Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: yNSnfGxJ6IjGX5ml2AzPv4fCLnj9BG2A5CKrq4WTljg=
Subject key identifier: 43:11:94:72:AF:C3:79:B9:EB:F1:78:08:1C:AD:AB:BD:0D:DE:EF:1C
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019E2092416A9C4693EBFDB0A64914535E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 162B
Signing time: Wed 13 May 2026 09:01:56 +0000
Manifest this update: Wed 13 May 2026 09:01:56 +0000
Manifest next update: Thu 14 May 2026 09:01:56 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: ebblGTgpDnILqd26CVthLTXoon+5SNnMJB3sB0MYRuA=)
2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=)
3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:41:6a:9c:46:93:eb:fd:b0:a6:49:14:53:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: May 13 09:01:56 2026 GMT
Not After : May 14 09:01:56 2026 GMT
Subject: CN=43119472afc379b9ebf178081cadabbd0ddeef1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:06:53:e0:e5:fc:cf:ca:1f:c9:f8:dd:52:
08:5b:21:9b:b1:a9:7c:1b:07:b8:28:f1:1a:74:09:
e2:40:38:ff:93:9d:a6:d6:c0:d3:40:ae:70:f3:f4:
99:63:1d:9f:ac:3b:88:8b:58:38:6a:ca:47:14:3f:
2a:b6:2b:c8:f5:c8:ff:ae:b5:5c:0d:37:4f:97:e9:
c4:b7:11:08:18:17:e3:7e:b8:68:bf:46:04:db:7a:
af:12:19:08:e0:da:0c:58:a0:fe:87:9c:ab:72:8a:
c7:04:8e:d4:2b:54:a9:49:9e:b0:48:bb:1e:42:5e:
99:95:ec:d6:a0:33:94:9c:73:92:51:f2:d7:74:ce:
2b:c2:d6:9d:b4:42:8d:ac:67:9e:25:43:96:4d:c9:
e3:dc:d0:79:fb:82:a9:99:12:5f:a2:4d:2c:c3:00:
57:ec:80:44:d2:70:b7:66:36:d1:4a:c0:54:8b:b7:
f3:c6:95:fb:34:29:c0:46:a2:de:9b:b6:56:37:87:
d1:9b:4e:7a:b2:24:e1:ce:91:85:2e:62:6e:fc:e9:
b6:36:4f:9f:36:1a:18:67:f5:80:03:f8:ed:41:d8:
c3:8e:e6:49:29:0a:2c:d5:6c:0b:48:09:fd:fa:96:
16:35:6d:d3:00:35:00:95:d4:32:66:82:70:1b:8f:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:11:94:72:AF:C3:79:B9:EB:F1:78:08:1C:AD:AB:BD:0D:DE:EF:1C
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:19:26:83:0b:df:7b:d8:53:89:3a:77:bc:92:b4:79:d9:46:
3f:7c:c8:d1:b2:af:27:e2:a2:ec:bd:a7:be:4c:cd:ee:7e:b4:
fa:af:4d:95:44:11:1d:81:22:f3:7e:10:22:43:bd:14:9e:72:
08:6c:fe:69:dd:6b:e9:27:41:45:3a:31:33:a7:c2:6c:09:9f:
a9:29:0d:60:be:cc:19:e6:79:ef:e8:05:74:b9:77:54:ad:0d:
db:75:8a:3b:a0:60:c9:4a:d6:46:54:80:53:66:ec:ca:35:40:
bb:60:16:7c:86:e0:e1:c4:eb:b4:fa:5d:f2:7f:a5:4f:71:02:
4a:bd:86:bd:0b:ca:6b:74:50:19:15:45:73:0a:65:92:39:bf:
65:40:94:03:ba:2c:51:b1:69:f5:f6:77:cf:57:7d:89:f6:e4:
fa:2d:84:ab:cd:14:34:60:63:5f:82:ec:d6:f8:6b:a9:52:51:
09:aa:9b:2c:33:ac:32:fa:22:7b:49:fd:ab:60:91:41:24:da:
86:f7:99:b6:3a:85:b4:84:67:ca:a2:61:88:ea:19:fc:39:2a:
7c:e1:e9:78:2f:32:dd:27:76:e2:c2:77:bb:93:e7:d7:2d:89:
12:b4:05:a5:72:07:61:2d:38:69:37:22:08:7f:a8:fe:9c:44:
d7:2a:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:39:13 2026 by rpki-client