Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: A8pRRQirjkQiQuYOgvuCijbSW0WYlgVBIUdWKLWg+1Y=
Subject key identifier: F4:B5:8E:12:86:91:B4:E7:1B:E1:5E:53:58:4D:9A:A7:D9:3F:29:8D
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019D2B4E482E2883BFB6F2376C6D9217BEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 18A9
Signing time: Thu 26 Mar 2026 18:00:43 +0000
Manifest this update: Thu 26 Mar 2026 18:00:43 +0000
Manifest next update: Fri 27 Mar 2026 18:00:43 +0000
Files and hashes: 1: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: Yfnp+5Bg7moSk1Wt/Lom2cu+1e6/TP+YBmqoJ5o8/fQ=)
2: cN9-QkcDeRmmddqpx80fjE4LD7s.roa (hash: O0DZXiBII2s8che4/ZMrj0hj9juscGV08AllWCCgxdM=)
3: oKVs8opycS84dPliSyLG0JkBb78.roa (hash: DN1KcXYNLdE20LwiPz7gOBh6DkJVLAflVxaRUQquGhs=)
4: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=)
5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:48:2e:28:83:bf:b6:f2:37:6c:6d:92:17:be:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Mar 26 18:00:43 2026 GMT
Not After : Mar 27 18:00:43 2026 GMT
Subject: CN=f4b58e128691b4e71be15e53584d9aa7d93f298d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:11:7b:f8:d5:0e:da:97:5a:b1:14:c9:f3:
74:aa:84:ee:08:fa:8c:17:3c:a2:0b:94:4c:3d:7f:
8f:9b:15:4e:22:74:b8:26:09:56:94:e6:0e:5c:36:
15:f8:8c:81:b7:14:68:5f:e4:2f:0b:49:30:97:0a:
fd:a0:de:f8:0c:ce:ef:bc:6e:57:1e:3a:b1:09:b4:
77:7f:b5:a3:43:5e:67:e1:2c:9d:f5:46:5c:83:ea:
e1:4c:64:a1:cd:72:97:59:ee:8d:f9:e8:50:00:73:
16:4b:9e:fd:c0:82:7e:f4:79:02:c4:da:6a:cd:e2:
14:1a:46:d2:77:b4:39:60:9c:5c:f7:28:13:2a:7d:
c9:e7:be:80:c1:13:f3:24:dd:30:17:80:f8:49:47:
45:1e:33:aa:45:01:6c:79:e0:ba:bb:18:06:a6:cd:
bb:1a:74:c7:70:0b:39:de:57:dc:4b:1d:08:b1:49:
64:35:1c:5f:94:20:f1:28:cf:63:6f:4e:a2:d1:f8:
7d:c2:d5:e5:c9:1a:3f:9a:9e:33:34:d6:66:50:9d:
92:da:fd:f1:f4:e6:39:6b:51:26:e3:83:b9:31:cc:
c8:83:48:2b:d0:6c:1d:cb:63:28:69:99:7c:09:b9:
9e:ba:95:da:7a:20:27:35:98:19:f9:84:ef:96:b1:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B5:8E:12:86:91:B4:E7:1B:E1:5E:53:58:4D:9A:A7:D9:3F:29:8D
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b5:34:dd:e1:1e:e8:36:1c:68:21:98:54:cd:73:23:1e:80:
b2:2c:cf:c1:71:a9:64:a2:cb:d6:b3:8e:06:8c:cc:7d:43:11:
78:0b:2d:1d:79:26:42:cb:f8:75:ae:09:65:fd:54:c0:0f:34:
a5:f0:43:06:6e:65:44:2c:47:36:ae:47:51:90:3b:1b:ea:56:
5c:8b:6f:e4:b7:e0:41:71:d4:06:d5:0a:f1:b5:64:aa:a2:7e:
ce:f7:41:bc:a1:27:cc:e9:76:75:ce:b8:de:78:15:2e:7d:d1:
f3:48:b1:d2:83:97:3f:84:a4:36:df:19:c2:08:30:08:c1:1d:
fb:1c:3e:53:f5:31:64:a5:b1:23:c7:8c:ed:c7:84:68:b7:99:
03:a6:24:78:bc:86:f9:a6:08:f5:1a:d2:7a:1f:fa:a7:cf:01:
50:65:f6:9e:36:ba:d7:a7:4c:3e:1e:de:f6:74:a1:c1:da:a1:
79:56:64:e0:4e:03:3a:ff:63:27:40:23:87:22:6f:ec:63:4c:
76:46:25:8b:9d:03:5e:d7:1d:cd:24:8e:a3:b6:e0:80:04:34:
f6:a3:a3:6f:44:00:09:18:bc:70:84:42:ed:6f:b8:00:52:8f:
45:0f:e9:6f:8f:5d:e2:1b:6c:2b:de:9d:29:fd:6b:af:0b:fd:
61:a6:df:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:38:12 2026 by rpki-client