Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
File: s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json)
Hash identifier: 8e+ayGmDnHFMGXDbCywW3InbLsWoKn0nxYCDiq/JNQM=
Subject key identifier: EF:59:8A:1E:D0:08:E2:86:C6:D4:70:A4:21:6F:59:AF:34:E9:44:1D
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 019D2A723F2EEDA5A42D1B445BBB29645DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
Manifest number: 0C11
Signing time: Thu 26 Mar 2026 14:00:23 +0000
Manifest this update: Thu 26 Mar 2026 14:00:23 +0000
Manifest next update: Fri 27 Mar 2026 14:00:23 +0000
Files and hashes: 1: s1mTD9Rddiy89QAF1AtOmO8EmNw.roa (hash: cfZ3H6/jn9OftoW/9a/g+4fCFaBAxSLakZsiEgkr34M=)
2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: CNJ+8vfTOnNacQpVzLwSTZ30nRwFNijA+rihzAFF5pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:3f:2e:ed:a5:a4:2d:1b:44:5b:bb:29:64:5d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Mar 26 14:00:23 2026 GMT
Not After : Mar 27 14:00:23 2026 GMT
Subject: CN=ef598a1ed008e286c6d470a4216f59af34e9441d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:43:c8:26:b4:6b:78:64:22:a5:ec:8f:db:
52:3e:75:86:9d:7e:32:96:d5:1d:64:95:4e:8f:4c:
79:ff:c2:95:5b:05:ea:ec:97:f8:81:ff:7a:c7:68:
ae:24:6d:e9:72:47:c5:51:3f:e7:2c:11:62:87:fb:
a7:d5:e9:28:39:cd:5d:62:46:52:0d:02:07:87:74:
e1:60:5d:bb:2b:45:11:b2:1a:ee:54:c1:26:96:02:
59:18:0f:68:24:78:a5:97:de:f6:32:14:5c:26:48:
56:40:e7:de:a6:39:77:79:32:ac:f0:89:e6:a7:e1:
a2:b9:d5:1b:96:d5:ec:93:e9:87:e5:cd:73:25:00:
d7:77:e2:05:f8:59:09:4b:d6:fb:41:98:60:10:06:
47:c3:f4:98:48:f1:82:25:03:89:7d:cb:bf:30:d1:
da:88:4c:71:33:ca:26:d5:63:11:41:4a:8b:91:90:
f4:1d:00:16:83:37:4f:07:88:c5:a5:66:87:68:ac:
2f:26:14:7d:bd:a2:40:69:33:53:34:56:a3:fb:96:
98:2a:6a:16:9c:ab:5b:20:12:7a:13:1a:d7:17:53:
a3:55:75:7e:98:4e:0b:f4:7e:0d:a3:05:80:30:3f:
d2:73:b8:90:3d:5f:4b:7e:40:b6:15:a4:98:41:b6:
2e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:59:8A:1E:D0:08:E2:86:C6:D4:70:A4:21:6F:59:AF:34:E9:44:1D
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:56:61:f3:bd:ed:09:8f:89:f9:c8:10:31:c8:f2:37:ee:eb:
7b:7d:a5:d3:0e:c8:c9:73:ad:fb:09:b1:e6:9b:55:88:1d:6b:
d1:68:07:54:0f:36:54:fb:f8:df:e1:41:39:05:8a:64:f1:55:
7a:aa:b7:ee:79:a6:14:2d:99:9a:bb:7d:93:78:56:e8:cc:5f:
8d:a7:ad:d5:ba:16:31:fd:2a:ad:8b:d3:57:26:da:f6:b3:69:
dc:df:25:84:c6:90:ec:1b:06:46:80:d5:50:48:11:a0:46:b6:
c4:b2:26:1f:6d:2f:94:80:a8:41:b0:8f:1c:f5:0c:01:98:e2:
fc:4e:df:af:e1:30:a7:a0:ae:6c:0b:be:56:27:9d:4c:5f:55:
68:54:04:fe:46:bc:28:a9:64:d6:c7:dc:39:f2:68:dc:bb:95:
12:c2:81:ae:44:d2:5c:f0:6e:42:95:43:05:83:6c:38:69:54:
50:a2:a5:2a:59:5e:98:9f:79:c3:d5:25:9b:32:2e:7c:39:3c:
32:77:0c:07:09:f3:1f:fa:1f:35:5c:ef:7f:e8:2a:a3:90:09:
82:e5:60:73:2e:d8:a2:ff:4f:e3:55:3b:d9:91:c8:35:fc:6d:
0c:b3:f9:74:11:ed:21:71:94:61:df:8e:99:24:db:a6:f8:54:
49:cd:06:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:47 2026 by rpki-client