Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier: rBC2/9q/x4QH83138mYEkKXav/+BVbX1s072yt4wRGU=
Subject key identifier: 10:DE:FA:FF:E3:A3:87:32:A2:88:A7:C0:DA:47:F6:59:3C:C0:84:D0
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 019D2A3C74F7745077DD25920E41A2F83F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number: 15F4
Signing time: Thu 26 Mar 2026 13:01:38 +0000
Manifest this update: Thu 26 Mar 2026 13:01:38 +0000
Manifest next update: Fri 27 Mar 2026 13:01:38 +0000
Files and hashes: 1: IdBqw0A4TK6uyYCMeFPtnqsmeRc.roa (hash: 5nFwsjED/xvOkZjCNJO1OpoEyT7doRuSAQWm9AMMmaE=)
2: hxTWlwt6XxySSXQcOC1UwXbMwbk.roa (hash: aX7p2s147zlrrkvvAok2NDrpVfnLraj+bgXnwC8UznU=)
3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: QPBX9wcGsO7dclUtH2ViX/xAtRtsmPSoMSQ+GJxBYXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:74:f7:74:50:77:dd:25:92:0e:41:a2:f8:3f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Mar 26 13:01:38 2026 GMT
Not After : Mar 27 13:01:38 2026 GMT
Subject: CN=10defaffe3a38732a288a7c0da47f6593cc084d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:98:9d:39:88:42:53:4e:1e:47:b1:50:a9:
41:93:27:22:ab:e5:de:36:8e:dd:2c:29:84:c9:d1:
89:c6:85:d0:76:1c:06:e4:45:7c:9d:8d:7d:e7:52:
27:07:05:f4:bf:a5:90:b5:db:51:b9:6f:00:2b:a4:
ad:27:ab:6d:fa:0f:d8:1c:7b:ea:fd:3a:b3:10:2c:
47:ce:95:8e:d8:98:f5:19:12:ce:9a:e7:69:7b:da:
26:7b:25:b7:a6:50:7b:e5:6d:24:25:b4:5b:c7:db:
ac:38:a3:ec:d1:26:6d:db:fb:94:d2:80:7f:a8:d4:
37:41:e5:57:14:85:ec:97:53:f5:df:5d:29:38:cc:
cb:47:24:31:5d:2c:5c:7c:75:85:a8:25:30:15:3a:
f2:0a:db:df:d9:04:0c:8c:dc:ea:a2:e5:cd:d0:50:
fe:b7:8e:32:a1:d2:6b:4e:56:d2:df:dc:4d:85:7c:
6b:f6:35:2f:46:c2:f5:98:63:b7:46:24:f6:b2:70:
5d:33:1e:87:7e:25:b5:cc:0a:18:ba:d1:8e:33:9f:
d5:a0:f4:9e:4d:8c:27:2e:9c:1c:d7:5b:2c:ad:24:
96:bd:e8:c2:69:f0:90:c5:32:f5:b1:e6:e2:09:2e:
97:19:8a:dd:06:ca:f4:19:c2:d1:b7:95:87:fe:68:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DE:FA:FF:E3:A3:87:32:A2:88:A7:C0:DA:47:F6:59:3C:C0:84:D0
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ce:6b:83:f6:0b:46:bf:3a:28:ba:5c:f4:ef:64:b1:07:5e:
52:0e:c7:77:16:fa:23:96:98:59:3d:25:95:79:f6:e5:59:c4:
20:b4:f0:0d:57:d9:6e:28:97:b9:01:5a:36:1c:2d:a2:d1:49:
45:f2:64:0e:44:95:ba:aa:61:83:38:1c:a2:9e:a1:a9:34:5e:
a7:ca:15:e7:8f:49:58:6b:a7:34:e4:1b:08:4d:d8:7c:7f:8c:
1c:af:0c:84:24:2a:89:86:56:ee:be:01:21:67:d4:4c:99:8c:
5a:00:ff:6b:44:b1:46:bf:e9:e3:08:7d:81:53:77:31:a4:4f:
00:6a:38:d3:05:30:e4:4c:ef:52:ed:55:46:c5:4d:be:11:5f:
8c:42:d2:b0:a0:57:16:78:3d:09:32:dc:c4:a7:2f:b7:f1:13:
d9:ec:08:ee:15:49:c9:8d:8e:08:df:7c:ba:df:c0:3a:97:34:
c2:15:7a:35:4c:62:ff:65:30:31:90:a3:99:e8:f0:cf:25:96:
63:12:89:9a:f6:69:70:c2:1a:e9:e9:6c:fa:f7:03:4f:79:69:
01:57:75:8c:65:11:e4:2a:01:34:de:16:af:1e:d8:9e:b5:cc:
6d:ad:e9:cb:b8:99:f5:bf:e3:07:f2:15:e5:73:f3:92:e2:d4:
90:06:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:20 2026 by rpki-client