Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier: MsGEw4lYQfRZrpWjJfeDKsBsGxiHqRYWZX2+1rklnbo=
Subject key identifier: 30:56:24:6E:DB:97:5C:28:72:8C:EF:ED:D2:1C:FA:74:1F:EA:F2:F6
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 019D26CD152838CBAF3740F2BDC4DB67C30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 21:01:07 +0000
Manifest this update: Wed 25 Mar 2026 21:01:07 +0000
Manifest next update: Thu 26 Mar 2026 21:01:07 +0000
Files and hashes: 1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
3: _VVNfxdA5_FHj05YYq547OSKmlQ.roa (hash: 13IEzG/o1pmkzrgbkejU8IZuzD7A6Ft+aR2tUe+BCq8=)
4: bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa (hash: jfuS4WANPOwG9IyimGe8aZrpP9Pv78GN//1LDqZ2n2k=)
5: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: nO03s5ENRzAm7OSb4mY63rROpy3gXhe31iovmozEeB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:15:28:38:cb:af:37:40:f2:bd:c4:db:67:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Mar 25 21:01:07 2026 GMT
Not After : Mar 26 21:01:07 2026 GMT
Subject: CN=3056246edb975c28728cefedd21cfa741feaf2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:1d:bf:df:06:9a:6e:1e:ca:2c:36:ab:61:
b8:df:88:2f:6a:6c:b1:52:a0:31:fa:46:d8:4f:45:
13:7d:ad:e3:d6:8c:29:03:d1:4d:bc:37:f0:91:e7:
63:10:df:81:36:55:b2:d3:28:31:dc:ac:34:62:b3:
d3:3a:46:25:b0:52:c8:60:32:5d:63:bb:ee:10:56:
7f:f2:0f:31:15:fc:b7:db:fd:13:02:eb:5a:ef:57:
d3:a4:8d:4c:5f:0c:55:29:ff:b0:28:db:bf:7a:21:
01:67:36:46:ef:7c:79:36:f4:08:4e:c6:2f:a2:ac:
f6:5e:fc:1b:9a:2d:27:5b:ef:32:2c:8a:0b:4e:61:
24:90:af:8b:a9:c6:46:19:0d:26:2c:74:a0:2d:7d:
85:c2:ac:eb:0f:42:de:ae:00:35:96:86:d6:7c:18:
f6:58:67:82:d2:d9:c9:e0:b7:4c:90:b6:ad:be:eb:
95:26:b6:f1:a3:45:05:6b:8f:7d:da:a0:a0:e7:c0:
71:cc:40:b7:1d:f9:a1:ec:c9:c6:39:8d:ab:36:3d:
bc:90:49:a2:55:b5:ff:47:95:80:95:66:c6:08:b6:
e5:70:1c:94:be:26:ca:ca:11:6a:e1:69:f5:95:09:
0c:91:20:0c:78:70:b4:e7:21:99:ce:6b:82:12:4d:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:56:24:6E:DB:97:5C:28:72:8C:EF:ED:D2:1C:FA:74:1F:EA:F2:F6
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3a:4e:dd:f4:89:eb:2f:df:3c:99:e0:1f:de:ec:29:61:c3:
b5:26:ac:7d:83:65:b5:88:9c:54:a0:04:e7:2d:16:7e:d5:07:
f3:eb:70:cc:f0:2a:af:ba:44:0a:c7:eb:c7:8c:58:7b:46:c6:
f5:bb:61:59:e5:f1:76:d1:7e:2e:36:39:70:17:b1:6e:fd:01:
0f:79:cb:77:74:a6:13:94:c6:20:27:b1:90:5e:a2:1a:27:da:
74:44:96:22:72:27:0a:d0:37:39:5c:1f:49:27:0d:f5:6d:2e:
22:08:93:1d:b8:88:a7:34:1e:49:9b:aa:6e:1d:be:03:a0:66:
0d:58:d5:b4:91:98:91:16:c6:1b:32:07:f0:97:f8:5d:e3:55:
c2:27:4f:7f:4e:b0:d1:43:9b:96:98:88:35:5b:84:73:25:52:
6e:5f:6b:48:3d:22:24:99:e5:0e:f2:5a:d4:0e:9c:78:25:9d:
57:99:e0:b7:fb:75:35:7d:f7:21:5c:b4:9e:2c:69:ab:3b:cf:
b5:81:97:f6:d5:e5:33:dd:f5:b1:6d:cc:c4:d7:41:2e:75:6d:
c1:ee:58:b1:06:0a:81:90:4f:5d:38:c6:b8:2b:2f:85:9e:58:
75:cb:10:fb:7e:c5:93:14:d0:86:e8:f0:58:92:c4:18:3a:a5:
10:ee:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:51 2026 by rpki-client