
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
File: S_2cFAbIyhL_UAsf1MgAQUai2ks.mft (raw, json)
Hash identifier: HiUjp0dmlgWuXP8fn5zq8KYykOTWvtjJSqnTHR+EtgY=
Subject key identifier: D7:B8:64:58:F4:2E:F1:F4:3E:08:0F:1E:9E:1E:77:3C:D7:B2:56:3B
Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Certificate issuer: /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Certificate serial: 019D2583CB8128888B0942EBD76898207F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
Manifest number: 040B
Signing time: Wed 25 Mar 2026 15:01:27 +0000
Manifest this update: Wed 25 Mar 2026 15:01:27 +0000
Manifest next update: Thu 26 Mar 2026 15:01:27 +0000
Files and hashes: 1: S_2cFAbIyhL_UAsf1MgAQUai2ks.crl (hash: CRsP6hsLCt6f/3irb4kPzI9FBflWk4KQqD3wlyNoCe0=)
2: stwCeWMzGL7ZQca28YuX50xe0DI.roa (hash: UrA8IbR6QSjufOgIOzy59dzg6O9c8YCged1nYroTzqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:cb:81:28:88:8b:09:42:eb:d7:68:98:20:7f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Validity
Not Before: Mar 25 15:01:27 2026 GMT
Not After : Mar 26 15:01:27 2026 GMT
Subject: CN=d7b86458f42ef1f43e080f1e9e1e773cd7b2563b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:89:74:69:9b:63:e4:c6:26:48:ff:31:09:
c4:17:ce:48:63:ad:aa:3f:c5:02:15:e8:2a:59:14:
fe:6f:fe:67:da:32:72:15:1e:48:ed:6e:d3:a6:a6:
36:8b:9e:13:76:d8:f5:c1:6a:62:ce:55:9c:2e:d3:
b5:43:49:d6:cb:26:de:ca:58:58:07:ac:9f:9b:fa:
65:47:5f:56:b0:7d:af:64:93:5e:a6:f0:55:4c:6a:
1c:16:a3:be:ce:81:ee:3a:23:61:42:e3:a8:8f:96:
a8:93:5d:c3:c3:51:d2:7b:46:b4:72:2d:2a:fd:76:
12:84:a1:9f:b8:ba:0f:0b:b7:67:ee:7e:e2:8f:ab:
fb:1b:5f:d7:63:54:fe:59:b6:14:62:34:67:8c:46:
91:0c:de:31:d9:e3:34:f7:11:6b:16:07:6a:c8:f8:
fe:02:76:9e:81:8b:c1:63:3b:33:d2:17:9a:b5:e9:
5d:18:ca:76:1d:10:cc:74:66:dd:37:9c:1b:44:c7:
60:39:83:e1:44:f7:16:30:b9:b9:78:26:5b:5a:92:
52:96:0b:78:ec:8f:34:9c:97:db:00:e0:d1:95:75:
73:62:28:31:3d:55:67:1e:4f:f3:19:0a:a9:a0:54:
fc:3f:e0:81:61:95:dc:d5:a2:6c:a0:7e:19:06:f0:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B8:64:58:F4:2E:F1:F4:3E:08:0F:1E:9E:1E:77:3C:D7:B2:56:3B
X509v3 Authority Key Identifier:
keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f0:e9:4b:fa:9a:1d:5a:b5:9d:5f:2c:6a:10:d7:76:a2:d2:
92:4a:0c:af:9f:43:6f:54:ee:9b:62:b8:97:20:a0:e0:75:ce:
18:e4:1f:c8:c6:16:e4:4e:c1:d5:e1:44:29:41:df:11:33:ae:
cf:46:d8:6a:a2:47:18:68:c9:24:af:d8:ab:e5:30:b1:67:ee:
fb:bf:f6:8b:cc:98:e4:ae:cc:96:c1:6c:ac:3f:0f:d0:22:05:
78:2b:3f:4c:1b:31:8b:0f:08:0d:5b:ff:00:5d:8e:2f:8b:7a:
21:df:14:a8:37:d2:b4:bf:e0:95:e8:b4:49:5c:30:45:95:ca:
f0:07:b5:ea:1a:64:30:bc:10:11:1f:b5:d9:09:8e:2d:aa:b2:
16:ab:c7:64:2e:23:00:55:58:25:19:ca:52:79:51:57:19:d2:
e5:5d:6c:c8:62:56:24:56:cd:31:97:ad:24:30:a4:3a:c5:71:
f8:01:5d:cb:72:5c:d5:80:34:6c:d8:d4:f4:cb:e5:c8:47:61:
c6:2c:4f:3f:7e:92:5c:f8:b7:60:61:b7:ff:48:5c:23:7e:b9:
e0:1a:f2:86:0f:4f:f8:79:37:98:19:ee:b1:e1:f6:70:0a:3e:
1c:6f:cb:f1:c0:df:5e:f4:aa:a1:52:9b:1d:73:35:b7:90:48:
85:19:99:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:14 2026 by rpki-client