Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: JFEIQ9v4oS9DIxpnv+xB+ZMIkcPwN025Wjl/ATTC5Rc=
Subject key identifier: C2:F6:94:E4:56:7F:9D:01:2B:2D:32:82:97:E1:47:BB:1E:32:6A:F1
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 019CAC46E86D72D7FAB19DB3CA0254FBEAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 10B7
Signing time: Mon 02 Mar 2026 02:00:53 +0000
Manifest this update: Mon 02 Mar 2026 02:00:53 +0000
Manifest next update: Tue 03 Mar 2026 02:00:53 +0000
Files and hashes: 1: KaaC6M28k9adFlDm0sQNkvGUIIw.roa (hash: 2H0fCcqXWjgAUaS5LPxTPaJ+kJQB9vSGvCYiGO5pfEU=)
2: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: JR9IBAtklMfBZ6/VBrdX+AMG96SNRFws0nrZKmSJS8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e8:6d:72:d7:fa:b1:9d:b3:ca:02:54:fb:ea:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Mar 2 02:00:53 2026 GMT
Not After : Mar 3 02:00:53 2026 GMT
Subject: CN=c2f694e4567f9d012b2d328297e147bb1e326af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:3c:0c:c7:19:67:f8:28:24:35:48:ae:5c:
27:d7:3d:2c:2a:7a:cc:08:51:e1:5a:57:80:83:a5:
3e:2f:48:7c:38:1d:d7:88:ff:7d:8d:ed:85:e5:ed:
97:79:84:d2:c1:c7:0a:a9:3f:51:d1:fc:24:35:8f:
9f:a3:e0:48:d3:e2:51:ae:ee:b5:72:2d:20:6b:ee:
dc:9e:e2:9f:1f:89:75:6e:d2:e3:cd:ab:b8:d8:e7:
4e:07:da:05:f1:45:d6:87:43:0d:fa:64:44:ca:f7:
79:e1:5a:d9:36:72:e2:97:83:82:5d:cb:6b:52:d3:
65:d7:3e:0c:f2:33:39:cd:0b:32:ff:4c:81:af:36:
99:c3:ce:30:ac:87:d9:03:d2:8e:60:34:bc:8e:ef:
b5:df:05:c1:b0:3d:80:90:e5:43:23:a6:e9:5b:8b:
a2:64:83:d7:d7:ab:6d:74:1c:88:1c:d4:7f:9d:17:
a9:78:f5:52:7e:c5:a0:07:f4:15:36:61:7a:e9:7e:
ef:50:60:46:c6:c6:e2:62:13:b6:5f:cb:aa:90:23:
33:39:ec:65:83:20:7d:2a:b4:73:77:c0:fa:ba:82:
b3:0e:8f:8c:61:41:06:fe:24:12:15:01:67:d2:30:
4b:50:b8:51:8f:a8:a6:e9:5d:6a:cc:16:52:d3:82:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:94:E4:56:7F:9D:01:2B:2D:32:82:97:E1:47:BB:1E:32:6A:F1
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f9:65:34:5e:3e:da:cc:bf:38:92:03:e5:7b:26:e4:f8:25:
72:13:fe:ee:8b:f3:bd:05:79:e5:33:b4:08:93:73:5c:bb:72:
28:73:19:9a:6c:80:b5:b4:7c:75:2f:23:2b:bb:e1:68:03:3b:
40:a0:d1:d1:03:d8:0c:65:28:0f:cd:95:32:bc:fd:d8:29:fa:
e0:c6:2c:33:f4:b4:d6:72:92:18:8d:ab:0a:8b:93:5c:ed:33:
54:eb:04:87:e6:73:fe:62:a2:6f:39:c5:6a:c9:fa:f6:88:95:
ad:21:00:e0:20:94:29:3a:95:28:de:f3:77:4c:f9:50:77:e9:
e1:c8:c2:f3:b3:d3:9e:26:ec:86:d4:ca:f1:f6:1e:57:9d:6c:
b0:fd:0c:e0:22:2f:12:53:ad:46:a8:79:61:70:0f:99:65:f8:
72:31:13:fd:bc:31:84:77:76:37:cd:a1:b6:79:be:44:57:0f:
e9:4f:b3:4e:e2:86:d6:f7:dc:ee:49:88:6f:8e:f6:9b:6b:35:
a4:a2:d1:79:31:2f:29:1e:12:2a:90:23:99:d3:5a:30:2d:87:
7a:fc:a2:04:d1:a8:a2:29:32:a9:33:6e:b1:60:7c:25:a5:66:
9a:b4:bb:e3:06:46:04:69:04:77:30:7c:49:08:5d:31:35:ed:
59:14:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:19 2026 by rpki-client