Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: PnS/3hP4ZmZy7EQpKIzqs+KRwIuSueXfnjx5dYZmTnI=
Subject key identifier: 52:5E:36:D1:0D:CA:FF:D8:58:57:9C:9F:F7:EF:E4:AA:EA:1D:BB:2D
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019D29296F007E97B0B7875E08DEA5B51072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0C6B
Signing time: Thu 26 Mar 2026 08:01:14 +0000
Manifest this update: Thu 26 Mar 2026 08:01:14 +0000
Manifest next update: Fri 27 Mar 2026 08:01:14 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: 4qzCbpYppNpyImaAnqEW8y38G9SKT3kCG9qoUk5jsq0=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:6f:00:7e:97:b0:b7:87:5e:08:de:a5:b5:10:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Mar 26 08:01:14 2026 GMT
Not After : Mar 27 08:01:14 2026 GMT
Subject: CN=525e36d10dcaffd858579c9ff7efe4aaea1dbb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8a:0e:15:6a:4c:2e:b3:ed:d4:fb:25:81:3f:
f0:88:c6:a8:cb:fd:dd:a9:62:e7:2a:5e:5a:4b:83:
db:9e:3f:f3:6b:b3:cd:a6:d6:94:ae:84:c3:7c:0b:
62:e7:7a:12:c7:24:ff:cb:55:93:e0:7c:9b:0c:28:
b2:90:1b:26:2a:4a:b8:ba:39:b6:29:a5:2d:06:75:
6a:8e:79:cb:a6:73:78:2d:36:2d:8f:6b:0d:4e:05:
fd:08:2d:f4:7c:3f:d8:84:2e:f3:b6:45:35:0d:22:
f7:83:1d:93:a0:73:fe:e6:1b:9a:c4:0b:3a:4f:5e:
e3:45:4d:e9:fb:1d:10:7a:4c:ca:f7:79:bf:eb:c1:
37:81:af:db:4b:21:5b:35:4b:d2:52:0a:c0:5d:df:
26:6a:61:18:c9:bd:47:ef:30:cf:2b:5a:2c:ff:78:
ba:03:54:2f:06:0d:3a:6e:34:3a:59:b3:8d:16:6a:
ec:a1:6c:31:cc:c8:7e:19:39:b1:e1:8e:be:08:11:
af:23:77:e9:6c:48:03:3c:fa:28:ca:6a:7b:5b:db:
5e:e4:e3:f5:a6:91:d8:05:55:d1:13:a6:94:3e:77:
4b:a2:b0:47:74:ee:ad:63:47:08:db:b1:f8:3d:7b:
75:ff:c6:90:22:a4:90:c1:a8:de:94:c1:cd:9a:d1:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:36:D1:0D:CA:FF:D8:58:57:9C:9F:F7:EF:E4:AA:EA:1D:BB:2D
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:60:16:12:25:ca:cf:9a:27:57:66:6a:cf:40:e4:a2:00:1e:
82:31:80:33:ad:52:89:7b:39:d5:e2:e8:ac:43:66:44:b4:08:
fd:27:2d:29:2b:7f:d5:bd:f0:90:09:24:b2:ce:f7:e2:f0:4b:
a7:99:fe:14:9d:6f:a8:21:3e:45:92:c0:d1:f2:d0:ee:b0:cc:
cc:49:72:7b:be:43:dc:6f:0c:7a:50:e8:46:9b:50:90:f1:71:
f2:58:f7:16:7c:ab:d8:7f:6b:bd:ad:57:b7:37:67:7c:d4:91:
9d:88:7a:06:11:ce:f4:b4:2b:ab:77:8b:d0:58:72:f2:cd:ba:
b2:b1:54:8e:f1:f9:91:74:b7:01:ac:96:87:61:b0:51:f5:51:
3d:4a:c8:f8:8a:3c:4f:e0:91:a2:14:25:85:bc:3d:3d:b0:b4:
59:2b:26:35:65:a1:ee:cf:9d:15:05:fc:d5:15:10:1c:78:b6:
0c:a7:f9:6d:58:8d:2a:a0:42:47:fb:4a:ab:44:e9:ee:53:62:
70:59:d6:3b:47:e6:08:17:46:f7:ff:4d:f9:f4:87:be:41:3f:
52:ea:4d:b3:28:f0:ee:77:da:d4:f5:bd:cf:fa:4b:14:f7:7c:
16:41:99:b7:b2:8d:66:0c:e7:48:10:ac:42:e6:c9:29:aa:f8:
18:2b:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:02 2026 by rpki-client