Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
File: S5o7nhAjIJXBjSZERAzlxYoTizU.mft (raw, json)
Hash identifier: /425O9fAFA0KS9kxw0G3LiVfVRoNPb0gWTX/CP16hao=
Subject key identifier: BB:C3:5F:F2:28:0F:56:01:2F:A0:E9:D3:6B:39:FA:52:7C:6A:07:E0
Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
Certificate issuer: /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Certificate serial: 019D284E261CBE385EA30515F98E52A3E522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
Manifest number: 101F
Signing time: Thu 26 Mar 2026 04:01:43 +0000
Manifest this update: Thu 26 Mar 2026 04:01:43 +0000
Manifest next update: Fri 27 Mar 2026 04:01:43 +0000
Files and hashes: 1: S5o7nhAjIJXBjSZERAzlxYoTizU.crl (hash: gYbMQ2qB8WrqXKsDKa1QWZyHptt+ZiHBMUJJyExj8pY=)
2: _T6zV2ELZWjUdtaXJfX-mXC7l2M.roa (hash: Di+3zjNxD4VBkQkrMYOgpBTt4aXpGzdYOnM8KOhwPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:26:1c:be:38:5e:a3:05:15:f9:8e:52:a3:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Validity
Not Before: Mar 26 04:01:43 2026 GMT
Not After : Mar 27 04:01:43 2026 GMT
Subject: CN=bbc35ff2280f56012fa0e9d36b39fa527c6a07e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:c9:c4:4f:24:ec:56:42:53:25:3d:3c:32:
6f:3c:23:9a:a4:d0:e0:67:7d:cb:ae:f2:9e:ef:7a:
0e:9f:15:b4:8b:d3:f4:a8:ec:d2:e9:c3:d1:9b:ef:
70:2a:84:c4:c7:36:f5:7c:27:e7:6b:57:22:e9:f6:
6f:40:83:78:2b:20:2c:36:83:6d:23:82:c0:0e:07:
30:0e:92:02:ec:61:e7:9b:18:be:17:3a:ec:06:69:
15:f7:1d:a6:4a:e6:a4:6a:24:a8:49:18:74:82:95:
11:d3:42:dd:a7:6d:34:9b:75:36:b6:4d:56:3b:1f:
df:3f:60:9f:e6:7e:59:4d:7a:e9:df:79:fb:f7:08:
cc:b2:7a:83:96:7e:fe:5e:cb:a9:9c:09:c2:08:30:
b1:a3:30:48:74:4c:bb:ef:bf:ce:da:33:92:e5:09:
35:01:ee:2a:d1:1c:8e:49:98:52:63:dc:a9:93:17:
c8:b9:ce:9b:7e:4a:16:79:ae:a6:35:e9:65:df:5c:
03:6d:2d:de:7c:e3:0f:09:bb:d3:aa:3c:04:b2:61:
36:63:b7:c5:3f:1d:f8:15:27:58:86:a7:20:a5:7c:
03:c3:9d:02:ff:e0:2c:b0:10:4a:94:f5:22:1d:8f:
8e:03:0a:aa:ce:6b:19:c2:4e:a4:ab:d4:10:b4:35:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:5F:F2:28:0F:56:01:2F:A0:E9:D3:6B:39:FA:52:7C:6A:07:E0
X509v3 Authority Key Identifier:
keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7c:89:b2:25:21:da:cb:9b:62:a0:96:36:4f:f0:6c:f5:ca:
12:2c:20:24:bd:da:b5:4c:16:a8:8a:82:b0:91:aa:54:eb:65:
13:8e:5d:37:48:ea:76:82:77:7a:17:2d:b3:05:90:2f:c6:e8:
42:69:e6:f3:a0:30:de:e5:88:89:84:f3:8c:7d:f8:75:ba:ec:
39:a3:66:bb:1b:d2:fd:d3:18:d5:45:5d:47:11:e2:05:aa:87:
31:e1:52:86:c4:38:4e:89:d2:4a:1f:84:39:b3:fc:ae:99:4f:
7d:0b:66:ca:e9:cc:2d:98:87:db:5a:c9:c6:bd:65:45:01:e2:
f3:05:f7:dc:af:f7:ee:84:6f:a5:b4:98:66:af:21:49:22:ef:
b8:3e:6a:e6:53:cf:56:87:30:d8:61:99:e9:5d:f5:6f:a9:73:
76:aa:67:d8:44:05:53:bc:91:32:d1:18:11:7f:7a:c5:c0:52:
2d:64:89:41:96:ee:c1:0a:cc:12:af:fc:8d:6e:98:65:b6:c0:
73:a4:83:c5:15:97:21:65:21:1a:e7:38:15:7b:d0:f6:97:e4:
dd:e9:46:dd:40:a1:04:30:16:cf:39:5d:d0:f7:e9:24:77:bc:
84:47:ad:7c:60:0d:8d:fa:c1:37:4b:41:35:67:1f:f3:36:60:
61:35:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:02 2026 by rpki-client