Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: cZo32Gkh8l42ja6ml0+ntvFf+3zNcv7Jddw1sDtR8zk=
Subject key identifier: B3:E9:BC:D2:62:48:E6:A9:3B:F4:F7:79:F8:EC:93:E6:7D:22:0A:AF
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019D9962933D431EA69545DC9D9A48E29D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 15E5
Signing time: Fri 17 Apr 2026 03:01:07 +0000
Manifest this update: Fri 17 Apr 2026 03:01:07 +0000
Manifest next update: Sat 18 Apr 2026 03:01:07 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: 04zpWwiwJcfY3MoQ4HutXgp5GGivrzQ5LFieeWmgA9c=)
2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=)
3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:93:3d:43:1e:a6:95:45:dc:9d:9a:48:e2:9d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Apr 17 03:01:07 2026 GMT
Not After : Apr 18 03:01:07 2026 GMT
Subject: CN=b3e9bcd26248e6a93bf4f779f8ec93e67d220aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fd:7a:82:5d:91:8c:2b:59:a5:cc:1a:2c:40:
95:75:a3:48:e5:a8:f4:a0:c7:27:de:db:1c:f9:08:
cb:71:84:e2:49:6d:f5:62:9e:b4:bc:3a:6d:d3:b8:
17:0a:21:db:09:d9:dd:80:eb:a0:04:ef:c7:7f:f0:
cc:69:4d:56:b0:33:8d:05:a1:8a:4f:0e:c5:9d:e7:
24:d6:f9:74:4e:47:eb:88:2d:e2:c2:97:5e:2c:80:
86:d3:36:d4:cd:1d:36:03:af:c8:3b:3c:75:43:02:
8b:fe:a5:d6:25:df:39:43:90:1a:29:34:cd:64:3b:
71:0a:ec:95:3e:bc:71:da:11:13:f4:63:88:42:4a:
dd:d0:a3:96:51:6b:66:bd:1e:12:55:53:89:55:e3:
d6:8f:d6:a8:69:71:10:37:ff:bf:6b:1a:42:c1:37:
07:be:1c:1a:66:c6:a4:f5:fa:cd:05:84:65:44:58:
f3:2f:df:e4:6f:08:1d:42:bf:c6:e7:16:ea:c3:9e:
bd:d2:e7:ba:7c:b9:20:82:90:4b:1d:6b:c6:24:50:
ad:4c:a3:0c:c2:fa:bb:d4:b0:ee:46:4e:39:f8:eb:
4e:97:df:2b:91:21:36:e9:a8:62:11:ab:ea:e9:a2:
a4:93:98:1d:d5:eb:e4:44:7f:fa:e9:62:37:55:28:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:BC:D2:62:48:E6:A9:3B:F4:F7:79:F8:EC:93:E6:7D:22:0A:AF
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:99:7b:2f:98:04:45:d6:77:80:4d:3f:b6:67:d2:c0:a8:80:
1f:d1:e4:f7:bf:28:cb:b0:98:5a:ce:85:d8:9b:9d:2a:30:d1:
38:74:d3:27:83:03:66:43:44:7e:38:cf:00:59:0d:3f:7e:ff:
b6:b1:5a:73:60:9b:61:0f:23:1f:b7:2a:6e:d7:6b:0d:e4:04:
f5:ee:32:94:7c:81:7e:88:4d:ad:5b:b3:9d:e2:cd:0c:b2:23:
f7:38:8f:4f:6b:89:4e:a7:98:bd:fa:e7:5c:c3:12:1d:5b:a3:
91:77:e2:bd:1b:33:8f:91:04:ca:2f:e4:54:5d:36:d2:5f:55:
52:6a:b9:2a:e0:6b:5c:4a:f1:07:f6:f3:41:70:5b:48:b4:1d:
d7:4d:83:83:86:23:64:d6:c3:cf:91:0c:86:6b:f2:7c:40:51:
79:87:60:d7:1f:07:b8:34:b0:70:86:00:a7:23:7a:d7:fa:c3:
9c:54:cc:61:33:cd:b5:69:d9:f3:8c:49:98:4f:10:e9:50:ea:
c9:fc:4e:f4:c3:b5:d4:44:22:47:b0:37:d9:44:55:df:27:cc:
ce:ef:b5:aa:86:b2:6d:a9:fd:7d:48:df:38:40:ab:04:2c:0f:
99:05:ae:92:af:c3:fe:2f:e9:89:4d:01:bb:1a:5c:a1:b6:a1:
74:08:53:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYpM9Qx6mlUXcnZpI4p0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGQ4MjIxNjVlN2YwMWY3MjJjOTczOTY3Zjc1NTQ2MDUy
NDA4MDIwHhcNMjYwNDE3MDMwMTA3WhcNMjYwNDE4MDMwMTA3WjAzMTEwLwYDVQQD
EyhiM2U5YmNkMjYyNDhlNmE5M2JmNGY3NzlmOGVjOTNlNjdkMjIwYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P16gl2RjCtZpcwaLECVdaNI5aj0
oMcn3tsc+QjLcYTiSW31Yp60vDpt07gXCiHbCdndgOugBO/Hf/DMaU1WsDONBaGK
Tw7Fneck1vl0TkfriC3iwpdeLICG0zbUzR02A6/IOzx1QwKL/qXWJd85Q5AaKTTN
ZDtxCuyVPrxx2hET9GOIQkrd0KOWUWtmvR4SVVOJVePWj9aoaXEQN/+/axpCwTcH
vhwaZsak9frNBYRlRFjzL9/kbwgdQr/G5xbqw5690ue6fLkggpBLHWvGJFCtTKMM
wvq71LDuRk45+OtOl98rkSE26ahiEavq6aKkk5gd1evkRH/66WI3VShI+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPpvNJiSOapO/T3efjsk+Z9IgqvMB8GA1UdIwQY
MBaAFEuNgiFl5/AfciyXOWf3VUYFJAgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEt
NWFmOTU4Y2VhZjZlLzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEtNWFmOTU4Y2VhZjZl
LzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5l7L5gE
RdZ3gE0/tmfSwKiAH9Hk978oy7CYWs6F2JudKjDROHTTJ4MDZkNEfjjPAFkNP37/
trFac2CbYQ8jH7cqbtdrDeQE9e4ylHyBfohNrVuzneLNDLIj9ziPT2uJTqeYvfrn
XMMSHVujkXfivRszj5EEyi/kVF020l9VUmq5KuBrXErxB/bzQXBbSLQd102Dg4Yj
ZNbDz5EMhmvyfEBReYdg1x8HuDSwcIYApyN61/rDnFTMYTPNtWnZ84xJmE8Q6VDq
yfxO9MO11EQiR7A32URV3yfMzu+1qoayban9fUjfOECrBCwPmQWukq/D/i/piU0B
uxpcobahdAhTug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:21 2026 by rpki-client