Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: fiziUfGLUiFa2LygYbwrGWTjmr6uSdESuzNK50iEOIs=
Subject key identifier: 91:0B:F9:FE:76:50:03:9B:1D:33:D8:A2:CA:56:FC:CE:F6:F8:93:3E
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019CABD976E28A1130FD72EE85A562175DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 156A
Signing time: Mon 02 Mar 2026 00:01:21 +0000
Manifest this update: Mon 02 Mar 2026 00:01:21 +0000
Manifest next update: Tue 03 Mar 2026 00:01:21 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: wDCgqz684aMqGw5TSPCObRf6gFSSA6woyqdEtlFfsjw=)
2: ZAwG4slSo_crrpDyRxFQR5KzVSg.roa (hash: /umphik0flgGmW1X9Vcc9LyWPZGDY2w5rPPzdD1TwmI=)
3: p8AQxyNR8nBVLYkz7FBkK4j0I2U.roa (hash: +Weoe1wjLZlER3uzL/qeXZKi4Mx1xgBcnOBbv/qCT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:76:e2:8a:11:30:fd:72:ee:85:a5:62:17:5d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Mar 2 00:01:21 2026 GMT
Not After : Mar 3 00:01:21 2026 GMT
Subject: CN=910bf9fe7650039b1d33d8a2ca56fccef6f8933e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:c8:56:0c:85:b1:a6:2d:e6:4a:f6:32:d5:
61:02:3f:0f:72:f6:51:cd:3f:06:1a:2b:ac:80:f0:
d1:4c:9f:41:a0:69:df:68:5f:47:f7:b9:06:a8:94:
3f:01:d4:a2:1e:2a:cd:ac:e8:cd:49:c2:dd:6d:15:
75:bc:aa:71:e3:be:a4:bf:73:f4:8e:b0:c3:c9:7c:
24:aa:70:b2:d1:5d:f0:5f:c1:42:0d:a3:83:4d:7f:
8f:eb:e9:f0:b9:8b:d7:1c:d2:ed:d5:be:40:6f:90:
3a:9f:3f:12:c5:36:6b:f8:3d:c7:2f:5f:31:e6:1f:
2a:ea:01:e1:be:88:f2:99:34:df:5f:70:12:4a:91:
fc:d8:aa:ed:b8:7d:be:ae:ff:01:91:23:50:3e:55:
d3:05:d9:7c:98:cb:58:3e:9a:7a:ff:ac:29:2e:f4:
2e:31:a4:7f:98:82:ea:ce:bf:90:33:91:0e:47:d6:
9c:53:2e:e6:ef:39:95:32:e2:e5:ec:46:65:9c:d6:
64:e2:2f:5b:eb:80:98:38:8d:45:eb:f0:6b:17:43:
71:b8:20:08:6d:c9:92:8f:37:53:74:92:4e:d9:2a:
cd:06:55:79:ed:19:3b:4b:3b:22:50:77:75:86:79:
27:9b:bf:6e:43:20:ed:ec:b8:10:91:58:fa:26:ef:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0B:F9:FE:76:50:03:9B:1D:33:D8:A2:CA:56:FC:CE:F6:F8:93:3E
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:8f:21:84:1b:97:22:ed:d5:8b:6e:40:0a:6b:ae:b7:56:
9e:ed:95:19:ac:82:0b:6c:7f:ae:46:8c:61:e9:44:43:2a:43:
bc:0b:c8:01:36:8f:13:5f:21:89:3d:22:eb:da:a5:51:5c:fb:
b1:a2:c1:0a:b1:d3:ab:91:96:a5:80:4e:4c:54:3a:e0:7d:f6:
5e:d9:53:1d:32:04:8d:ef:eb:a1:4c:f2:88:62:64:9c:f4:dd:
4e:58:1d:2a:7b:3c:a6:07:98:f2:05:59:ef:2a:1b:ec:0a:30:
b1:41:02:05:e0:d2:f4:7d:ff:d7:b6:53:53:df:8e:56:9d:bf:
ae:8f:ee:76:b0:35:f8:e7:f4:7d:82:2a:52:d7:60:59:ff:d2:
5e:98:20:6a:96:c1:d5:bc:2c:c4:53:69:05:64:13:ed:a0:00:
d8:75:6d:5c:78:be:8d:e0:f6:4d:c1:07:34:f3:be:4b:42:10:
d3:db:d0:a7:87:25:77:31:d8:a1:0b:24:13:41:fb:38:a5:84:
66:28:11:a3:e3:6c:a6:b3:1a:7b:76:91:e7:6a:32:5f:61:66:
74:90:55:8c:c4:01:24:ea:96:33:16:61:1c:e0:d2:ee:82:d3:
b8:61:f6:18:fe:c7:15:48:63:af:14:4c:34:46:f4:ce:8e:55:
f8:e2:26:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:28 2026 by rpki-client