Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: 4o8MAxu9aOs+/8EaKim2ZQcjgsorRayAWHGgXQHzAFA=
Subject key identifier: 87:F9:61:67:97:17:0D:22:20:6F:BD:59:36:4B:F3:84:96:01:E9:9C
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 019D2703953CBF0784E7324295DCA9E4B8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 06E5
Signing time: Wed 25 Mar 2026 22:00:39 +0000
Manifest this update: Wed 25 Mar 2026 22:00:39 +0000
Manifest next update: Thu 26 Mar 2026 22:00:39 +0000
Files and hashes: 1: 0BJuBVxjSdXsph85MS86HogqU6Y.roa (hash: oglBxgTG0Cvmu+e7zp3i2v5YTMsrt5rMaLc4kAaFK7o=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: Y3KATi+DfTQDmkHvwBXaYuGHufi+jbncjw+a6FkPf3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:95:3c:bf:07:84:e7:32:42:95:dc:a9:e4:b8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Mar 25 22:00:39 2026 GMT
Not After : Mar 26 22:00:39 2026 GMT
Subject: CN=87f9616797170d22206fbd59364bf3849601e99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:7f:fd:5a:6d:53:18:8c:43:57:22:02:87:
34:8d:f4:6a:fc:22:39:0f:fa:cf:9e:2f:f1:b6:0e:
af:cf:fa:d1:3a:d2:df:f0:71:23:ad:66:e1:92:73:
50:7e:1f:13:70:0f:3d:37:fb:3e:84:5e:d0:19:ce:
3d:5d:ea:51:71:fa:f7:32:e6:1b:79:06:e8:1b:45:
81:8e:ef:50:b1:84:0f:f9:46:dc:25:40:be:52:1a:
92:90:5e:bf:01:09:7a:33:2c:05:cf:c5:19:c1:2f:
3b:a5:45:84:fc:13:04:fc:98:3b:d3:3e:89:e8:8f:
26:bb:8e:2e:ba:3d:68:5d:44:7b:3b:6a:52:aa:6f:
dd:17:23:d1:4f:cd:5b:cf:77:61:bd:5d:84:ba:f8:
26:2c:1f:73:6e:39:da:b2:03:1f:b3:c6:b8:1a:9d:
45:39:d8:68:30:99:0d:e2:c1:a6:d1:56:03:bb:5c:
be:5d:e3:20:15:69:c1:1e:41:c2:98:39:65:77:fd:
4d:73:6c:3e:32:05:53:5c:9d:7a:a4:40:71:ea:22:
60:17:67:86:cc:30:2e:2a:35:9d:f8:38:87:96:66:
e1:14:e9:b9:3e:2a:71:53:49:e5:5f:96:3f:8a:65:
13:06:b6:ae:98:8a:a6:75:77:08:67:51:e9:27:47:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F9:61:67:97:17:0D:22:20:6F:BD:59:36:4B:F3:84:96:01:E9:9C
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7d:39:f9:b2:a2:bb:1e:93:33:01:eb:b9:9e:c5:d2:7a:01:
26:ef:f1:d4:03:e8:32:de:ae:01:a2:01:79:6d:33:2d:47:89:
35:0d:57:b1:a6:25:0f:41:4d:d7:3c:c1:e0:86:d6:83:d0:69:
d7:f4:09:90:c7:db:26:e3:4b:76:4f:9b:33:d2:5b:a9:27:dc:
c6:75:c9:5c:40:07:71:25:0b:a1:28:5e:0b:ae:e4:b9:f5:7f:
6a:59:0c:50:a5:9b:87:71:2b:d8:61:a0:37:e2:84:7e:36:1b:
f8:77:df:4b:e8:9e:d0:95:25:8b:b0:13:d6:ff:43:58:72:c3:
02:5e:73:a3:25:a2:47:c0:d8:9d:c0:5d:cf:5c:cb:ed:61:3a:
11:e5:21:1f:d0:34:2b:0a:73:4d:57:77:66:c9:fe:a7:d7:3f:
1a:82:a0:8f:66:87:b6:eb:f8:73:4d:e9:07:45:eb:c5:b1:cc:
66:18:e7:9f:99:d3:34:18:5f:31:56:39:ee:d8:d1:ff:a9:96:
94:e0:b0:63:11:00:94:6c:42:28:f0:4c:e4:07:15:3e:9e:cd:
c5:65:0f:23:16:86:0c:c0:ba:87:7f:2d:59:8c:6c:67:32:9e:
5e:50:dd:8f:b2:a9:a8:82:b7:9c:40:95:0f:1c:5f:2c:f8:67:
6f:ee:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:27 2026 by rpki-client