Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: KD9wf25aMGIKkIarfMFBqyE7Oe4xOUQwARX/xcjHeAo=
Subject key identifier: B8:20:E2:65:6E:FB:24:DB:D5:37:99:66:D4:70:22:7A:B2:85:04:F7
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 019D29CE2D117017AE54C300999F220866AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 18A3
Signing time: Thu 26 Mar 2026 11:01:10 +0000
Manifest this update: Thu 26 Mar 2026 11:01:10 +0000
Manifest next update: Fri 27 Mar 2026 11:01:10 +0000
Files and hashes: 1: 2km5CePTq7_BnWDbbdzBAnFRzXw.roa (hash: odLHriDBowdLruRMyp7oP30CTWfC4IMigBLHf3TCMXY=)
2: P3pMTXaPEJ3pF-gEwjCXB342FMw.roa (hash: ctsyJFlW0Oa24uSpietN5XHoRYpf4UiDm+Wb7QP+anM=)
3: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: yECk7b4KmsS9Zj+4dPLJO+Fg7y25zYeO6e/mzejbYng=)
4: sncS8S2NsUSvaykCM37LNBlWYeU.roa (hash: qh0is7RUGO8WSotkmc+90Ufb2ZAu2P4HHEPVCF4ovi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:2d:11:70:17:ae:54:c3:00:99:9f:22:08:66:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Mar 26 11:01:10 2026 GMT
Not After : Mar 27 11:01:10 2026 GMT
Subject: CN=b820e2656efb24dbd5379966d470227ab28504f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:ea:e8:d3:75:4d:e1:6f:16:d9:91:d9:2b:
7c:91:ab:d5:b4:1c:c9:ae:27:71:3e:59:01:6d:be:
3a:af:4b:2a:95:2e:fd:12:23:f2:fb:be:0f:10:49:
77:93:5e:f5:db:48:04:b9:af:53:46:d3:82:b1:33:
c8:8e:90:50:38:fb:9d:da:e8:7a:a5:97:b0:7a:60:
32:bb:0a:36:fd:07:ce:4c:ca:89:16:19:b7:ab:bb:
94:1d:4e:5b:f4:0c:34:3e:f1:10:65:06:2a:b8:a4:
56:3a:15:c4:ff:27:fd:8b:db:3f:da:df:59:cf:d7:
5a:6f:18:ed:9d:00:c1:bb:d5:bf:17:82:40:26:3b:
45:ee:80:0f:bf:ab:fe:5e:20:87:0d:9c:db:f3:06:
5c:21:44:c2:31:c8:aa:ba:ae:e6:47:31:4a:04:37:
90:82:a5:e4:70:9c:86:b7:2e:08:88:83:96:26:3a:
42:44:2b:90:1e:46:23:72:04:c3:9a:79:f6:bf:c9:
bd:93:c5:82:7b:e3:b9:9a:8a:4f:00:d5:7e:4a:e2:
5f:bb:e0:37:f5:37:5f:1c:ad:fe:9f:e5:b9:14:73:
04:06:ad:f2:c7:bb:c1:c5:5a:02:33:93:12:d5:2c:
16:e4:1c:56:59:2c:18:0a:d4:e7:c2:b4:80:69:a9:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:20:E2:65:6E:FB:24:DB:D5:37:99:66:D4:70:22:7A:B2:85:04:F7
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:1c:21:1a:4b:9a:1b:a8:c9:3e:b2:3c:c6:9b:46:8a:58:a1:
69:8b:ad:d8:8c:7a:87:ee:9c:f2:bb:ce:00:70:1d:93:e1:98:
1c:0c:5d:1c:e4:c0:a3:0c:34:bc:57:3e:40:a0:31:f0:80:94:
16:15:34:04:68:79:e0:f7:ee:36:ba:86:3f:c0:69:fc:21:cb:
9a:19:04:1c:d5:b0:0b:35:fe:5d:fe:64:04:45:d7:09:8f:10:
0e:47:04:c3:3e:0f:21:e1:60:a4:d1:69:8d:8d:fc:3c:c8:d4:
7d:db:90:2f:7e:61:ee:db:be:ea:d6:54:2e:f6:a4:86:c6:0e:
81:1c:78:6d:75:4d:32:e2:83:b3:1b:1e:c6:1d:da:3f:b0:bb:
a6:cb:f1:34:20:91:23:b7:4e:26:b3:14:64:f5:8c:48:52:a3:
3a:09:4e:cd:20:2c:cd:33:ac:74:dc:d1:3a:bd:9d:ba:f6:ae:
65:d6:a5:67:a1:aa:91:b3:40:f7:01:f1:b6:da:d3:ca:f2:ca:
9c:fd:cc:6b:16:87:c4:1b:6f:2c:07:f1:bc:6c:3d:9d:c5:17:
f0:a6:1e:8e:58:1f:6e:75:5c:be:b1:92:30:a9:e7:fe:a7:c4:
48:92:39:e1:7b:e2:b3:8c:21:9a:28:e4:f9:3f:78:73:db:41:
59:be:82:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:14 2026 by rpki-client