Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: fXSTp1FRdTg7Be14iCTaOTjSLrM9KyyyveTAes3eAcY=
Subject key identifier: 92:54:45:60:44:35:B9:3B:7A:88:95:ED:E6:DB:36:4C:B9:43:77:BB
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 01A0E1E21EA5ECE3393EA2D587461E8DE334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 1A04
Signing time: Sun 27 Sep 2026 08:01:27 +0000
Manifest this update: Sun 27 Sep 2026 08:01:27 +0000
Manifest next update: Mon 28 Sep 2026 08:01:27 +0000
Files and hashes: 1: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: O+yhE7B+1QdXf0Fu5ACjydZMrDRSsyryXIIBChAPf3E=)
2: eng9RYXhOr-5HaI5uOyelA6wzbc.roa (hash: LlIBH4V68aJMu/FCHYy8zCpNmTkO2PE9LFtoa1D1JsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:1e:a5:ec:e3:39:3e:a2:d5:87:46:1e:8d:e3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Sep 27 08:01:27 2026 GMT
Not After : Sep 28 08:01:27 2026 GMT
Subject: CN=925445604435b93b7a8895ede6db364cb94377bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:01:1b:b7:df:74:7d:38:1d:b2:4b:1f:23:
d7:0e:f3:1b:ff:7b:11:ce:7e:f2:78:b1:d3:81:13:
45:df:8c:7a:10:c4:31:f5:9c:51:1e:c6:b1:9e:60:
02:a9:6e:3c:cc:45:ed:ed:4a:1e:0f:fe:32:82:93:
f6:62:60:18:ba:a3:94:59:aa:84:f5:85:4a:30:6e:
b3:ee:52:1a:8a:64:50:9e:de:a8:41:67:40:ba:69:
2a:30:3d:75:10:8f:dc:5d:2b:9b:37:0a:3a:1d:3c:
f4:5b:0d:8b:18:59:eb:d1:76:44:a4:98:60:f1:54:
d0:9e:b4:63:30:ff:39:2c:34:5c:87:d4:ad:fa:11:
b4:fb:7e:e5:8e:4b:83:fa:18:47:20:c7:46:b8:ec:
1e:6f:ba:6a:9b:81:4f:2b:dd:6b:42:52:a4:d3:a3:
da:ca:94:42:bb:fa:70:5f:cf:d6:88:24:35:2d:98:
89:5a:3d:f4:ce:6d:e3:9a:63:ed:c2:8e:a3:43:67:
31:07:4e:5f:c0:43:9e:96:ac:3f:3e:fe:25:40:84:
d6:62:cc:74:56:5f:06:e4:f3:f3:0e:0a:4d:c7:49:
cf:e3:60:64:96:ba:d7:54:a9:2c:12:db:68:c5:ea:
d1:47:63:37:cd:77:ae:56:dd:d4:8f:78:45:f8:85:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:54:45:60:44:35:B9:3B:7A:88:95:ED:E6:DB:36:4C:B9:43:77:BB
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0c:2d:8f:1f:41:9f:da:72:38:37:3e:fb:d3:c4:18:2b:e8:
01:4b:9d:8f:5f:38:03:6f:0d:ab:6a:fc:6f:c5:14:c8:1f:1b:
32:93:ec:8c:22:b2:80:28:5c:94:ff:84:73:44:da:7e:99:67:
e1:0e:be:6b:68:0e:14:2f:9c:a6:f6:1c:e5:45:f3:59:41:aa:
d6:06:b8:e8:40:e3:4d:cb:8c:49:59:b8:f8:a1:8a:65:fc:79:
88:fe:2b:e4:af:be:08:2e:21:d7:70:1e:a0:3f:3f:d5:b6:d1:
ca:7b:76:e7:40:00:9a:c7:48:1e:38:3e:83:19:ef:1e:00:78:
e6:7c:c0:e6:b7:64:6c:20:2f:a1:16:f9:e7:03:23:80:1f:e2:
98:09:93:08:7b:e3:04:bb:e5:f7:90:2b:f0:2f:9d:09:1d:d3:
cb:63:06:5f:ac:d2:67:e3:d1:29:fe:3d:37:39:d8:2e:d3:9e:
fc:7c:5d:d1:b2:31:84:f8:6b:52:2d:27:db:54:de:33:bd:98:
99:20:e4:df:7d:a6:9e:2c:99:88:c9:e2:0f:60:79:17:f8:31:
fe:d3:ca:cc:47:fd:14:14:6d:9d:13:a4:e7:cf:bd:65:6b:35:
74:a5:58:cb:f4:c0:a2:b3:0d:63:45:ef:fc:f5:d1:ec:7a:37:
c6:05:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:50:10 2026 by rpki-client