Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier: 32Hsdv3EEW917oGLs8v+mbALSG/hIGwTuzlWx8Gjow4=
Subject key identifier: 4D:CD:B8:72:28:50:A0:29:0E:84:FD:07:C6:3D:51:B9:55:4D:4B:E2
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019E1FECFA98A62FE1BBA1562B751DD1FC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number: 0203
Signing time: Wed 13 May 2026 06:01:24 +0000
Manifest this update: Wed 13 May 2026 06:01:24 +0000
Manifest next update: Thu 14 May 2026 06:01:24 +0000
Files and hashes: 1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
2: 1-IsyXimgStm6iFdQzOtOH_LpB-w.roa (hash: cwbLRv/LdraPm/ncl7j6i/Fdy+jmyYNWU7iKuNjynNk=)
3: 1-Ltnis49LppJocd3k7gXrTQpkNg.roa (hash: fES976vUY7+JDOXisLep1HRMnouImf0rWbzUHBGyogQ=)
4: 2Za9dVMumbJLSFClL77aVj2ULF0.roa (hash: qlmsqbUXglSigqm8nRIHNKmW1s8wDeCWA2RRZbXlpQg=)
5: Qa8jr4r9oUMQqXWjabdDfQ7gmpU.roa (hash: THpSlkIZjg5gNVTxY4YREvnaBYJcv0jhBmfGA2+voJQ=)
6: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: IjPZJP9lg0Sl8n0dHKLbU8kDagRJmMfQRWZpsrwwpcc=)
7: WwtbUDEcYKOBmbiB4ccytduAdws.roa (hash: 1KKu453lPDcs/h9S9JRacXBXWjGi0AAYJKEx+9blrYA=)
8: lh9y2z8BjPboXQB7En0Art145ss.roa (hash: WeVrGCLtXYuvgZeAFcelbJV4mJDRhqOFt2yLKIQQeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:fa:98:a6:2f:e1:bb:a1:56:2b:75:1d:d1:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: May 13 06:01:24 2026 GMT
Not After : May 14 06:01:24 2026 GMT
Subject: CN=4dcdb8722850a0290e84fd07c63d51b9554d4be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:d8:e2:33:f3:0b:78:91:dd:25:ec:42:95:
c3:74:22:75:a1:1f:c8:56:d2:d1:c7:2e:b4:7d:36:
01:e6:7c:c8:e2:10:31:c0:7b:ab:54:99:b8:b0:8d:
70:9c:e5:78:9a:77:5e:d9:c1:6e:63:86:bd:b0:d2:
eb:af:c7:8e:94:e2:57:df:e3:fb:b9:1f:3c:db:39:
94:02:ed:47:15:cf:c6:1c:7e:92:b5:9e:1a:65:52:
45:b6:1e:07:8e:60:be:2a:32:7f:05:09:5b:89:9b:
84:74:03:1d:09:c7:2d:3c:7d:3d:82:60:d0:d3:b2:
26:77:ed:1d:45:9a:f4:93:07:57:58:dc:a5:29:7d:
31:a7:f2:fa:30:70:ab:94:8a:a4:53:fb:7b:51:35:
f0:6e:1a:c4:37:21:55:63:8a:92:9d:aa:cc:85:a1:
f1:e0:ec:e2:58:b1:e2:49:c7:45:6a:e5:eb:0a:cd:
99:69:bd:78:ba:6f:b7:77:57:00:b8:fe:a8:fa:ba:
f1:93:77:58:5e:86:82:31:0c:71:d6:bd:99:0a:f0:
f4:26:6f:6f:e0:4a:ee:3e:ee:14:d7:53:86:7b:65:
72:ba:4c:12:5a:45:d2:20:ac:df:bd:b7:40:36:1b:
75:82:44:a1:79:ad:37:db:7b:ba:f8:d1:5a:4f:38:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:B8:72:28:50:A0:29:0E:84:FD:07:C6:3D:51:B9:55:4D:4B:E2
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:45:b2:5c:aa:ef:e4:bb:dc:9a:61:18:e1:c1:22:5a:4f:71:
79:d4:f2:d6:bd:a8:77:2f:f3:73:e4:be:ea:0a:78:3d:19:ce:
fe:e6:ac:a1:bd:7a:c3:23:4a:08:c6:1e:a4:95:92:32:b9:14:
30:d5:57:e7:37:47:01:91:3e:2d:ee:4f:37:3c:62:90:5d:8d:
41:82:6d:ad:0a:88:f6:9b:50:82:49:5b:fe:94:09:87:aa:61:
09:ff:4c:1b:11:11:1c:3b:3b:ce:ca:59:44:19:62:f6:db:c9:
4a:98:ce:7f:1f:14:64:d2:c5:ab:1b:2a:87:24:3d:d9:d5:0f:
c8:ea:00:27:2d:28:c2:b2:16:24:51:6e:84:7e:79:5d:32:8b:
0f:53:97:4e:7f:f7:0b:76:6f:e8:73:98:37:58:9e:04:5a:83:
a8:af:33:3b:87:7e:ac:0c:ae:cb:5f:c9:4a:64:40:98:5e:46:
3b:21:29:95:1d:3c:7c:4c:ef:69:7b:31:d0:1f:09:1b:3d:2b:
8d:b0:78:c6:68:20:01:44:96:dd:8e:36:94:fc:4a:7d:3b:d5:
ba:2c:5a:01:4e:ed:e6:64:2c:25:ca:d0:63:5e:15:cb:41:41:
5f:80:5d:96:ed:6d:3e:af:0b:61:24:50:6c:85:fc:f0:1d:93:
37:95:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:05:15 2026 by rpki-client