Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: sOKe/XdCTTHzFF2E2Vv07fyXdJdEGjWa4GFXwVqjJ3s=
Subject key identifier: 9F:E4:4A:4F:8C:1F:E2:FE:34:C2:BE:AB:7A:B9:5B:7B:31:9C:6B:D2
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 019D27725E132E6154AD73A42F357EAF95F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0CE5
Signing time: Thu 26 Mar 2026 00:01:39 +0000
Manifest this update: Thu 26 Mar 2026 00:01:39 +0000
Manifest next update: Fri 27 Mar 2026 00:01:39 +0000
Files and hashes: 1: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: ILVrpivAUB/Zvs3lUZxVF9W9BkV743byDcWgqKzw0MA=)
2: u0QvJos6aQuVHi55RUrNrXgfUVw.asa (hash: ACtAtsRiatajmXHP1C5zTlEQsTPl4TCmsquEFaxzwfI=)
3: xLJtQXm9P6maxGC-hxArjHM1WvQ.roa (hash: fh/uCHUwOCAmoBiX5Ih0Qna/9cR2PxvxnSe6Xn99zr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:5e:13:2e:61:54:ad:73:a4:2f:35:7e:af:95:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Mar 26 00:01:39 2026 GMT
Not After : Mar 27 00:01:39 2026 GMT
Subject: CN=9fe44a4f8c1fe2fe34c2beab7ab95b7b319c6bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:35:b0:8e:14:a5:a1:ac:5b:f8:52:4f:e8:
fb:9a:54:a7:45:26:9d:a1:79:f2:bc:b5:e4:1d:9a:
ad:b0:f6:84:a7:82:b0:ef:b1:3e:27:0d:83:74:fe:
4e:b1:86:1c:1f:22:0b:c1:22:5c:56:a0:58:c1:b5:
90:f4:4e:7b:fb:f2:b7:d3:d4:ac:ac:65:05:97:96:
00:59:f7:1f:4e:e9:89:9f:e4:0f:a5:25:37:45:48:
f5:75:55:47:67:44:61:02:4b:cd:c9:f8:0e:d7:0d:
84:2e:46:ff:cf:2d:77:75:70:8c:19:95:21:d4:ba:
ff:82:46:ce:3c:a2:bc:88:7a:e2:84:3d:fb:dc:e5:
ce:29:73:46:5a:32:bf:0f:6c:3b:e5:f8:14:4b:4f:
9a:80:9e:e1:cc:43:26:9f:68:ac:91:d0:f3:bd:fb:
38:cf:c8:87:b0:a3:f5:f7:25:f2:da:75:10:ed:94:
42:a0:f9:ec:aa:ec:70:f7:c0:82:e4:47:7e:2e:d3:
00:56:ca:f2:90:f6:ae:96:e4:d1:6e:55:60:a1:ca:
19:54:63:57:b3:b5:97:da:66:6a:31:7e:16:fb:b4:
f1:2c:1b:38:03:16:5a:7b:e7:7e:d0:84:a9:af:1a:
1f:da:96:95:73:fd:aa:51:d9:b0:25:42:cd:0a:c7:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E4:4A:4F:8C:1F:E2:FE:34:C2:BE:AB:7A:B9:5B:7B:31:9C:6B:D2
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:05:fe:11:64:c0:c4:86:d2:53:d5:43:98:54:ad:89:17:9d:
b5:a5:cc:aa:f4:c3:7e:95:89:ee:d1:af:4c:7f:f5:7e:d4:5d:
e5:90:ea:4b:0b:58:ca:6f:d2:6e:e2:63:5b:bc:c6:af:6e:55:
db:06:94:67:64:26:6e:c0:99:5d:f1:1e:3e:dc:6f:d1:9e:0a:
3b:0c:40:ed:95:fe:d7:40:c1:ad:5f:30:04:ee:e6:d3:b1:4a:
6a:92:e2:89:7f:61:1e:62:b7:1f:2b:25:53:40:a5:eb:8f:9a:
fd:15:01:36:3c:74:8b:b0:c9:41:5a:69:27:50:cb:b0:31:4d:
4c:7b:d0:3b:18:3d:3a:87:65:7d:30:52:fb:8a:6a:05:31:8c:
13:24:16:1c:5b:18:78:b2:d6:ca:55:7f:58:32:f9:bc:f1:bc:
40:7f:e5:64:9c:76:c9:51:a0:ca:25:03:6c:14:9c:41:68:3f:
85:21:4c:85:44:34:af:8e:78:1f:28:1a:26:46:03:e7:6a:21:
b1:a1:db:13:74:59:af:34:99:bd:dd:1f:b3:b4:a4:6a:2c:22:
ef:27:b1:fa:02:b3:6d:5a:d5:46:9d:57:71:f4:c2:01:83:b2:
e2:66:f9:1b:55:31:ae:28:68:e4:51:eb:17:69:8f:82:a8:32:
13:d3:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:00 2026 by rpki-client