Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: WCSpSGK7SPNAIH0afqJLCgERoE2FDOrR3SSGfbOYxJ4=
Subject key identifier: 02:06:31:69:C8:31:2E:EA:55:EC:5B:5A:67:06:B4:2C:B4:FB:7F:73
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 019D25F19B491C148864E2828B1CA964A859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 1815
Signing time: Wed 25 Mar 2026 17:01:23 +0000
Manifest this update: Wed 25 Mar 2026 17:01:23 +0000
Manifest next update: Thu 26 Mar 2026 17:01:23 +0000
Files and hashes: 1: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: QaVEaAOI3hAHHBGbtI4y8TYC5nP75Xkaoo8Uyih28V8=)
2: eng9RYXhOr-5HaI5uOyelA6wzbc.roa (hash: LlIBH4V68aJMu/FCHYy8zCpNmTkO2PE9LFtoa1D1JsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9b:49:1c:14:88:64:e2:82:8b:1c:a9:64:a8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Mar 25 17:01:23 2026 GMT
Not After : Mar 26 17:01:23 2026 GMT
Subject: CN=02063169c8312eea55ec5b5a6706b42cb4fb7f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:1e:49:23:2a:83:7c:f0:df:5f:24:78:f1:
15:4b:ac:b4:f8:31:0f:b9:0f:c2:c4:f0:7d:84:35:
88:d8:ef:e2:ab:ad:84:e3:8a:58:1b:47:69:af:06:
07:39:b4:ac:06:67:fb:a6:22:ce:3f:f5:04:bf:a7:
df:0e:1d:44:68:94:38:1f:a7:ef:7d:bc:11:7a:a4:
5e:52:cf:46:38:33:41:93:b3:bb:4e:40:11:82:a5:
44:aa:da:71:5d:db:47:bc:71:31:cd:f6:61:13:2a:
e7:62:3f:4b:a2:3d:e0:4c:0b:f1:75:14:69:dd:ef:
66:9c:2c:f9:5b:5b:8b:f5:54:53:4f:6d:03:89:77:
e0:c0:f1:00:8e:14:dc:a8:27:ac:2e:8f:b4:bd:ef:
98:86:cb:88:0b:e8:0d:1f:9d:02:2f:7e:c8:4e:01:
2e:3d:9c:73:f7:6d:50:20:27:eb:08:e7:01:45:f0:
17:2c:fd:f1:a1:33:6e:fc:ec:1d:ba:81:3c:2b:18:
f1:9a:a4:41:4e:54:86:f4:41:13:75:bf:70:a7:1b:
fd:8f:c1:0d:ec:e2:7b:c6:6e:69:2d:fc:fa:84:c9:
cf:34:6e:e0:5f:68:ae:e9:ba:ff:c4:09:89:4a:37:
02:ba:5f:01:69:74:a9:63:94:c2:de:b7:7e:06:38:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:06:31:69:C8:31:2E:EA:55:EC:5B:5A:67:06:B4:2C:B4:FB:7F:73
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:16:56:bd:8b:a7:23:30:1e:05:80:b9:8a:f0:29:3d:ac:21:
61:d7:23:ad:3c:b6:3b:db:73:b2:35:f1:04:46:dc:78:6e:42:
44:b2:62:31:22:08:bf:88:26:12:6b:d9:61:0a:c0:fe:09:c7:
b9:81:c2:83:fe:04:ef:7d:5e:ba:1d:0e:4c:8e:11:be:89:c7:
68:bb:4c:4a:09:4b:9c:07:dc:a1:8e:b6:a2:07:b7:b7:e2:ff:
51:db:d2:6d:1b:55:b8:1c:80:2f:78:1c:8d:3a:22:70:57:2a:
c6:4a:b5:99:6b:67:68:f3:ed:ea:8d:b5:f3:44:26:08:b5:16:
c9:8f:dc:da:67:d8:cf:5e:27:b0:83:ea:d8:9d:ac:d4:13:02:
7d:5d:0b:df:68:b7:7b:5a:cd:cc:64:e2:d8:75:f7:9d:6c:9d:
36:d3:95:5b:17:1d:e5:59:9d:e5:28:dd:71:05:28:d5:af:e7:
24:f1:60:10:f0:0b:77:65:82:44:cb:37:82:24:24:fd:dc:a0:
20:f8:75:4c:dc:00:98:34:cc:3a:3f:9a:c4:c3:20:8d:f5:5d:
01:87:c5:2b:f3:69:7b:42:8f:91:d0:0e:8c:d8:3a:3a:1c:8c:
96:88:25:e9:a8:79:9b:e7:37:fc:f7:9f:f7:7a:06:1a:df:81:
c4:7c:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:25 2026 by rpki-client