Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier: GqYrQ351xCMCIzo3Byk5NbWhZ9sgHCiKBgOl2TDP3n0=
Subject key identifier: FE:FA:2B:D5:92:29:A7:D8:34:8F:11:C1:46:52:CC:4F:F1:AB:B4:A5
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial: 019D2816820504A845C975ACA8F4128FDDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number: 0C1A
Signing time: Thu 26 Mar 2026 03:00:56 +0000
Manifest this update: Thu 26 Mar 2026 03:00:56 +0000
Manifest next update: Fri 27 Mar 2026 03:00:56 +0000
Files and hashes: 1: 4vUJXm8eNnXrmzWPEJu4hyJ74bE.asa (hash: E4sIlw3AAVJ0Z5hHy6GY0z+mLPDpAHtRm2YAKcmDuRI=)
2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: Ovp0TLUgUVXzFO2xyGk1YFEDb21qFn0ZhDGIj7KwmQE=)
3: q7Y942LXE7VDqi3CVQGg7s-T4B4.roa (hash: um+Nzf6xvoV3Y4Z8bfjOD2xB6Pty18EAptHerBiWZz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:82:05:04:a8:45:c9:75:ac:a8:f4:12:8f:dd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Validity
Not Before: Mar 26 03:00:56 2026 GMT
Not After : Mar 27 03:00:56 2026 GMT
Subject: CN=fefa2bd59229a7d8348f11c14652cc4ff1abb4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:42:70:d2:26:bc:28:58:e6:a6:98:72:4f:
2c:df:68:4c:2d:0f:44:d0:5a:2d:2e:a9:b6:d8:2e:
26:42:90:41:71:30:53:4c:77:79:e0:32:c2:b5:e1:
1d:59:d6:89:58:06:08:00:a4:71:ea:93:6e:20:47:
65:8e:5d:2b:0e:7c:cc:7d:a4:ab:b7:72:a2:2d:f2:
dc:ef:8b:21:cb:27:94:c5:1a:ae:af:73:c7:a1:6e:
f8:41:f8:04:1a:01:e7:b2:69:ba:fe:36:48:c8:83:
f3:89:21:71:59:bb:5e:2f:95:a5:b9:0c:6c:b8:a0:
7c:2a:79:5a:87:88:bf:2c:39:8b:71:65:9f:a1:76:
91:cc:27:0f:5c:19:de:7a:a5:22:44:ea:68:f3:e6:
61:a6:39:fb:4a:3d:40:c9:cb:b9:3c:66:e9:d6:92:
b4:f4:24:23:45:03:7c:01:bc:81:03:bc:1b:35:f0:
ee:38:17:31:0b:80:98:4a:1c:4a:c4:da:44:72:82:
4b:57:5c:2b:39:e6:db:d8:1a:71:dd:31:1b:ae:3a:
39:48:a3:91:fb:7c:ca:3f:2e:eb:83:4f:19:7c:d3:
c1:a5:a9:01:aa:46:69:12:f8:9b:27:1d:3f:8b:ec:
61:13:00:52:75:1a:d7:67:0e:50:38:f7:f4:63:77:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:2B:D5:92:29:A7:D8:34:8F:11:C1:46:52:CC:4F:F1:AB:B4:A5
X509v3 Authority Key Identifier:
keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f8:bd:28:2b:62:14:24:64:84:48:c7:6c:1a:0d:4b:13:f3:
86:6f:57:ac:2b:1e:08:04:05:3c:63:5e:8d:1c:d6:4b:64:92:
06:d6:9d:3d:da:92:6c:26:eb:4a:40:1e:3e:5d:60:88:8b:c8:
07:5a:a2:e5:99:c5:31:6d:92:12:55:60:98:d8:e9:a7:53:1a:
62:f9:98:a3:e1:bb:db:83:db:e5:50:2b:97:f3:eb:6e:23:3a:
4f:aa:a8:96:d2:91:43:ba:41:2e:51:66:a0:f8:fe:27:42:c6:
f0:ba:65:d5:63:01:2a:f9:8d:aa:32:98:e5:d9:9e:6f:77:a4:
96:87:ed:ae:e5:bd:9b:e3:ee:dc:a3:f2:a0:bb:1c:7d:06:d6:
31:80:46:5d:06:7b:fa:6f:10:1f:e5:ee:d9:c2:ff:d3:39:f9:
2b:ed:df:c6:ea:6e:12:27:32:2e:e5:09:44:2f:d3:ed:a8:fb:
53:2e:2d:b2:3a:03:f3:e9:08:1b:77:21:65:d5:07:0b:1f:3f:
b7:68:e6:09:33:05:cc:a5:4e:bd:69:33:0f:a4:8d:cd:1b:46:
45:96:b5:82:c7:5d:2f:6c:8a:1b:55:62:16:7e:a5:23:e1:0f:
07:6e:53:3f:b5:bf:99:a8:af:cf:2b:ee:09:c7:fb:6d:b2:b5:
53:f8:97:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:41 2026 by rpki-client