Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier: OZoReVFFFwJ8zQ0I+7adt82thyYwlTO9A4bqOAc5y2k=
Subject key identifier: 62:E6:AC:BA:3C:A1:D2:3F:65:97:51:C5:0B:49:C5:16:0C:BC:3A:3B
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 019D27A8C596195D8CCFFB93CF8578552E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number: 14B7
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: 4y1EBk6dbLscu7TuubVQpj3p-s8.roa (hash: TBvo1eP+imsTzppJhBpYDx8zDpINfxOs1/vehmwqpe0=)
2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: cI02RUGxxu/rs4Y7LZUx1vjwCoELnatNHDNn8yIPaQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c5:96:19:5d:8c:cf:fb:93:cf:85:78:55:2e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=62e6acba3ca1d23f659751c50b49c5160cbc3a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:38:62:20:dd:8f:77:38:c7:36:9e:f0:3b:
67:8b:f5:b8:ed:4f:d3:79:00:72:0f:6a:99:3e:d1:
9a:e1:64:d7:85:38:bc:90:de:40:79:2e:4e:14:2c:
0e:b6:c4:a0:ec:42:29:c8:15:81:a4:22:9e:6f:e5:
95:62:e0:5a:4a:e4:50:78:a2:f5:22:3b:84:7b:2e:
54:7d:0a:08:fe:dd:af:e8:68:ab:a3:ff:4e:db:a7:
83:e7:03:30:62:13:8f:97:2c:27:ad:2f:ba:3e:ab:
c0:25:8d:a8:01:e1:bb:d9:0f:55:6b:78:31:bc:ed:
47:7c:b4:c2:aa:f7:07:f0:12:24:bb:79:13:33:3e:
65:14:67:5c:aa:e9:b9:4d:88:54:d7:d4:7c:cd:4c:
b0:a6:47:7b:93:0d:8f:03:26:00:9f:f2:10:92:3b:
21:3a:25:22:85:64:cd:c1:4b:7e:aa:11:0e:3a:60:
4a:fa:9c:58:c6:14:81:eb:80:87:0c:2e:6c:4d:f0:
d9:76:4a:bf:7c:70:5b:e1:27:d7:6e:d5:c6:ad:c2:
ac:4a:cd:f7:e8:4e:95:fa:e8:10:71:43:a1:ef:17:
5f:de:7f:61:44:c7:c2:a4:0b:29:31:11:63:ff:69:
83:7c:74:6a:1f:aa:ca:86:99:3b:72:18:5f:57:41:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E6:AC:BA:3C:A1:D2:3F:65:97:51:C5:0B:49:C5:16:0C:BC:3A:3B
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e9:42:8d:e7:66:50:fc:48:06:fd:cb:5f:7e:d0:67:a2:50:
85:60:5d:45:21:c5:71:5a:02:0c:10:91:68:4f:af:e8:8d:90:
26:da:eb:1d:97:cf:ce:ca:3b:2c:56:b0:7c:1e:fe:ab:92:ee:
b0:ed:85:d3:60:8e:78:0f:ac:ed:af:1f:31:5e:d1:b1:d1:d1:
95:b0:ef:79:56:57:49:a5:ff:22:4b:cc:79:ad:1c:85:37:66:
99:d8:91:51:6d:fa:7b:72:c5:9b:f7:82:3a:cd:22:8c:d0:2f:
3c:e4:27:0c:5b:a8:95:af:94:21:f3:09:14:65:1e:77:a6:a1:
ed:b7:01:bc:9d:65:f4:ef:d0:3b:c5:c9:ac:3b:09:d6:68:e1:
6b:6b:37:c1:dd:68:bf:1c:cf:ac:03:3d:86:09:c4:58:49:29:
a7:81:fb:13:2b:b6:2e:aa:ab:1d:07:36:3d:0a:1a:46:10:e5:
ec:0b:66:9b:1e:5d:1c:d2:0a:cd:62:43:6b:7a:40:09:39:69:
f0:68:38:93:4e:0b:cf:1c:ee:1c:b9:f8:6a:db:11:26:f3:cf:
2a:94:0c:ca:86:e2:42:9c:33:35:e4:b8:3f:1f:25:4d:27:03:
84:a2:b8:b1:90:b5:87:eb:05:27:73:00:49:ab:cf:47:66:8f:
3d:9c:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:33:22 2026 by rpki-client