Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
File: S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft (raw, json)
Hash identifier: qM/dUIO8RmWnGzEAUtKGUc+2h3SBahlmHubIlNnmTPY=
Subject key identifier: 24:10:DE:C2:AD:17:CB:25:AA:12:60:1B:1A:E9:44:40:7F:F0:58:73
Authority key identifier: 4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
Certificate issuer: /CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Certificate serial: 019D2A04881393C9C037C30A8C7E00ACCA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
Manifest number: 17E1
Signing time: Thu 26 Mar 2026 12:00:32 +0000
Manifest this update: Thu 26 Mar 2026 12:00:32 +0000
Manifest next update: Fri 27 Mar 2026 12:00:32 +0000
Files and hashes: 1: S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl (hash: BdcmzUkSDH5YurrmMesUWyLGNSfu7Z4LZudpn+LR8qw=)
2: UVqvYO52B_mDbYpTXh7tiRMFdiw.roa (hash: dr+1/4Wpnd9WCKYo0XBHvqSgnCOs5Ovx5Q+q94HABKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:88:13:93:c9:c0:37:c3:0a:8c:7e:00:ac:ca:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b93c6a10d141f00aefade01bcd3492f754f4e83
Validity
Not Before: Mar 26 12:00:32 2026 GMT
Not After : Mar 27 12:00:32 2026 GMT
Subject: CN=2410dec2ad17cb25aa12601b1ae944407ff05873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:56:88:87:f3:77:5c:d2:a8:ca:5e:d7:92:
89:6a:c0:5d:94:46:f3:2d:a2:51:02:0e:7f:76:80:
0a:45:ad:b9:96:60:7e:ee:ae:f4:47:71:92:06:95:
b0:88:24:a8:81:7b:42:7d:6c:58:ae:0c:00:d4:15:
87:45:fa:9f:63:ef:f3:c1:0f:0b:80:55:bc:b2:f0:
2b:67:0e:04:14:de:f2:9b:e4:9c:e6:3d:a9:b4:18:
ba:48:36:db:a7:29:a4:8d:86:fa:0b:68:a7:62:bd:
a9:8e:44:e4:c4:4e:27:b8:9f:f0:54:a6:10:d8:c7:
8b:cb:29:6b:99:e6:56:d0:2b:96:d4:6f:31:a0:da:
3f:8b:35:d7:4c:58:27:ad:40:42:c8:fc:fb:ff:87:
40:fd:ac:f7:45:f6:5e:96:5a:a0:e1:bb:be:41:b8:
61:bf:2a:fc:e6:b9:67:99:e2:89:f0:2a:79:dc:74:
d3:34:c3:84:5a:88:e2:b3:71:fd:ed:90:b0:b8:95:
5e:23:38:b8:0d:32:45:c9:31:c6:dc:0b:43:f8:5e:
1b:d5:0b:10:ee:47:b6:3b:d6:f9:44:70:0f:9b:e3:
c5:6e:39:f7:5e:78:b5:a6:7c:a5:7b:c9:d3:6c:b6:
7c:6c:4e:90:8c:90:b2:b8:2d:da:cb:2b:8b:7d:f7:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:DE:C2:AD:17:CB:25:AA:12:60:1B:1A:E9:44:40:7F:F0:58:73
X509v3 Authority Key Identifier:
keyid:4B:93:C6:A1:0D:14:1F:00:AE:FA:DE:01:BC:D3:49:2F:75:4F:4E:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5PGoQ0UHwCu-t4BvNNJL3VPToM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2884a1-c124-4565-b841-e104c982d7a0/1/S5PGoQ0UHwCu-t4BvNNJL3VPToM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f0:48:4c:f1:87:fb:5e:74:40:7b:18:4e:58:39:fa:41:4f:
32:a9:14:18:58:19:2a:60:a4:9c:61:53:fb:29:86:48:e1:1e:
14:82:77:c5:62:3d:d3:cf:a2:fa:a9:a6:57:21:d5:0e:30:a3:
24:a6:1e:1e:65:2d:bc:a8:98:15:27:68:2a:68:9d:49:13:d3:
58:49:1d:f6:5b:38:c8:44:57:6a:68:2a:ed:2b:7e:0d:7c:fe:
9b:9d:a3:fa:cc:fb:5f:47:3a:53:f9:eb:60:b4:81:af:0b:66:
d2:67:23:cd:f8:7d:da:f3:34:fd:70:69:f7:83:72:a9:e9:e1:
b6:98:e0:be:2f:22:af:7b:98:71:18:1b:8d:1d:88:83:08:f3:
20:52:f2:02:35:31:98:28:9c:2b:c3:e1:b5:31:9d:c6:83:9c:
3a:27:fe:b7:ea:77:a0:4f:e3:2d:4c:08:b4:9d:7b:9a:4a:9c:
8e:dc:d5:6a:ca:3e:bb:7d:1d:2e:ca:4c:ae:af:af:e1:31:83:
57:a1:8e:04:00:92:ca:d1:ec:42:8c:99:0c:02:3c:99:e5:51:
e3:31:80:7a:31:e4:69:d8:81:80:d1:9d:22:fa:a3:65:ba:ee:
a5:89:93:76:ba:29:d9:26:79:29:b4:2a:d0:6e:cd:e3:5a:e0:
16:df:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:25 2026 by rpki-client