Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: g6jUq9t0GAORP+UvIliVXlI9WQnAe2UBCUwKF0qBfrk=
Subject key identifier: 7C:69:E2:95:DC:47:1C:42:F4:9B:F9:37:62:05:4D:92:B9:C6:35:62
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019EBEED59B66EC0525BC438649D63F9DF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 167D
Signing time: Sat 13 Jun 2026 03:01:26 +0000
Manifest this update: Sat 13 Jun 2026 03:01:26 +0000
Manifest next update: Sun 14 Jun 2026 03:01:26 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: 6P+QoKWpxwEX4EUe+KdK1CCUZB807VQ3XCS6XQletMY=)
2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=)
3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:59:b6:6e:c0:52:5b:c4:38:64:9d:63:f9:df:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Jun 13 03:01:26 2026 GMT
Not After : Jun 14 03:01:26 2026 GMT
Subject: CN=7c69e295dc471c42f49bf93762054d92b9c63562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:b5:6d:05:6c:0b:cb:f6:e0:50:a6:29:6a:
d2:12:bb:2a:fb:c8:62:0e:95:57:a6:2c:08:67:b2:
c7:2d:b6:2f:d5:04:df:da:5c:98:fb:78:f7:5a:22:
2b:34:b7:99:8b:df:08:d6:b6:1f:f2:2e:b5:ab:98:
4c:83:b9:0e:15:e3:77:20:a5:e0:d6:57:39:1f:2d:
b4:fc:79:ba:36:8a:fb:9a:34:ee:60:40:e8:c3:48:
71:46:c1:ac:78:38:4f:ed:8c:3d:17:68:66:1e:00:
e5:b0:4d:85:e1:70:a8:9f:ab:88:11:94:76:82:5b:
3c:03:6b:2e:1b:46:a3:b7:fc:1b:bd:b7:95:e9:37:
1e:b1:78:f7:9e:0b:6f:12:af:7c:6b:14:ca:9f:cf:
f5:86:db:99:0c:38:94:2b:ed:0d:9e:e2:ab:4e:35:
6b:56:66:f0:13:c7:32:73:b7:f4:69:a8:ea:c6:58:
35:e6:60:25:2c:68:ff:20:40:30:3a:35:bb:39:a9:
3e:60:7f:a4:1a:33:60:d1:94:70:3b:ac:7b:e3:b1:
eb:34:2c:1b:d0:dc:60:f0:92:91:8f:e9:bc:32:8b:
df:7b:6b:c7:37:64:af:77:0d:92:b5:da:68:88:f3:
bc:c6:2c:dc:14:62:92:fc:cf:96:7b:6a:53:08:bc:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:69:E2:95:DC:47:1C:42:F4:9B:F9:37:62:05:4D:92:B9:C6:35:62
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:db:1a:78:14:52:b4:fe:17:23:f6:4d:a2:4a:de:2e:ad:f7:
d7:98:46:02:65:1c:49:83:6d:1c:f1:76:58:3e:54:96:74:41:
7e:cb:71:e6:d8:78:b7:84:16:67:d5:f9:8c:d7:7d:66:18:4f:
31:70:63:27:11:2f:29:30:ef:ec:21:c4:a3:75:41:37:80:b1:
01:0e:2f:8e:0d:7b:d0:f2:f0:68:43:8e:64:ea:94:8e:db:2e:
f3:7b:bf:23:3e:0d:50:76:e2:3e:58:f8:b1:21:32:1a:e9:84:
1b:91:54:4d:f8:d0:a4:31:73:1d:e8:a3:88:a2:9a:de:42:03:
73:43:36:90:b8:59:af:16:c7:3f:6f:20:1c:7c:72:d4:1e:62:
40:dc:61:d6:40:27:2c:3b:e8:94:90:08:71:f1:e5:4a:57:8c:
52:1b:77:57:00:97:d4:d2:96:12:58:e2:4b:e2:41:9e:a8:1a:
b0:f0:95:18:b0:71:af:ac:19:92:00:15:b8:56:9c:5f:d7:40:
3c:e9:46:c2:ee:4b:0c:9a:ed:12:04:34:1c:3e:31:2b:06:d2:
49:c1:ed:e3:01:e0:af:ea:b7:38:3f:f4:77:d9:2c:b3:d9:5c:
53:5f:0f:64:fa:a6:c5:2a:8e:e0:49:26:94:bd:fd:62:7f:15:
23:8a:95:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7Vm2bsBSW8Q4ZJ1j+d+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGQ4MjIxNjVlN2YwMWY3MjJjOTczOTY3Zjc1NTQ2MDUy
NDA4MDIwHhcNMjYwNjEzMDMwMTI2WhcNMjYwNjE0MDMwMTI2WjAzMTEwLwYDVQQD
Eyg3YzY5ZTI5NWRjNDcxYzQyZjQ5YmY5Mzc2MjA1NGQ5MmI5YzYzNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyS1bQVsC8v24FCmKWrSErsq+8hi
DpVXpiwIZ7LHLbYv1QTf2lyY+3j3WiIrNLeZi98I1rYf8i61q5hMg7kOFeN3IKXg
1lc5Hy20/Hm6Nor7mjTuYEDow0hxRsGseDhP7Yw9F2hmHgDlsE2F4XCon6uIEZR2
gls8A2suG0ajt/wbvbeV6TcesXj3ngtvEq98axTKn8/1htuZDDiUK+0NnuKrTjVr
VmbwE8cyc7f0aajqxlg15mAlLGj/IEAwOjW7Oak+YH+kGjNg0ZRwO6x747HrNCwb
0Nxg8JKRj+m8Movfe2vHN2Svdw2StdpoiPO8xizcFGKS/M+We2pTCLx9xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxp4pXcRxxC9Jv5N2IFTZK5xjViMB8GA1UdIwQY
MBaAFEuNgiFl5/AfciyXOWf3VUYFJAgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEt
NWFmOTU4Y2VhZjZlLzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEtNWFmOTU4Y2VhZjZl
LzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidsaeBRS
tP4XI/ZNokreLq3315hGAmUcSYNtHPF2WD5UlnRBfstx5th4t4QWZ9X5jNd9ZhhP
MXBjJxEvKTDv7CHEo3VBN4CxAQ4vjg170PLwaEOOZOqUjtsu83u/Iz4NUHbiPlj4
sSEyGumEG5FUTfjQpDFzHeijiKKa3kIDc0M2kLhZrxbHP28gHHxy1B5iQNxh1kAn
LDvolJAIcfHlSleMUht3VwCX1NKWEljiS+JBnqgasPCVGLBxr6wZkgAVuFacX9dA
POlGwu5LDJrtEgQ0HD4xKwbSScHt4wHgr+q3OD/0d9kss9lcU18PZPqmxSqO4Ekm
lL39Yn8VI4qVjw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:37 2026 by rpki-client