Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
File: S8K4kvLb729UtFNg_rD4QUpahQQ.mft (raw, json)
Hash identifier: vOgA3xSKufs4azlpju95FkrBWcrEWK4gF2yKSum8/ho=
Subject key identifier: D7:87:C3:B4:AB:39:28:21:28:3F:C7:01:7C:E2:65:20:74:61:62:FC
Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Certificate issuer: /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Certificate serial: 019D2695BA2704F2F5B9BEBA135B476B1C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 20:00:39 +0000
Manifest this update: Wed 25 Mar 2026 20:00:39 +0000
Manifest next update: Thu 26 Mar 2026 20:00:39 +0000
Files and hashes: 1: F4rY5JVMtMl_zYzUZwZp4oeHP1I.roa (hash: E0rqrVkOGoV8SRKX7SA5ZbTVTAKBdcJrr4ggv5rMXIg=)
2: S8K4kvLb729UtFNg_rD4QUpahQQ.crl (hash: 7fU8cw1JQYlFZoqrujIEFvCqwbVC/WtKapc0XYLUAFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ba:27:04:f2:f5:b9:be:ba:13:5b:47:6b:1c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Validity
Not Before: Mar 25 20:00:39 2026 GMT
Not After : Mar 26 20:00:39 2026 GMT
Subject: CN=d787c3b4ab392821283fc7017ce26520746162fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:a3:ab:e7:87:78:bd:70:33:d7:b3:d8:60:
a6:b9:0f:70:22:b3:47:bd:cb:6d:30:a7:92:9c:0a:
f1:21:a6:6b:71:99:43:cb:37:97:2f:1f:24:de:e6:
7e:bb:66:c7:f0:61:dc:f1:83:0b:18:66:2b:2f:18:
ea:5f:8f:4e:74:ce:03:e3:70:de:c0:77:e6:10:44:
a8:31:4e:dc:5f:1d:46:7a:02:73:e7:67:1b:80:81:
c2:93:45:3a:1d:ed:ad:e4:cd:7d:9c:f8:7d:b7:29:
a8:cf:3d:30:0b:04:3e:5b:8a:18:ac:f2:23:27:83:
0f:77:e1:77:00:6e:50:ee:ff:5a:9a:af:ba:a8:d0:
eb:3f:33:e2:fc:61:d3:18:c6:4b:ef:ac:9d:75:21:
b5:23:88:2c:e0:c4:00:9b:11:28:89:6b:68:3b:3e:
29:5d:b0:ae:d9:e6:de:5e:32:67:90:ff:db:e7:2b:
e0:ea:64:11:8c:0c:a4:ff:0c:40:25:ee:dc:0d:6b:
0f:f0:6c:d8:95:f0:4d:89:f7:cc:7a:44:b7:28:3f:
03:d8:d4:90:4c:33:47:f8:76:41:10:20:f9:42:f9:
5c:99:03:95:ee:24:af:30:8c:9a:7c:b8:2f:c6:05:
ce:40:2a:da:11:63:dc:4d:fd:22:51:09:69:e9:5c:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:87:C3:B4:AB:39:28:21:28:3F:C7:01:7C:E2:65:20:74:61:62:FC
X509v3 Authority Key Identifier:
keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:79:d8:73:e5:7b:61:f9:87:c3:79:a0:2e:ff:5f:a5:19:28:
7e:14:60:a4:c0:e8:2f:2a:96:53:d9:0c:f2:b3:69:33:00:b4:
c2:98:bc:7e:cf:a7:4c:b6:c1:00:43:3d:c5:a6:2c:ba:16:ea:
ea:4d:53:2a:7b:e3:8c:bd:9c:aa:19:c1:ef:f0:fd:01:ae:2f:
1b:2e:3b:6f:5e:71:ef:4e:70:83:56:c6:b3:af:4d:ec:d6:9e:
47:05:9b:d4:3e:c2:bb:6d:85:81:45:02:d9:d4:97:54:91:6c:
34:78:23:32:b9:b2:11:28:a1:3e:65:79:88:96:2a:db:af:dc:
ee:78:a0:50:ae:09:73:cb:a1:08:ba:58:d0:3c:fe:f3:d1:f6:
fa:03:cf:1c:fb:9c:8d:21:f9:2e:38:2f:17:57:5e:39:49:0a:
b5:7f:c1:c3:c6:1c:47:d4:82:9b:e9:3f:da:d1:6f:f8:8d:f8:
89:b3:67:0f:25:e3:88:4f:c5:70:4e:74:98:78:96:a3:9a:79:
1f:6b:6a:e7:cc:5a:bc:71:de:07:d1:1b:42:5b:db:ab:30:14:
4c:d4:13:f4:42:18:df:d6:14:7b:f9:ca:31:66:f0:d3:09:0e:
be:3a:14:ae:9f:a8:98:98:46:fb:57:26:83:0f:da:6f:6d:83:
1f:16:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:22 2026 by rpki-client