Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
File: S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json)
Hash identifier: leiiq5u75SZijw+T7WMP8Qlquab02fYPZ9OGK6PI35c=
Subject key identifier: 84:82:AE:DA:64:C3:61:50:9D:2B:C9:87:3A:F7:B8:0E:AA:B9:C4:41
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Certificate issuer: /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial: 019D25BA77067EEE2C4E8A38E750B9F1BB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
Manifest number: 1360
Signing time: Wed 25 Mar 2026 16:01:10 +0000
Manifest this update: Wed 25 Mar 2026 16:01:10 +0000
Manifest next update: Thu 26 Mar 2026 16:01:10 +0000
Files and hashes: 1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: VdUt+L2uqnRMc+0eg6scYFIBpc2K2Mm/HF4Dy8RL524=)
2: oZ_sRUkhzcnvo9UxHydsIIFowVA.roa (hash: M/9VTdKWiax6Tcg6atFhpgUR3/6F+N0ZZUqwIPzeqz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:77:06:7e:ee:2c:4e:8a:38:e7:50:b9:f1:bb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Validity
Not Before: Mar 25 16:01:10 2026 GMT
Not After : Mar 26 16:01:10 2026 GMT
Subject: CN=8482aeda64c361509d2bc9873af7b80eaab9c441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:c5:3f:b2:3b:d8:1f:8c:54:ba:ff:ad:61:
6c:45:19:43:32:65:d4:1f:eb:a9:4a:92:61:f8:c4:
74:ad:98:22:44:c5:8d:04:1e:2d:56:a5:bd:ab:b3:
85:e0:4b:ad:2a:63:d3:02:73:82:11:cf:73:a8:50:
1c:b6:10:e7:ae:ee:a6:9f:48:9c:a8:c2:1e:fc:fa:
fa:56:03:89:57:dc:49:1f:ef:8f:e5:27:ee:89:78:
4a:1c:83:6f:e3:18:6f:cb:20:d1:05:17:f3:05:09:
8c:23:1a:d2:46:d7:b9:fa:10:ad:38:0b:f4:27:e6:
42:ed:bb:e1:d0:13:45:f2:28:de:6b:fd:5a:81:c0:
a6:73:d4:e2:aa:2a:84:c1:65:ec:89:52:f8:8b:7a:
94:49:ea:a8:be:73:68:46:9c:22:30:4a:5b:dc:79:
df:e9:5e:b8:c2:b5:9c:bc:c7:e2:16:57:3c:5b:2b:
b3:2b:63:c6:4b:a0:49:ee:d3:f3:e0:51:0d:be:32:
f2:ea:bd:2d:b2:7b:59:ae:1c:41:ce:b5:f1:e9:d7:
19:b4:03:6e:8b:61:08:c4:f1:3b:6d:fa:4b:6c:55:
fe:af:2c:86:35:58:30:69:20:bd:56:7d:77:44:7f:
34:39:13:64:54:a3:72:95:6f:a1:84:ca:d6:97:60:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:82:AE:DA:64:C3:61:50:9D:2B:C9:87:3A:F7:B8:0E:AA:B9:C4:41
X509v3 Authority Key Identifier:
keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:87:ea:0e:7b:fd:92:98:3a:c0:e1:28:b0:31:b1:4c:5f:36:
7c:60:16:4f:62:6d:0b:2b:ef:8f:83:52:18:8e:bb:a2:db:60:
4f:84:70:44:24:84:a1:3b:2e:44:94:c3:56:bf:f1:83:10:20:
0f:ca:15:f9:4d:37:60:63:a9:6a:87:99:39:95:19:a8:03:d7:
4c:ab:c8:48:a6:d3:f7:a7:9e:e5:3d:ea:7f:c5:18:dc:cf:60:
86:e6:3a:b3:aa:0f:ae:c4:a0:9d:75:62:57:09:f2:c2:85:ae:
73:f7:62:74:35:92:52:3e:5c:4d:7f:83:40:43:94:5c:7d:d2:
8a:08:50:1d:2b:be:38:15:14:22:60:f1:26:46:30:ac:50:e3:
4d:0e:42:4e:f1:b4:ee:69:0b:58:1e:54:7e:95:0c:36:e6:fe:
79:c9:2e:8f:5f:d0:52:55:23:78:23:1d:bd:8b:74:d0:e8:6b:
37:ab:35:da:f8:38:4b:26:5f:88:a9:a4:b5:3e:a4:6e:06:2a:
00:29:e2:9d:63:6d:61:10:57:dc:24:81:03:e8:08:16:ab:94:
4e:e9:9b:ca:3b:fb:df:5f:ab:e2:76:f6:4e:8a:b3:0e:5d:bb:
a9:54:26:cd:55:55:9b:e6:52:10:70:03:ec:a9:fe:b4:bb:a7:
26:be:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:00 2026 by rpki-client