Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File: S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier: wEj67lzEE9mwFAbMq9h6MRC5dWdO5104F10rnk7dHWI=
Subject key identifier: 08:E9:2E:57:B9:19:AE:37:86:75:DA:CD:B7:50:3A:F5:E8:1E:8E:F1
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial: 019CAC46BB5FD2DBB619D5813A5B4B62054C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number: 0EDB
Signing time: Mon 02 Mar 2026 02:00:42 +0000
Manifest this update: Mon 02 Mar 2026 02:00:42 +0000
Manifest next update: Tue 03 Mar 2026 02:00:42 +0000
Files and hashes: 1: FSFyylYZoJ__LJ0VFZP-2aItmuE.roa (hash: 4TUbcjRKjpEozpWO2rDakc6T9yJDVcy+nvZz/pOEz9A=)
2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: StUz3MI74I5H/GKU0Fiq+oMfEi6DpLoHb4mA+gDtYfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bb:5f:d2:db:b6:19:d5:81:3a:5b:4b:62:05:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Validity
Not Before: Mar 2 02:00:42 2026 GMT
Not After : Mar 3 02:00:42 2026 GMT
Subject: CN=08e92e57b919ae378675dacdb7503af5e81e8ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c4:3c:96:c3:59:2d:7a:3e:4a:2e:9f:0b:49:
74:8e:04:77:a2:ec:6c:2b:ad:f7:cb:6a:08:67:d3:
f4:8f:8a:a6:44:c6:87:fb:8e:12:6c:19:6a:7a:0b:
8d:0a:58:10:f6:76:ec:bc:c1:c6:65:97:6a:fd:28:
d3:c0:4f:fd:bf:e8:b5:d5:1f:1a:16:46:6d:40:f8:
a2:16:ab:a4:87:b8:fa:e4:8c:bb:c0:42:bc:81:a1:
98:8c:c2:0d:89:a9:9a:90:cc:cf:af:e9:97:f4:29:
ec:b9:e4:21:5b:1f:83:55:92:80:aa:3b:bf:f6:9a:
58:9a:a1:69:35:55:70:76:31:b5:c0:96:6d:33:77:
cf:a3:bb:bf:41:76:33:fd:2b:bd:77:ea:df:24:d4:
c6:60:e7:e0:14:7c:a5:3e:7e:75:d1:6e:7b:d8:27:
42:48:e1:62:2c:fd:63:9c:40:cf:67:5d:ed:3c:e4:
76:34:65:52:3b:db:7d:74:0e:b5:02:b4:bf:9d:28:
77:a2:dc:5f:ea:b3:f2:a0:2c:70:ba:dc:d1:1e:61:
84:d6:d7:b7:30:25:44:c3:9c:fa:d2:75:ca:a9:d3:
a4:a5:22:e9:c4:3d:d1:41:1d:87:27:a3:15:ab:43:
20:1c:cc:d8:56:85:c9:27:6e:48:b2:40:e7:0f:bc:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E9:2E:57:B9:19:AE:37:86:75:DA:CD:B7:50:3A:F5:E8:1E:8E:F1
X509v3 Authority Key Identifier:
keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:90:21:9a:0b:02:17:69:49:6d:03:a3:ea:c3:2d:f8:67:c2:
ef:0f:cf:f1:6e:b1:cf:bf:90:ca:0b:e0:32:04:be:94:7b:03:
75:c6:e6:d4:75:60:0c:78:c8:fe:68:1d:51:00:35:8d:7a:eb:
72:b5:4a:6b:4f:af:b6:b2:ff:e3:f5:a1:ae:cf:b6:07:01:d3:
39:42:a3:73:01:0f:45:ad:c5:b8:e5:7c:39:01:1a:02:7a:0e:
a9:54:4d:e0:1b:e2:32:8d:19:10:04:52:91:0a:a2:24:d4:cb:
0b:0f:a2:2c:c3:1a:e1:a5:4a:2f:95:f7:b2:4f:b2:58:2b:b1:
bc:ad:44:bb:6a:7f:4d:b0:51:86:b1:28:7e:aa:43:2f:1c:3e:
3a:89:75:f7:01:c0:99:21:02:fb:ca:e0:13:83:2c:70:ab:fc:
d0:30:a8:9f:63:41:0f:f9:8c:99:c6:70:97:4d:1f:03:83:2d:
3a:df:45:4d:65:3d:f1:79:b3:af:c3:73:d3:6f:87:8d:fe:df:
a4:ab:f3:22:4a:eb:e4:a1:ce:ac:81:26:55:7d:fe:15:f6:16:
27:75:ee:ec:4b:0d:c0:5b:84:32:8b:98:7a:17:8c:eb:04:de:
f4:a7:89:56:40:af:de:a8:75:e0:c6:98:8c:a8:e9:6b:a9:71:
84:17:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:52 2026 by rpki-client