Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: d7Vvsjt8Gx6lzdJDvqGx9uwzwnDdwyzKDJ0Y/nLY3sk=
Subject key identifier: 78:82:DB:A0:C0:8C:16:23:7A:A9:2A:68:13:1B:CA:A0:EC:A0:C3:73
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 019E1CB45C88E61ABF10585935C5914BEE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0D64
Signing time: Tue 12 May 2026 15:00:42 +0000
Manifest this update: Tue 12 May 2026 15:00:42 +0000
Manifest next update: Wed 13 May 2026 15:00:42 +0000
Files and hashes: 1: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: 4/F8ESsfmkjJ6t+4Q27LXq5//1+GjFHck4w3p4szbJQ=)
2: u0QvJos6aQuVHi55RUrNrXgfUVw.asa (hash: ACtAtsRiatajmXHP1C5zTlEQsTPl4TCmsquEFaxzwfI=)
3: xLJtQXm9P6maxGC-hxArjHM1WvQ.roa (hash: fh/uCHUwOCAmoBiX5Ih0Qna/9cR2PxvxnSe6Xn99zr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:5c:88:e6:1a:bf:10:58:59:35:c5:91:4b:ee:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: May 12 15:00:42 2026 GMT
Not After : May 13 15:00:42 2026 GMT
Subject: CN=7882dba0c08c16237aa92a68131bcaa0eca0c373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:78:9a:c6:9d:24:98:c1:97:50:40:f3:4d:
01:d0:68:23:1c:39:40:a5:04:2d:fb:6f:d5:5b:f8:
29:6b:82:6a:e2:fd:72:d4:a5:9e:21:6d:2c:58:76:
b0:e5:90:2a:8d:3a:21:f5:e3:de:b6:fa:ee:97:ce:
ca:3a:41:97:ad:ff:ed:79:b5:15:47:94:93:f3:1a:
10:31:38:4d:7f:78:8b:4d:a1:20:90:ea:cd:0b:b6:
77:b4:94:e6:a8:f9:97:75:9e:74:5f:41:d0:ab:d1:
46:9f:31:b5:c8:01:94:59:b2:41:8a:28:09:81:ac:
ad:09:4f:c9:72:dd:7f:9a:21:9f:97:6c:9f:02:e0:
be:bb:60:d5:b5:e1:b2:dd:ce:50:23:b4:ca:66:8f:
19:f9:ac:f2:05:81:c1:13:33:9e:66:11:83:b5:2b:
00:3d:7e:56:0f:ff:a5:e1:1e:b2:95:e3:95:9c:10:
08:86:f9:a6:ad:b5:f8:ff:dd:48:c8:4b:4a:42:aa:
6e:8f:8e:ea:a5:8b:fb:e5:bf:f0:ae:a2:cd:57:d2:
dd:5c:45:e8:36:27:b9:69:bd:47:1a:8e:da:f1:2b:
9f:ab:37:ad:7c:b6:b1:39:9f:97:78:7f:4a:1d:89:
70:31:42:57:3f:ff:9d:87:67:67:c1:c5:85:01:d0:
ca:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:82:DB:A0:C0:8C:16:23:7A:A9:2A:68:13:1B:CA:A0:EC:A0:C3:73
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b1:d0:6d:cc:33:37:7e:49:c1:41:c1:ac:cd:3f:b7:25:8c:
b0:d5:db:98:35:eb:08:b6:e3:69:0b:93:d8:dd:0a:1e:14:f7:
ee:91:db:19:15:da:88:2a:63:d6:2f:2b:1e:05:48:2e:57:8a:
96:50:f6:55:11:ff:36:82:2c:a5:8a:15:bf:f3:d0:9d:18:35:
a6:f7:12:0e:b3:f0:4c:6a:4b:e1:e6:7f:e9:1e:27:bd:fb:a2:
3b:20:3e:76:59:50:e7:b6:67:99:7f:33:fe:e3:21:1a:d1:d3:
55:c5:03:5e:62:ee:39:63:6f:18:0a:fe:0b:14:d0:94:d2:68:
15:41:18:c0:47:e8:38:d8:a2:f1:bd:41:9e:2f:59:d5:09:83:
b6:02:7d:43:71:ec:f0:1e:b7:3d:d6:a1:70:53:19:3d:df:b7:
1c:3d:56:c0:d3:3c:d0:d7:69:84:a9:c2:08:75:61:56:f0:93:
31:ab:c3:56:26:9e:68:88:75:58:7d:55:be:16:1d:a2:ba:0a:
ca:28:cf:02:e8:6b:af:f0:68:f6:a4:ff:4d:a8:73:d6:79:2c:
5d:55:d4:e9:f2:82:6f:6e:47:b5:07:59:b6:c5:8f:ed:29:7f:
8c:a1:dd:5a:12:85:32:b2:46:0d:61:77:44:6a:b6:4e:e8:3b:
c0:57:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:31 2026 by rpki-client