b6:4a:51:a2:36:ad:d7:55:
3f:30:98:23:c7:4c:38:a7:03:e1:71:7d:32:3c:77:
06:ba:44:4b:60:50:fe:90:22:04:23:1f:a0:c7:5f:
5e:1a:7e:64:ad:89:ae:b6:c2:81:e8:55:4b:a7:2b:
76:29:aa:47:3f:6c:89:dc:d9:cf:da:f7:1b:5a:00:
af:89:0b:b2:71:0b:d9:64:16:45:03:95:a4:a6:99:
e2:f5:8f:30:ca:2e:5b:4c:01:19:d3:b2:b6:35:7c:
35:ae:8a:59:8d:ba:74:e9:0e:e1:fb:e7:52:50:21:
de:d1:5e:29:27:92:4f:9e:9a:77:f8:ce:d2:21:57:
37:99:46:6a:5a:3a:32:81:62:a8:7a:96:63:ad:0d:
4d:93:d0:88:01:0b:89:d5:2f:5d:10:95:f7:fb:be:
3b:6c:ff:0e:cc:73:fd:3b:2e:66:09:25:58:df:e3:
6d:49:1d:0f:df:ca:b1:47:82:e1:7e:b3:dc:da:c4:
a4:9a:fe:79:04:40:da:dc:cc:9e:02:ad:a7:6e:c8:
82:a3:0e:fb:9c:52:26:39:25:f3:3a:29:46:6e:d2:
ed:3c:a2:ed:4c:7f:8a:f3:fc:c9:96:d9:02:fd:19:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:9F:B3:68:0C:73:6B:C7:7E:EF:E8:83:F6:5F:99:5D:36:24:33
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:84:de:30:ea:ac:1b:2e:93:1b:e6:7a:9b:85:67:f4:bc:a1:
d2:93:26:9a:e0:9f:f9:f4:0c:82:de:51:76:c0:c8:e0:2b:c0:
ab:f6:6c:3a:5e:50:72:7b:39:98:76:73:44:d1:15:ed:f1:e0:
65:10:94:b6:31:ad:4b:eb:34:db:d0:a5:ba:b5:29:81:03:8e:
70:42:c2:16:e4:d2:df:9e:31:32:e9:76:59:71:db:d2:d0:57:
32:cf:94:a3:e0:5b:42:fc:cb:f0:91:42:db:98:67:29:92:97:
28:cc:58:59:92:71:bd:11:10:ab:bc:88:fd:1a:15:18:2d:90:
68:c6:04:5e:0d:8b:75:4f:07:77:c8:53:10:69:58:4c:b3:c5:
0e:c5:89:b1:fb:e0:b6:75:d3:52:a9:e3:a6:e1:1e:b2:26:24:
4d:39:d2:cc:fa:4e:43:24:06:e7:2d:60:ea:34:a0:e4:11:a7:
63:80:69:56:c4:6d:0d:1f:7f:81:be:a1:6d:33:3d:09:03:95:
1c:0e:2a:56:fc:3e:26:43:f7:c1:d5:69:39:27:24:c3:d7:42:
06:0d:1b:c6:0c:95:8c:ff:9d:d4:99:6f:c5:de:9c:03:d4:6f:
6c:98:94:cb:20:fc:86:3e:53:63:b3:b0:ea:70:94:cc:f0:ab:
0c:b3:7f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:41 2026 by rpki-client