Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: rq6yanKsOB6dyxLCs5HmpJRY6dPbMMz5ceievb4X+2Y=
Subject key identifier: 75:77:43:44:51:2A:C0:89:89:18:F4:A8:5E:E0:00:78:40:49:5B:80
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 019DA4C1DC38FAADB7B7736398FD6D342601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 1000
Signing time: Sun 19 Apr 2026 08:01:01 +0000
Manifest this update: Sun 19 Apr 2026 08:01:01 +0000
Manifest next update: Mon 20 Apr 2026 08:01:01 +0000
Files and hashes: 1: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: IXbN10df729vDXXYLJj1M2IShngays1/G3U9fJL4mlg=)
2: tzRdx4BT786qNcQZeRMNg_SKiRI.roa (hash: T/qoi141JqlXpa6Bw1J2VzP/DVBAdA7o+aP6DP3caPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:dc:38:fa:ad:b7:b7:73:63:98:fd:6d:34:26:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Apr 19 08:01:01 2026 GMT
Not After : Apr 20 08:01:01 2026 GMT
Subject: CN=75774344512ac0898918f4a85ee0007840495b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:7d:78:d8:4f:53:77:fe:18:83:31:ee:1c:
74:1f:6d:25:12:d7:ff:ac:1e:d9:0d:a9:d6:19:c9:
60:47:08:d9:0c:83:cd:4f:9c:16:c6:6c:30:4c:a9:
5c:d6:78:58:57:bd:1d:c6:54:66:7f:e7:88:a1:cd:
37:e2:25:be:cd:9d:49:07:f8:1a:68:b0:4d:e1:1a:
ec:15:9e:20:1e:33:94:60:4b:6f:1d:53:50:6e:0f:
52:75:3e:1e:c2:be:20:9f:44:b2:d6:02:3e:a7:89:
8f:b1:98:a8:a0:22:66:b9:cd:2c:75:68:be:4b:69:
6c:41:ad:25:b9:07:a7:48:f1:02:a9:42:20:85:62:
12:79:f0:aa:b4:f6:e1:11:e4:9b:eb:cb:fa:1f:14:
c1:a8:2b:6a:6a:35:ea:9d:a2:30:e4:ee:24:64:cc:
c9:73:d4:06:90:0f:9b:69:13:d5:0c:b4:0a:45:a7:
1a:81:ed:32:8e:ff:5c:df:92:05:ae:c5:93:03:19:
9e:dd:9e:ba:13:d1:25:9a:e6:8d:f2:c7:15:25:38:
5f:5d:1c:b0:5e:5b:a3:2d:5d:55:82:37:fe:de:1c:
d8:75:1f:5f:7a:64:a8:c9:d4:7c:32:a1:e6:4d:57:
da:18:f1:03:24:43:39:ff:37:6f:e5:fb:81:99:d5:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:77:43:44:51:2A:C0:89:89:18:F4:A8:5E:E0:00:78:40:49:5B:80
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8f:dc:07:da:72:47:51:30:4b:40:1e:9a:fb:ef:2d:cb:48:
a7:3f:36:5b:e8:fd:ad:5d:b2:db:2b:fa:1a:b3:02:8c:98:be:
30:ee:d5:ed:69:fc:de:0d:13:7c:bc:5f:3f:37:f1:25:20:da:
cf:1e:a9:ce:c9:89:e9:6b:11:d3:04:c1:4d:af:a4:5b:49:e1:
0c:24:4d:2c:6d:36:a4:00:31:d2:ce:d8:ed:a2:09:70:1b:12:
ea:29:ab:64:ad:b9:d8:77:c1:7c:fb:93:97:63:5e:25:b4:19:
99:60:44:a5:b5:35:99:70:3f:84:2c:76:d5:3c:61:83:ac:5e:
c9:99:f6:07:2f:25:6c:72:47:a3:39:31:24:8a:6f:b9:bb:46:
5e:98:5d:92:28:35:28:66:b6:13:67:4c:2e:56:42:4e:39:e7:
20:32:cc:9e:3a:c4:70:07:78:fa:a3:cf:eb:b7:cb:ed:7a:e5:
db:0c:cb:fa:7b:b0:b1:cd:06:bf:9e:51:5f:7c:d9:23:6d:b4:
d6:61:74:57:e0:2c:85:70:17:d8:58:a2:7d:1c:a6:6c:19:04:
61:c2:95:89:a9:b8:fc:d7:20:1c:3c:25:8e:48:c9:83:2a:89:
5f:03:b1:25:e1:ab:e4:90:80:05:47:d9:7d:d0:f5:63:fb:51:
e4:c6:b6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:28:24 2026 by rpki-client