Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: PpT62sF2Mh5gIJ3dm38FJiP8dG/g1Q+byPaye0fq6ZI=
Subject key identifier: 8A:77:56:15:3A:C8:D1:7C:5D:10:16:76:96:55:01:7C:1A:BD:04:5F
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019D99629C57C72694A88AAB12517D9E86E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0EC9
Signing time: Fri 17 Apr 2026 03:01:09 +0000
Manifest this update: Fri 17 Apr 2026 03:01:09 +0000
Manifest next update: Sat 18 Apr 2026 03:01:09 +0000
Files and hashes: 1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: 4LWoLphTjdKmRP0ZS6ZyrqZEV1A/idap3J0fiMv+bCs=)
4: SO3BlzN82wuSE26PkAHoL9gdWK0.roa (hash: 2lTdc7W5+lUgsLYun9vUAbt/KzErih08Dxdrvh4+kG8=)
5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
6: xzU_R1urm6OQwv7-i4Miu0Lg7FI.roa (hash: 83vwjevGkm7TeLLNTTDiOn/v2zo45wBKwUV/hw2Ppgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9c:57:c7:26:94:a8:8a:ab:12:51:7d:9e:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Apr 17 03:01:09 2026 GMT
Not After : Apr 18 03:01:09 2026 GMT
Subject: CN=8a7756153ac8d17c5d1016769655017c1abd045f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:8f:f5:86:9c:0a:8d:be:a1:5f:e6:fc:dd:
c4:95:c9:45:a3:21:05:51:ca:ab:01:dc:60:43:7f:
3b:d9:05:43:71:23:4a:4a:94:4e:79:ae:8c:b2:93:
23:a9:b0:1b:2f:dd:f2:15:a7:66:06:74:d5:ff:b6:
2c:f0:34:a3:ff:c2:fd:50:f1:86:cb:2d:d8:7c:e7:
48:57:05:73:e6:82:cd:c8:8b:9f:e9:b3:45:1f:cb:
0c:57:67:90:e1:00:49:7a:e8:c8:2f:86:0b:c3:e8:
50:e2:b6:71:38:5c:7b:2d:a3:e5:63:81:da:cd:ac:
65:71:ab:ee:6f:bd:e6:68:83:2f:99:27:70:dc:ae:
88:d4:ba:73:bd:34:dc:d7:c5:83:5b:19:af:ec:41:
97:d0:9e:06:69:8c:b8:b8:e1:31:66:a4:c7:09:e4:
51:a7:f4:1a:ac:a1:76:9d:c7:e8:c0:a9:ad:2b:3b:
6f:92:eb:19:0a:10:41:ed:0c:6b:73:f6:ea:3f:c1:
39:00:b2:d0:59:3a:48:9a:69:45:9b:fc:98:6a:d4:
d8:73:04:2b:02:d5:c5:d8:20:2b:92:30:fc:33:80:
05:14:28:9e:ce:7b:ac:98:03:78:32:d0:8e:f6:40:
36:12:b7:5c:d0:fa:02:11:58:f7:88:5f:b2:ad:33:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:77:56:15:3A:C8:D1:7C:5D:10:16:76:96:55:01:7C:1A:BD:04:5F
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:e1:18:64:51:48:36:9e:f0:c3:cc:3f:23:60:08:9f:0d:
d4:37:0f:45:4d:0a:f7:ee:e8:74:3b:1c:44:7e:26:04:1e:91:
5d:44:4e:d5:3e:6c:5a:3c:84:35:a4:47:35:7e:43:92:54:c2:
80:15:07:13:66:97:e9:81:91:09:bd:fc:f1:9f:5b:97:70:99:
7f:b8:51:57:ec:b2:7d:19:98:d1:87:7a:40:ca:46:b7:2d:28:
51:6e:24:6d:e8:56:38:2c:3b:c4:e7:26:f7:53:fb:ed:ee:60:
5a:3f:00:58:1c:f7:87:48:e6:61:ce:3f:e7:38:30:b0:31:45:
18:fc:6f:e2:c9:a4:0a:c4:80:ac:dc:51:b4:7b:04:5f:28:58:
0f:6f:25:1e:3a:05:54:94:0f:d7:67:6c:30:34:f1:19:21:63:
bd:39:e3:8a:bb:67:5a:9e:89:b5:97:25:62:bb:f4:51:34:4e:
4f:51:40:fe:16:79:41:19:45:2c:44:60:00:21:82:da:8f:ef:
6f:de:3f:e8:1c:18:f1:71:ed:e4:f3:38:aa:26:4b:b5:2c:36:
a7:32:e3:8e:bf:ab:d9:a0:01:45:11:35:67:12:ed:1b:26:2d:
b4:9f:fe:16:66:e1:e2:55:8b:4e:66:02:95:90:ef:ac:35:f2:
3a:b8:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:21 2026 by rpki-client