Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
File: S5o7nhAjIJXBjSZERAzlxYoTizU.mft (raw, json)
Hash identifier: kPfHew34DLI5bqBbc4sxHo3qUuf/BHWrsLerCPoGzK8=
Subject key identifier: E1:1F:D9:02:69:C0:DD:AC:E3:D0:24:97:2D:6E:00:19:B4:0D:A3:65
Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
Certificate issuer: /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Certificate serial: 019D9850085CBE28989778857460A8EDA88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
Manifest number: 1059
Signing time: Thu 16 Apr 2026 22:01:14 +0000
Manifest this update: Thu 16 Apr 2026 22:01:14 +0000
Manifest next update: Fri 17 Apr 2026 22:01:14 +0000
Files and hashes: 1: S5o7nhAjIJXBjSZERAzlxYoTizU.crl (hash: PjQ+EZgEKeTEZhENxofEaFYega4sCSQtYDDE1wWCdO8=)
2: _T6zV2ELZWjUdtaXJfX-mXC7l2M.roa (hash: Di+3zjNxD4VBkQkrMYOgpBTt4aXpGzdYOnM8KOhwPZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:08:5c:be:28:98:97:78:85:74:60:a8:ed:a8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Validity
Not Before: Apr 16 22:01:14 2026 GMT
Not After : Apr 17 22:01:14 2026 GMT
Subject: CN=e11fd90269c0ddace3d024972d6e0019b40da365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9e:bf:84:30:1a:88:bb:7f:80:82:00:14:13:
a3:3c:cf:7b:5d:90:b7:8c:84:96:fa:11:81:71:91:
b5:81:70:ba:50:45:57:ef:38:a4:85:71:8e:50:21:
de:01:a9:15:18:bc:b4:26:d8:b3:34:7d:87:97:75:
e8:5a:41:e2:2c:98:14:a7:84:db:5b:e0:82:d1:b3:
dc:27:b4:65:4b:78:29:7f:a3:78:7b:f8:5f:9d:f9:
b4:88:cb:6d:af:2b:d6:22:27:53:f6:d7:3e:ab:dd:
3c:df:02:5e:c1:d8:b6:73:5c:3c:55:96:c3:05:30:
1e:21:77:1c:ad:c6:da:65:20:ac:a7:79:c4:be:f7:
19:9e:87:c5:8d:9b:c5:f7:b7:69:61:ef:f7:6a:e3:
07:4a:97:bc:d2:2a:b5:7c:6f:40:8f:4f:17:39:a9:
10:07:2c:af:67:b2:17:57:3a:00:02:5e:72:01:2a:
29:fd:92:e5:66:ad:a5:e7:82:3f:a3:21:a5:5e:2d:
94:6e:e5:04:e7:df:9c:0b:b0:49:f5:12:39:a6:8a:
76:94:b7:13:2f:70:b7:e1:d9:8d:4f:4d:16:b3:d4:
2c:dd:e4:85:0e:5a:7d:2f:42:80:4d:8f:02:57:62:
7b:cd:a7:80:58:2e:c8:f3:56:4c:ff:32:14:ce:09:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1F:D9:02:69:C0:DD:AC:E3:D0:24:97:2D:6E:00:19:B4:0D:A3:65
X509v3 Authority Key Identifier:
keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:27:12:cc:7c:02:e8:6d:10:44:3d:79:4c:a7:bf:3e:ec:8b:
25:53:02:2d:96:41:1e:63:90:85:5a:41:b4:96:f6:3f:33:9c:
23:ce:61:18:be:82:e4:cc:87:61:41:f3:53:63:ff:7d:70:12:
c7:83:c6:a6:16:8c:90:e1:6b:fa:0c:d9:e4:3e:2b:2d:48:d4:
d5:21:e6:5b:44:27:10:c9:91:52:6b:a8:8d:b0:32:16:72:68:
d6:04:8f:89:8e:49:10:1c:e2:f1:db:71:6f:24:87:0f:ad:8e:
7d:d8:d8:a7:af:e5:0c:32:5f:ad:8e:9f:83:8b:bc:76:f9:c3:
32:e7:69:20:ec:e1:99:39:b1:e3:a6:23:18:2e:62:c5:3f:01:
bb:45:ef:cb:08:f7:1e:29:d0:ed:b8:65:8f:03:b9:6b:90:98:
7b:74:19:c1:44:d9:24:2e:cd:94:8e:b8:d3:b5:bc:b5:60:b4:
17:19:a4:67:4e:c4:c3:56:2b:62:65:61:f2:2a:51:4b:4c:d8:
99:16:2d:0e:e5:d3:ae:60:ad:5e:4c:b5:36:73:e2:65:51:46:
96:dc:69:8c:fd:17:e8:21:4a:0e:d9:6a:54:a8:88:8c:4f:7f:
20:91:a5:a3:b8:9b:7a:e4:f1:45:63:30:4f:2d:61:b4:31:97:
6a:6d:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:37 2026 by rpki-client