Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: FOKUGrIeErrtVLwoxHaB0DX8C6C3B08/7l6G2msE0PQ=
Subject key identifier: 5F:58:74:24:B6:BB:C4:B1:22:B5:96:B5:BF:E8:8A:4E:64:5E:6A:75
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 019D2470804C624A7558A409BF719A137F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 10:00:45 +0000
Manifest this update: Wed 25 Mar 2026 10:00:45 +0000
Manifest next update: Thu 26 Mar 2026 10:00:45 +0000
Files and hashes: 1: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (hash: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E=)
2: S84INADK9hbzUCAynI1288S4OaU.crl (hash: 8K8KDgvZYtASZisRAAdZmo2mqt6YYYehx+KcpHEhL74=)
3: rCfZiz4VYjIBfKu68sLkrutitjY.asa (hash: Ybi387bthNpyIWhQISnJAR9yyGDzSsTDc5P3pmLLByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:70:80:4c:62:4a:75:58:a4:09:bf:71:9a:13:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Mar 25 10:00:45 2026 GMT
Not After : Mar 26 10:00:45 2026 GMT
Subject: CN=5f587424b6bbc4b122b596b5bfe88a4e645e6a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:70:69:e7:83:d3:04:6d:ab:35:33:4f:96:
a0:b8:5c:1e:7f:d9:4d:34:f9:9e:78:b6:92:fb:bc:
ad:88:1f:3e:66:40:e3:cc:50:41:23:fa:74:0d:9d:
35:73:0c:db:24:fd:df:f1:82:50:11:34:7d:c7:7e:
32:aa:41:a3:bd:48:6e:f0:2f:13:7b:d4:d7:75:a6:
e6:bb:91:d1:2f:de:dd:9e:01:8d:5a:31:08:77:00:
1f:10:33:b8:5f:bd:89:77:24:68:1e:02:31:10:8b:
c3:b2:9b:18:af:f4:dc:dd:b3:31:92:87:e9:e8:29:
b4:ec:59:f6:2f:f7:72:59:26:fd:f6:55:3f:90:83:
c3:bb:78:bf:e9:50:94:b8:88:be:91:2f:c0:35:d1:
a0:db:d2:c4:d1:c4:40:dd:26:0f:4a:b7:d5:bc:59:
91:12:ad:a6:6c:d0:79:a0:73:74:a5:1e:10:6c:00:
04:b2:55:0b:c4:6f:f6:5c:66:31:b4:66:55:12:fc:
c0:54:42:ec:57:73:b3:a8:7a:12:43:07:6f:aa:43:
56:40:d3:3f:e7:96:f7:77:46:36:8f:96:1f:53:28:
71:ae:43:da:0e:bc:70:d6:d1:db:20:3b:e3:7c:15:
5e:04:56:10:36:89:4b:f1:3c:06:13:1e:e1:88:b1:
80:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:58:74:24:B6:BB:C4:B1:22:B5:96:B5:BF:E8:8A:4E:64:5E:6A:75
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:92:60:ca:5e:f5:90:f5:4e:17:b6:ea:26:a1:2e:87:cc:0b:
eb:19:b4:f1:12:eb:d9:d1:81:18:6e:4d:fa:91:36:c1:85:00:
28:82:17:12:68:b0:1b:d0:aa:94:09:7b:32:b9:b5:b3:4e:c2:
f0:09:1d:61:5e:4e:32:2c:e0:37:6a:90:a9:78:7d:33:10:1a:
fe:48:b5:53:06:05:4d:b7:90:15:98:75:51:4a:c2:5c:4e:c2:
d6:f3:98:e3:2d:31:8b:39:67:80:7f:62:8b:a6:82:41:ec:c1:
55:e4:d3:2d:30:b4:77:1e:9d:d6:6c:f2:ac:6f:01:e3:0b:8a:
d2:c3:db:71:83:7e:7f:50:8d:fd:aa:2a:77:20:66:1e:7c:0f:
c0:c3:ac:95:5b:dc:71:28:d7:94:da:66:c0:25:3d:cb:5c:fe:
1c:02:75:89:bd:29:b0:16:96:cc:5d:40:10:2e:25:65:80:47:
9c:d8:a1:77:53:4d:d7:59:60:10:41:12:8d:5e:35:58:ea:b2:
1b:31:63:2c:56:2a:dd:c1:91:d9:92:36:1b:14:c9:d7:48:e5:
2e:37:3d:dd:e4:44:b9:9b:67:f0:87:72:20:d4:2e:4a:21:52:
a8:3c:16:0e:35:91:57:6f:dd:21:de:61:90:ce:0a:2e:6a:22:
f2:80:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:51 2026 by rpki-client