Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: e4T7o3NERv4JE15SHFM5vzkyro4wKXXRBlqud3KpLnw=
Subject key identifier: 43:79:E6:78:00:22:8C:2D:27:4F:40:7C:C1:7B:16:07:C8:B5:06:CC
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 019D2703F3FFBFE5631EAB93E5FD24A4CC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:03 +0000
Manifest this update: Wed 25 Mar 2026 22:01:03 +0000
Manifest next update: Thu 26 Mar 2026 22:01:03 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: GxLO9PHr3Ghk2OLD0Oj3r0RMFFyJBeK5GuOW2Vs5re8=)
2: oVwWnlXDmkKEJPwq_QTywUic6pg.asa (hash: vXDqor38fMbrJg0yNnP/TrAYe/tgp8ecmN/4akEFjw0=)
3: rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa (hash: RRythu0hdE7VczlwlFEUnLZKoxWCSbWPkOFFbdjDuKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f3:ff:bf:e5:63:1e:ab:93:e5:fd:24:a4:cc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Mar 25 22:01:03 2026 GMT
Not After : Mar 26 22:01:03 2026 GMT
Subject: CN=4379e67800228c2d274f407cc17b1607c8b506cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:f4:3e:da:02:cd:be:d1:02:54:c2:c3:02:
04:2f:49:0d:35:71:f6:2a:c9:68:d7:9c:86:ee:00:
9d:b1:4e:85:c1:e4:51:7c:bb:0a:26:5f:fc:2c:cc:
bd:2e:85:3c:1f:e8:49:cc:11:ab:59:fd:7c:01:05:
ce:3c:33:a5:5c:bb:d7:67:60:8f:4e:b3:e0:15:ee:
7d:c6:67:86:e4:ed:37:dd:b1:e8:c2:1d:d1:81:68:
8e:b1:f7:c5:7a:1f:f7:a2:98:a4:4b:d8:ea:ed:d9:
c1:a8:f2:a7:7a:6f:b5:5c:89:e4:9b:e3:cb:83:94:
a5:f3:54:bd:32:d0:e7:2b:06:31:8f:d9:6a:1f:02:
bd:ce:9a:fd:9d:ea:d0:f7:e4:f1:68:80:99:d5:1d:
c3:09:d4:88:fc:bf:e5:9d:49:c2:7e:2b:87:86:78:
fe:54:2c:e9:63:a0:f5:14:88:65:0f:3c:f2:71:ab:
78:93:39:6e:25:ac:30:1d:49:6f:7c:e1:67:81:19:
c0:8c:12:40:df:eb:36:da:ba:60:46:d1:41:43:65:
3b:76:09:6d:81:70:f1:56:8d:9f:44:3f:6d:67:cf:
64:67:53:b6:90:28:ab:b7:ae:f0:0e:3d:8b:29:bb:
cf:bf:7c:39:a5:8c:49:51:e6:85:4a:b0:27:1b:b6:
55:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:79:E6:78:00:22:8C:2D:27:4F:40:7C:C1:7B:16:07:C8:B5:06:CC
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8c:48:e1:0b:b1:33:7e:20:39:57:e0:82:8d:91:d4:5e:cd:
c1:df:1f:79:47:90:a9:61:45:e9:7f:bf:9a:ee:3b:da:73:52:
f0:9e:ff:2c:df:8c:ae:b3:56:51:54:2c:22:6d:c5:6f:ab:62:
b3:d0:12:03:7b:e2:0a:36:01:fd:90:78:8e:50:a3:ff:8a:15:
8d:97:bc:6e:eb:9e:aa:7a:6b:54:5f:3d:05:92:0c:17:9d:46:
54:5f:ea:bd:2a:a9:fb:64:7c:8d:91:7a:fe:36:a8:f6:6f:99:
1b:21:a7:2a:5e:c4:99:14:af:2c:8d:b8:ef:b1:e3:69:87:5c:
b1:43:46:3e:28:fe:93:ee:d8:b9:76:13:e3:3f:39:7f:65:3a:
61:ad:94:ad:c7:71:f3:6e:06:2f:74:2f:a8:bb:5f:3e:e5:fa:
5a:81:6b:e0:35:53:d1:2c:f4:15:14:79:a4:9b:b2:f0:7b:55:
b7:4e:9a:16:9a:14:83:f3:67:75:c1:66:69:da:9a:21:ab:ac:
0a:c7:e8:25:24:79:99:05:9d:af:25:71:6a:4f:7d:c4:1c:02:
46:e4:18:48:8b:6b:6e:1c:36:f1:1e:16:30:c5:83:13:dc:7b:
31:dd:1d:c2:f6:f9:17:6a:a0:3d:95:ac:c5:a4:7b:ba:f9:1a:
13:56:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:29 2026 by rpki-client