Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier: +CgWT1hEzv7z2VKp6NQT0bro/BY8NA2C6xYRSHxFEeY=
Subject key identifier: 42:E1:AF:A8:17:A1:D8:A3:7C:8F:04:B9:4C:48:A8:66:E4:8F:35:FB
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019D26CD94655B8ECCBF01BAD9A3FF51E7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number: 0181
Signing time: Wed 25 Mar 2026 21:01:40 +0000
Manifest this update: Wed 25 Mar 2026 21:01:40 +0000
Manifest next update: Thu 26 Mar 2026 21:01:40 +0000
Files and hashes: 1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
2: 1-Ltnis49LppJocd3k7gXrTQpkNg.roa (hash: fES976vUY7+JDOXisLep1HRMnouImf0rWbzUHBGyogQ=)
3: 14-ez02X85NdajMvzg3IYi1oPCo.roa (hash: wzz4sLOh3cyvyhQETYo7rxnHXTtGKJT0PTO0xorH6fM=)
4: Peaumdb25XazmcYjplBOCOqSedU.roa (hash: 7P6L/I/q7iUz/t5OMdmE6REoUiJWumkQMuqFIztH5Bg=)
5: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: LEzRxs5Y4bas8gGufR62jEyJ3tuJp9pFs5Jx4rjYJNo=)
6: WwtbUDEcYKOBmbiB4ccytduAdws.roa (hash: 1KKu453lPDcs/h9S9JRacXBXWjGi0AAYJKEx+9blrYA=)
7: Xa7fNq306iK_L67oeRoGpGyVl8A.roa (hash: bcfCdxRyLe0Ir4b0bc+ci5cWcTFvO5oyxAsQNP3eSUk=)
8: eydVRDgIiSelvPv5lAcU1gNpJ74.roa (hash: mZYjWEhiQuDdn4din0AEBcO2hZ+a4Ltba564qkocjiw=)
9: lh9y2z8BjPboXQB7En0Art145ss.roa (hash: WeVrGCLtXYuvgZeAFcelbJV4mJDRhqOFt2yLKIQQeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:94:65:5b:8e:cc:bf:01:ba:d9:a3:ff:51:e7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Mar 25 21:01:40 2026 GMT
Not After : Mar 26 21:01:40 2026 GMT
Subject: CN=42e1afa817a1d8a37c8f04b94c48a866e48f35fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:05:83:fb:0c:76:5f:11:62:71:b0:3a:78:
92:8d:8b:ac:a0:ad:7e:78:cf:a3:87:36:80:d8:ca:
87:b5:35:2e:1d:1b:8f:8e:f8:6d:ef:ee:43:1f:8b:
68:f0:64:7f:9d:6e:6b:87:b0:93:07:7d:9a:7a:88:
a8:67:a9:ce:22:f0:57:f9:af:c2:ce:2a:e5:53:d0:
47:90:84:47:ae:2a:c2:60:b0:76:69:06:dc:0c:3c:
ce:46:e6:40:32:67:17:b9:ac:4e:1d:e3:fc:1e:c8:
2d:c5:de:8f:ba:df:a4:64:35:e4:ae:65:97:d8:cd:
bb:78:bc:82:d5:44:f7:ef:1d:e1:68:e0:04:a6:ba:
26:d6:c8:5f:e1:11:f8:8a:00:29:59:b1:4a:cd:0c:
0c:97:ee:56:94:13:d4:09:c3:07:56:49:5e:cd:a4:
23:87:6a:9e:8a:28:2e:39:76:6a:7e:1e:ad:02:46:
18:bc:14:66:73:e1:85:2f:f1:55:4e:3b:8a:cc:ee:
cd:9b:80:fe:78:f9:34:b8:10:5f:d6:ff:fc:b7:9d:
cb:ba:32:07:7e:0a:e3:27:75:51:c6:8b:b0:bf:c9:
b9:82:a4:7b:c8:fd:09:52:79:cf:c8:d4:11:ee:48:
60:13:a1:e3:20:29:4b:00:b8:b5:0f:82:54:ec:45:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E1:AF:A8:17:A1:D8:A3:7C:8F:04:B9:4C:48:A8:66:E4:8F:35:FB
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:69:60:53:3a:4d:52:76:03:82:82:62:80:fb:69:06:cc:06:
71:92:6d:9d:da:7b:55:7f:ca:21:32:46:1e:65:51:90:f0:70:
11:ee:64:24:47:7c:5b:da:e0:72:0e:71:88:5c:2a:8c:30:cc:
a3:56:32:a1:12:af:f5:b9:09:ac:15:c8:8e:bd:bb:a4:0a:bd:
51:3e:4c:c1:dd:ed:04:b4:c2:6d:92:4a:20:44:4d:33:83:bc:
8d:31:f8:bd:69:7b:cf:b6:87:7b:fa:32:3c:8c:2b:ae:9e:8f:
71:e9:d8:33:45:a9:ec:f1:51:98:0d:86:44:e3:d9:6f:b5:f9:
5c:41:a1:bf:87:37:ec:d7:01:cc:ea:ab:d4:55:be:c8:c8:a8:
7d:19:7e:50:88:c2:7b:10:d5:29:ad:a3:37:43:8e:09:27:0d:
06:6d:f3:63:80:69:d8:79:3c:54:90:a3:f5:08:71:40:a1:0e:
b6:19:57:74:43:bc:01:f3:2b:6b:dd:21:11:9e:61:ec:e1:dc:
51:02:a8:f3:bc:b1:29:08:65:51:88:fb:f9:ab:41:e5:00:91:
67:3b:3e:8d:9d:ce:66:80:bd:48:30:c9:ce:07:e1:08:b5:7b:
7b:4a:e8:22:97:99:b5:ef:e7:ce:ff:6b:25:25:b5:68:3d:5a:
fb:71:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:27 2026 by rpki-client