Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
File: S2HMijZcxAOCox2tVPbLcj9YdYo.mft (raw, json)
Hash identifier: QcxXd/aTmlLmUFP9Rk6TH/0twk41gwPr1ewRJJt02rg=
Subject key identifier: 50:4B:91:37:7C:DA:BE:CC:F7:9E:B9:AA:70:C4:C5:DB:A3:73:32:88
Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
Certificate issuer: /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Certificate serial: 019D2816A7DE5AA77779F654E81EE9FD9393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:06 +0000
Manifest this update: Thu 26 Mar 2026 03:01:06 +0000
Manifest next update: Fri 27 Mar 2026 03:01:06 +0000
Files and hashes: 1: HpEQ35wYcpdgu7Xx3TWMgnDMgr4.roa (hash: R5O1iCublXAekieUKPQ0Y89Zyi72MgQUUVwuCgdlYZM=)
2: S2HMijZcxAOCox2tVPbLcj9YdYo.crl (hash: BtFy+dowHGo++R76FZGr32JG5eijkaINMQER2SowFmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a7:de:5a:a7:77:79:f6:54:e8:1e:e9:fd:93:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Validity
Not Before: Mar 26 03:01:06 2026 GMT
Not After : Mar 27 03:01:06 2026 GMT
Subject: CN=504b91377cdabeccf79eb9aa70c4c5dba3733288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:8b:d4:3c:04:44:3e:ce:7d:b1:ee:37:56:
c6:d9:5f:24:d0:d1:a3:fe:2b:0c:93:96:08:75:70:
0f:1f:9e:65:ae:5e:53:33:b9:eb:73:a0:a2:21:8c:
bb:ae:ab:a9:5c:80:50:64:61:15:26:1b:a9:52:46:
7f:76:a9:65:49:7b:98:de:bc:e4:3d:e4:60:19:e7:
3e:68:12:34:0a:6e:57:60:f0:c2:b9:e3:b2:c9:fe:
b4:2f:c6:6b:f3:d2:1a:bf:8b:3b:41:29:cc:f7:c0:
77:58:a3:cb:56:ef:7b:9d:18:4a:5a:16:4a:d2:01:
28:75:f6:25:79:1a:a8:07:de:dc:8b:b9:e9:de:f2:
77:a7:8f:6f:2e:87:d1:7d:92:44:5e:b0:fe:c4:91:
f4:4f:4b:f8:22:9e:87:4b:00:0f:ef:23:17:33:b3:
fa:89:8d:72:64:5e:d3:91:b3:36:a1:35:f6:ec:e0:
51:41:ae:ed:0e:80:ff:25:19:51:fe:c5:c6:44:6a:
96:3d:7d:b8:0e:06:ee:b8:4c:55:22:f5:ae:d3:c9:
8a:62:57:1f:e7:83:89:b3:8a:1d:c7:d2:b5:63:4f:
ae:70:26:5d:69:62:a4:a0:75:09:e5:5c:f8:91:31:
47:21:f1:64:6d:7f:aa:fa:c7:00:34:f3:24:d5:e5:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4B:91:37:7C:DA:BE:CC:F7:9E:B9:AA:70:C4:C5:DB:A3:73:32:88
X509v3 Authority Key Identifier:
keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:56:11:d3:d0:eb:3f:72:18:1a:bc:dd:62:62:a0:ac:22:40:
f0:36:d6:58:12:66:23:d0:e7:1b:97:10:d0:c0:b3:d5:3a:18:
45:39:75:9c:8d:1d:c1:6d:66:2a:ef:85:dd:cc:b4:a6:f7:a6:
d6:99:f8:cd:62:ac:3a:55:8e:12:13:3b:91:98:f2:a1:7d:a1:
25:6d:b0:21:35:08:0e:ad:93:c8:4a:b7:d6:95:b5:2f:97:9d:
5a:89:58:2a:2e:ce:5c:99:50:99:16:8c:c1:98:cf:c9:17:7d:
c8:47:ea:92:71:05:52:ef:aa:51:2c:4a:a8:12:fc:68:d3:41:
bd:62:ab:80:5a:9a:bd:46:c0:58:5e:eb:ea:6d:a1:6d:58:31:
74:c7:29:30:91:a7:0e:16:20:cf:cc:5e:58:6e:ce:5c:dd:b7:
e6:27:38:eb:3e:f0:df:86:42:cd:11:48:84:65:7d:ed:b0:b7:
80:a8:6a:78:f3:b2:80:9d:4d:74:81:ae:49:df:0a:fd:53:21:
32:42:0f:2a:22:b1:0b:c3:37:fe:f5:6a:8a:08:3d:96:f3:26:
8f:ad:a6:22:04:5d:0e:91:74:9e:ed:07:c5:cc:41:b1:a9:17:
77:af:35:69:3f:03:76:67:8c:43:f2:cf:1a:ee:f6:00:9a:73:
8a:bb:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:08 2026 by rpki-client