Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: Bki0HwjkBOP9DqpgPMC/7/lU1FnpihFZtvsJNwcdH9c=
Subject key identifier: 64:08:CF:2A:A2:28:1A:AA:E7:37:17:3C:AC:F5:41:9D:C2:7C:EE:E7
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 019D28F3291AAD9042A41D1530BC32DBE415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:01:57 +0000
Manifest this update: Thu 26 Mar 2026 07:01:57 +0000
Manifest next update: Fri 27 Mar 2026 07:01:57 +0000
Files and hashes: 1: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: xlLBictBJrXi0Cg3zBiWhi/Si2Jaw1saJL23gb83upM=)
2: gArRCC3q1YnlfTTgUixtQVGvcFs.roa (hash: narCCTYRY9LX6p6g8xSiiHiFz+JGuLFkwOfUQUNN3Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:29:1a:ad:90:42:a4:1d:15:30:bc:32:db:e4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Mar 26 07:01:57 2026 GMT
Not After : Mar 27 07:01:57 2026 GMT
Subject: CN=6408cf2aa2281aaae737173cacf5419dc27ceee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:be:b7:04:1c:e8:64:ff:67:d4:15:28:2a:
cf:ad:8e:a5:ba:6e:f3:0d:82:99:61:c8:ca:77:16:
9b:55:b9:97:2a:cc:eb:a2:83:ba:e5:78:ae:8a:af:
b8:5c:28:27:2e:9e:43:2d:7b:77:c8:c2:1e:f5:63:
93:01:7f:9b:4c:4f:9c:0e:27:1e:c3:56:2c:2a:db:
56:0d:79:df:f3:da:d1:84:31:dc:a0:a5:de:e4:9e:
82:cc:63:fb:ed:bb:f6:c9:e5:a2:83:e7:c6:09:00:
4b:70:75:8b:74:80:6b:06:0b:22:87:81:40:9f:89:
41:15:c3:85:b6:84:9a:ff:e8:5a:01:f3:4d:b8:2a:
98:50:c6:6f:d5:c6:53:8f:8f:7d:22:c5:e2:8c:f1:
43:e2:a4:5b:a2:d4:61:63:ce:ac:2f:44:28:7c:5e:
34:3c:1b:16:33:97:54:e7:00:52:e1:c9:f3:44:2e:
22:51:9d:de:60:87:f4:17:70:b6:a8:5b:88:fd:77:
03:c0:93:55:d7:a3:af:76:2f:60:91:69:0d:4d:e9:
e7:d6:e5:fb:37:66:84:db:38:90:c7:f5:9f:ec:b5:
00:f3:c1:b9:7a:9c:89:05:42:06:ae:1a:25:cf:92:
28:73:42:a9:a5:3d:ca:2b:a2:58:28:cf:05:c2:9d:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:08:CF:2A:A2:28:1A:AA:E7:37:17:3C:AC:F5:41:9D:C2:7C:EE:E7
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d6:0d:e4:fe:4b:bb:af:fd:92:42:5e:36:ba:23:ab:19:41:
5f:ba:8f:5d:68:01:ad:76:44:c6:d6:27:e3:d9:bf:d5:09:6e:
e7:b2:dc:59:e7:8b:6c:b7:07:3c:3d:dc:7f:0e:0e:f8:44:08:
7c:64:fe:21:e6:c7:a9:49:e7:33:d2:79:a3:80:ff:18:9f:c3:
38:b3:9f:57:09:a8:dd:6e:a1:01:d7:dc:63:0d:10:28:92:b1:
13:83:b4:fe:83:c3:ff:e2:5b:e7:fe:a1:32:fe:38:6d:c5:30:
58:39:ad:4f:a4:05:64:0e:c2:4a:c8:ed:68:87:ee:ab:10:03:
ca:1f:3e:97:cc:88:a4:b5:e5:0b:e4:18:3a:00:a0:91:27:b0:
9c:d1:6c:81:04:ac:1a:b0:a2:07:05:9a:7d:b1:06:19:c8:bb:
13:a1:d6:a7:9f:bc:40:77:b8:c1:a9:62:2b:30:03:63:93:66:
2d:cc:0c:45:f5:5e:6c:02:09:e1:93:dc:2d:05:3f:1c:ce:71:
1b:26:57:01:0f:54:bd:ec:98:80:3d:6c:af:ac:77:e4:bb:26:
c6:89:6c:8d:37:1e:cc:2b:2a:61:92:13:76:2d:e3:a7:17:ec:
85:6a:f4:96:c9:99:65:70:bd:15:bd:71:96:3a:b3:c3:20:7e:
d6:27:bc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:13 2026 by rpki-client