
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: nEJ7uUU9ih3fRf5BP0023rY+8hFGKKj3Kr7d5KefIzE=
Subject key identifier: 16:E5:E4:26:24:DB:AD:FD:C3:01:23:A1:95:59:4F:CF:E1:21:54:0B
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 019F91DA2AAB0110586103A29BFD02516E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 1956
Signing time: Fri 24 Jul 2026 02:00:21 +0000
Manifest this update: Fri 24 Jul 2026 02:00:21 +0000
Manifest next update: Sat 25 Jul 2026 02:00:21 +0000
Files and hashes: 1: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: oyuXLyBNBpGkI/sgv/DRYTc88lZknJz+A4h1/FM6pDA=)
2: eng9RYXhOr-5HaI5uOyelA6wzbc.roa (hash: LlIBH4V68aJMu/FCHYy8zCpNmTkO2PE9LFtoa1D1JsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:2a:ab:01:10:58:61:03:a2:9b:fd:02:51:6e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Jul 24 02:00:21 2026 GMT
Not After : Jul 25 02:00:21 2026 GMT
Subject: CN=16e5e42624dbadfdc30123a195594fcfe121540b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ee:25:cc:6c:9c:aa:92:dc:cd:85:53:2a:0a:
11:3e:52:65:db:f8:cc:94:67:cb:0f:f5:f2:d3:c8:
01:20:c4:d8:64:c4:e2:e4:3f:08:04:97:e9:3e:51:
c4:58:10:48:0f:28:29:02:22:3a:8d:a0:f9:e8:bb:
74:db:23:34:e3:98:50:e4:90:d8:87:a2:63:b8:44:
3a:9a:ea:a1:9e:cd:8a:73:21:b4:2e:9e:7b:23:65:
95:6e:56:48:fa:6f:71:76:b9:db:13:7c:b1:d1:56:
55:48:ce:4b:5a:c0:e8:d1:d2:93:ee:a4:22:92:a4:
71:75:3a:65:38:ad:b6:0d:51:c8:d6:ae:3f:69:9c:
da:bb:cb:c0:82:0d:56:58:5c:41:c1:18:43:fc:f8:
a1:5a:70:48:23:50:e0:52:83:62:a7:7e:87:ac:3d:
6a:37:15:2b:5c:85:c2:71:2e:39:e6:54:3a:65:c0:
34:a2:ed:98:11:26:9e:ac:a9:3d:b6:46:4d:8c:43:
cb:15:c5:8d:8d:58:76:65:68:55:98:de:90:02:4d:
29:c7:86:f3:8d:36:68:6c:c0:5d:5a:f2:b4:59:e8:
cf:88:64:03:f2:b2:39:18:cd:e0:f2:66:58:6d:c5:
8f:40:14:66:22:61:74:10:1a:05:24:06:f8:16:95:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:E4:26:24:DB:AD:FD:C3:01:23:A1:95:59:4F:CF:E1:21:54:0B
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:df:4f:6c:bc:49:d9:52:17:c4:71:39:f7:0a:80:a0:54:5c:
a3:a7:1f:c9:9f:4e:02:24:ff:b4:c9:12:01:ae:5a:d3:e7:a4:
7a:9e:d9:b9:34:d9:d3:c7:9e:6d:95:b5:31:e3:0f:ce:08:fa:
62:ff:ee:56:f4:a3:0a:5a:e9:2a:d0:c0:e8:67:bb:1d:fb:89:
83:08:57:5b:1d:3e:66:33:88:d0:37:c9:65:34:43:9f:08:74:
70:83:82:5e:bb:bf:e8:93:bf:85:17:3c:4e:d5:85:75:bc:de:
24:aa:0e:c0:9d:cd:57:20:16:50:67:94:d5:30:ab:33:48:6f:
40:ab:b9:9e:c0:9d:b4:25:46:e0:a2:33:7c:8a:e9:2d:e7:82:
a8:e8:b3:7a:31:fb:8a:ee:2c:66:cd:50:5a:52:c6:31:56:bc:
63:f4:49:63:3d:f4:cd:d2:10:b0:8b:a3:5a:2d:79:71:2a:08:
d7:6e:35:a2:1c:67:bd:49:63:e8:ac:20:48:7d:6a:4b:a7:f7:
a1:ce:5f:0a:3a:b0:28:53:5d:11:4e:50:c9:88:43:34:ed:f9:
d3:5e:00:dc:88:88:0e:62:7c:e6:ed:6f:14:d4:4c:c5:ff:82:
3a:4d:ef:80:65:0e:72:72:0d:d1:7a:2e:4f:c6:45:3f:7d:5b:
98:73:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:14 2026 by rpki-client