Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: W2DXNJCIZsQpgyGWc7/AOYhN6c9mRlN6x/aEfpO7beQ=
Subject key identifier: 14:76:16:1A:C0:40:A7:5A:97:48:20:00:D7:77:B5:D0:DD:2D:64:CB
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 019D25F118AF8E7CE09EE5DAD9AF892CF7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:00:50 +0000
Manifest this update: Wed 25 Mar 2026 17:00:50 +0000
Manifest next update: Thu 26 Mar 2026 17:00:50 +0000
Files and hashes: 1: VjDmi08eDkQNqosAIn5lUGAfZIA.roa (hash: jWrWoSFJKct0v+ZoZpemlOK9O+tbs5TMpb0HP64364w=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: eTGFcrZuFo8f4sVAVsZo5RMYKBIJ0NHDBs3A/Pl1E7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:18:af:8e:7c:e0:9e:e5:da:d9:af:89:2c:f7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Mar 25 17:00:50 2026 GMT
Not After : Mar 26 17:00:50 2026 GMT
Subject: CN=1476161ac040a75a97482000d777b5d0dd2d64cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:36:ab:0d:70:ef:2c:60:bf:72:04:ab:fe:
f2:af:67:8c:0f:df:33:c5:f6:69:d0:91:74:c3:ae:
d3:7c:78:25:9c:22:c0:0b:b9:5c:f4:1f:f1:c5:33:
50:44:83:69:f9:48:60:39:07:ee:fe:66:75:d5:7d:
97:5c:72:56:3a:4a:b3:a3:5e:97:10:6e:8f:93:d8:
64:a5:b6:4a:fb:d7:cf:32:d8:2e:44:ef:cb:5e:ff:
d4:16:1f:45:3f:c3:ae:ae:e1:50:d6:14:2e:0d:a5:
f4:99:8f:49:30:bb:86:e4:08:c5:97:b6:3a:e0:b9:
12:a9:eb:ca:1d:84:cd:84:76:bf:a3:a0:aa:5a:65:
7b:8d:84:49:da:ad:ce:22:02:cd:d4:3d:59:18:15:
c0:3c:70:9a:a3:41:59:06:ba:9e:36:1c:51:e3:21:
5e:d8:30:49:b8:72:49:51:a9:70:3e:7e:07:1b:c0:
61:bd:d0:92:4b:72:22:fa:21:0c:be:93:78:9f:3a:
29:62:e0:42:12:63:42:9e:4a:b8:1b:5f:8b:ab:6c:
44:5e:97:88:22:6f:1c:1a:81:1b:df:f0:94:84:6d:
6a:cd:c9:ce:33:f6:b0:c2:c4:34:e8:de:c9:81:2c:
c6:29:9f:d7:7f:fc:81:bd:5d:b2:bb:b7:28:0e:c1:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:76:16:1A:C0:40:A7:5A:97:48:20:00:D7:77:B5:D0:DD:2D:64:CB
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d7:9a:c8:2f:c1:15:d4:86:0b:9c:af:d2:9d:9d:ab:cc:8f:
fb:37:63:9d:9d:41:5a:81:d8:ed:dd:32:a1:6b:65:8e:da:1d:
70:4f:15:51:1d:c3:eb:0a:79:7f:3f:cf:ad:ba:46:b1:ba:90:
6f:0d:0f:46:07:8b:b5:48:c4:ae:a6:99:b2:84:fa:72:8e:f6:
a7:c4:a1:dd:e4:d5:c5:5c:ca:32:a6:dd:b7:9b:ce:79:1d:a6:
11:5b:b6:d6:69:7f:9d:d8:d0:7a:69:f4:43:93:ef:1f:62:a8:
dd:64:6e:6e:59:bc:fd:ed:6a:f0:ba:92:f2:d3:7b:10:50:d5:
97:ed:cd:69:86:61:af:36:0b:c0:83:44:02:e4:b9:17:ab:36:
2d:bf:f4:21:94:2b:b9:34:53:d9:22:91:2f:99:8b:18:b4:33:
d1:5b:56:24:27:11:93:b8:e7:fb:21:cd:8b:0e:e5:4d:c9:60:
6f:09:1a:d7:c5:58:b0:c1:59:73:db:d2:c1:47:7b:b7:a3:d0:
8e:e4:d3:98:2c:a6:5d:42:d2:72:a8:d4:fd:ce:52:97:d2:9e:
ee:c0:76:e5:44:31:9f:db:1a:30:47:0c:5d:f2:81:b3:b0:5a:
4a:2e:3b:92:71:c0:9a:9b:44:4b:5c:f6:96:83:70:98:14:94:
c8:f9:71:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:38 2026 by rpki-client