Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: fd7B6aHod5IZ+aPdSqrr3q0yMhSVcxi8sJ/4Z2F1ZNg=
Subject key identifier: 6D:97:BB:43:44:02:48:2E:E7:D6:10:DA:07:1F:F6:8A:11:15:00:B4
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 019D2695D81BFA025562D0189167A89D798A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:00:47 +0000
Manifest this update: Wed 25 Mar 2026 20:00:47 +0000
Manifest next update: Thu 26 Mar 2026 20:00:47 +0000
Files and hashes: 1: IMC5fjcQ_DWcsRbnT_lDAoFdkcM.roa (hash: A0aysdB2+Z1WaCKJ3yfflKSlHn0Wo7eICnmJ34jKbxA=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: byTqxPoMxDUbY46kBF/5UGWacQ/lE/dWWRU4306k5dg=)
3: bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa (hash: J52qNXcYUL8Md7MHBa4Z1H074n+eMZjwdb1rZYRHD/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d8:1b:fa:02:55:62:d0:18:91:67:a8:9d:79:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Mar 25 20:00:47 2026 GMT
Not After : Mar 26 20:00:47 2026 GMT
Subject: CN=6d97bb434402482ee7d610da071ff68a111500b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a6:30:07:77:16:b0:9a:93:70:e9:81:4f:be:
cd:24:ea:55:de:04:91:22:f6:47:28:a0:e4:70:a2:
68:38:4f:53:cb:18:da:43:2c:41:5d:ae:5a:bc:ae:
ab:47:06:a4:01:05:60:9c:24:ba:23:1a:99:33:99:
c1:5e:18:98:07:9d:11:3c:7a:85:2f:60:cb:80:db:
43:a7:59:36:08:d7:b2:b8:ce:69:c1:d3:71:85:16:
03:0f:92:5c:45:11:25:7b:b5:e2:69:b2:d9:06:6f:
08:1c:e1:05:f2:90:f9:3e:c6:e8:58:43:e4:f0:fc:
ae:e1:cc:20:d6:d0:ad:98:c6:d2:35:56:60:c5:3f:
13:92:1c:9c:f7:77:fb:0b:bc:2d:5a:03:8f:fa:91:
01:b2:80:00:98:69:73:7e:55:90:7b:85:a4:f4:21:
1c:7e:3d:db:9d:6c:9e:81:2f:6b:b7:f1:06:6b:2c:
0a:c9:0f:f5:d2:00:91:ed:0e:e9:b2:fb:5b:0c:11:
b5:64:f8:86:d7:cc:79:02:7d:e3:32:33:60:78:cc:
62:96:b3:73:7e:5b:db:64:1f:d5:6d:fe:3e:12:99:
73:1b:76:6f:0c:ae:8d:3d:3f:f1:ed:25:52:14:01:
c9:14:db:9a:bb:74:67:72:cd:91:6c:58:4e:5a:c0:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:97:BB:43:44:02:48:2E:E7:D6:10:DA:07:1F:F6:8A:11:15:00:B4
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:25:e9:bf:21:e6:97:07:66:64:24:a4:64:ad:a9:ca:3f:2e:
53:b9:09:a1:2b:fd:1b:d4:16:5c:59:3a:fc:92:67:17:c3:c2:
08:0a:f6:82:40:8a:26:9a:09:6e:c3:49:a1:39:fc:5d:5e:34:
ca:2d:90:cc:ba:b0:9d:06:37:a8:0e:02:3f:de:7e:51:30:7a:
02:9f:d4:40:a0:8a:12:14:df:17:a5:f5:38:d5:8b:57:08:d9:
50:ee:66:f9:a1:00:3e:4a:ee:e6:41:bf:8b:9d:81:f6:b5:ac:
0d:bb:00:1e:5d:71:ee:f0:7e:bf:17:2f:9f:5d:0b:32:4f:43:
18:c6:b1:d7:d2:29:a5:a4:85:f1:f2:79:2d:55:09:d0:cc:b9:
28:28:32:10:a3:2d:8a:77:39:de:f1:94:66:6f:bb:59:fc:d7:
72:be:67:76:ab:68:fd:69:bd:a3:df:1d:c1:2d:f5:3a:8e:99:
ca:e3:ef:98:d3:04:fb:96:42:7f:26:3f:a0:d4:10:15:03:5e:
83:25:10:0c:a2:fb:67:41:e4:6b:d5:9f:95:72:8b:15:42:a2:
6e:42:7f:e2:94:50:dc:62:0a:3f:a6:15:17:e9:7f:61:40:dc:
57:c6:01:26:d1:1b:fe:27:62:c9:fc:8f:4c:a0:a4:c9:11:64:
89:0f:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:44 2026 by rpki-client