Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: I0oEDCqaMWw7VL+1nlcuMKHbQ9GAYIQNMVmIsVkMwoI=
Subject key identifier: 95:22:3B:EE:9C:0A:6A:FC:52:71:58:29:26:96:FF:4C:77:F6:2C:58
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 019D265F9E0D43BA127210E005D55EB530FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 1765
Signing time: Wed 25 Mar 2026 19:01:33 +0000
Manifest this update: Wed 25 Mar 2026 19:01:33 +0000
Manifest next update: Thu 26 Mar 2026 19:01:33 +0000
Files and hashes: 1: A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa (hash: 9eSIPzP882gnq+toY+f9OquYBfy9B8LbOEOMMknDFO4=)
2: ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa (hash: judBBvzLbMYur3XpExAgR3vsTfmpZxb1unhrGpyJGfs=)
3: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: qa+1x23mINxi6HVwXD+HdcyNClzO1yf/qilWB8tP1io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9e:0d:43:ba:12:72:10:e0:05:d5:5e:b5:30:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Mar 25 19:01:33 2026 GMT
Not After : Mar 26 19:01:33 2026 GMT
Subject: CN=95223bee9c0a6afc527158292696ff4c77f62c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:a6:d9:e7:3e:da:17:46:0c:da:b8:00:6a:
78:a5:e4:08:1e:3c:2e:1a:93:df:c5:06:bd:ec:52:
b4:98:c3:2e:95:e6:b0:4f:b5:1f:7e:84:90:af:90:
99:63:a7:8a:4c:b1:c3:0b:cf:8c:f7:94:e6:06:fb:
4c:36:e4:90:50:cd:7b:a7:7a:1c:ec:a0:b6:52:78:
e0:bd:a7:cb:d3:9d:d0:15:0f:e3:3a:41:f5:be:4d:
f6:8b:21:2d:7d:71:73:24:b1:59:68:65:0e:ee:b4:
58:54:48:6e:19:ac:2f:1f:d1:46:22:1f:6d:45:e3:
79:84:f7:e4:13:dc:87:5d:f8:16:e3:eb:68:72:93:
50:17:ca:a3:e2:bb:4d:0b:46:e7:eb:5e:1e:06:42:
e3:31:0b:e0:fd:2e:30:1a:2d:ca:bd:36:74:0f:2b:
15:c4:f3:6b:7e:f2:2b:d3:06:6c:f3:b1:f2:60:71:
7c:73:42:f9:81:46:6b:fe:ee:f4:98:85:df:9e:1d:
78:87:f2:95:80:76:c6:95:5c:38:6e:3d:63:f4:6f:
5e:1d:16:77:23:35:7e:45:e9:7b:fc:9b:17:e3:03:
45:3a:8a:cb:4f:a9:db:38:3f:d8:ee:e5:ab:9d:a4:
2b:e4:c8:11:aa:49:59:02:6b:05:eb:bd:69:ed:ad:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:22:3B:EE:9C:0A:6A:FC:52:71:58:29:26:96:FF:4C:77:F6:2C:58
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ae:a5:40:da:2c:d6:43:a4:20:c3:26:5a:49:30:bd:b0:22:
f0:97:ad:06:f3:94:92:41:84:14:a9:94:c7:10:16:6b:ec:8e:
ce:e3:ed:77:08:6f:e5:59:1b:e3:3d:a0:8a:e4:09:4d:c4:c4:
94:a9:0e:19:63:6d:8d:2b:31:3b:a5:36:39:72:e7:f3:6a:be:
07:77:aa:f6:2a:9e:b5:65:c8:0d:5d:f9:1a:01:0a:f3:08:85:
55:ee:f4:8f:6a:11:02:52:0f:7f:b7:86:f2:44:0e:38:b2:ff:
6c:6c:fd:86:03:2f:80:3f:8a:18:1b:4f:2f:c6:9a:39:87:6e:
db:ee:10:9d:9e:08:a7:bd:36:69:8c:56:69:cc:a4:46:6c:e9:
c7:21:2f:1b:05:a1:8e:e0:15:30:64:18:4c:90:e1:80:5c:c7:
5a:da:7d:43:3f:0a:a8:09:9a:86:01:d9:46:b4:34:9f:51:a0:
87:0b:b2:c0:9c:e1:f6:75:fc:c6:49:26:74:57:b0:2a:36:22:
3a:0e:7c:11:7a:1d:d5:b9:c9:17:c1:16:74:21:9c:d0:09:70:
10:45:ac:6f:5b:0b:dd:ab:c7:73:d6:26:5c:47:05:4a:fb:f7:
14:7d:5f:53:ce:c7:3c:d5:03:22:e5:57:a9:11:5b:da:29:a7:
44:cd:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:56 2026 by rpki-client