Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: oQGzZd5uFTpASE3wl8itrg3B4dFGBcZu/eNDvcNUsXE=
Subject key identifier: C5:C2:B6:3A:24:6B:7F:4A:60:B2:2F:6C:DD:34:3C:44:4E:C0:B5:59
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 019CA9B37F9A957191C10AF9E9E030EAD96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0971
Signing time: Sun 01 Mar 2026 14:00:38 +0000
Manifest this update: Sun 01 Mar 2026 14:00:38 +0000
Manifest next update: Mon 02 Mar 2026 14:00:38 +0000
Files and hashes: 1: 76Y2-HUPTiLdTCSIpYCkR2ZgGcQ.roa (hash: aIEXIJxpvH5c1txE7w8Ef9ChmAewpEGy4MTuP+uMjCA=)
2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: j3bNgg0PmfD8LWgQU5ZJJRf0GWbSlpheSBKSHqzRBXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:7f:9a:95:71:91:c1:0a:f9:e9:e0:30:ea:d9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Mar 1 14:00:38 2026 GMT
Not After : Mar 2 14:00:38 2026 GMT
Subject: CN=c5c2b63a246b7f4a60b22f6cdd343c444ec0b559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:26:20:99:a6:eb:bd:e3:a2:c1:a7:61:34:
d5:3d:de:24:2c:74:b7:af:9f:da:5c:ae:01:7b:4f:
fe:22:b7:85:40:4a:f5:c3:3e:2c:67:d7:b7:49:69:
fb:e8:bc:b3:84:c9:d1:87:bd:a9:3c:0a:b7:0e:a8:
d7:ad:dd:90:be:ff:29:cc:eb:ef:ba:b3:e7:90:06:
49:41:3a:25:0c:f8:f5:eb:5f:44:d4:ab:dd:6f:58:
a4:78:8c:98:58:ff:ce:03:7d:cf:8b:b8:16:6f:fa:
8c:df:5e:44:cb:6c:2e:60:2d:3d:54:fb:b7:ab:96:
db:22:92:eb:3b:c2:50:fb:1d:80:29:9c:01:07:cf:
79:b7:7d:d0:ba:3b:d9:9e:15:14:e8:08:1f:72:b0:
fe:b9:71:bd:24:9c:57:85:8f:29:db:91:48:3f:e6:
37:4d:8e:24:8b:c1:37:21:85:22:3a:2b:67:0f:64:
83:7e:f4:4e:5c:aa:db:72:5d:fa:2b:ca:7c:3a:08:
8a:fa:f5:18:4e:bc:3a:6c:4d:1a:a1:aa:a2:03:82:
f7:e1:3c:fe:4a:89:8b:1e:75:5f:2a:11:4e:3e:c9:
64:2b:6e:55:40:5e:b0:4d:4b:25:07:1b:f5:d7:43:
0e:10:f5:86:01:b9:44:7f:ee:38:f4:85:07:85:d6:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:B6:3A:24:6B:7F:4A:60:B2:2F:6C:DD:34:3C:44:4E:C0:B5:59
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8e:1d:50:4c:6b:9c:bb:50:1a:ca:ae:2e:e9:a2:79:f7:9a:
ec:54:33:7f:69:7f:22:fd:4b:5c:8d:f0:a6:89:16:88:45:58:
0e:cc:9f:68:3a:83:af:d0:d8:d5:ca:29:56:3c:cd:e5:ff:a5:
3e:94:7a:6c:91:3e:f1:dc:79:ac:69:b6:e6:b0:de:62:00:62:
a1:cc:93:a2:69:d2:b2:79:48:f6:b5:c7:53:90:46:81:20:3f:
19:3f:9b:2b:1e:ed:30:7a:b4:13:21:93:4c:d3:84:d6:91:54:
a3:f3:07:bd:4d:e5:c8:7e:08:f9:8d:37:ec:a4:67:7a:95:67:
3f:fe:e0:c9:11:67:d6:25:c0:9e:e3:15:b1:ba:3b:bb:25:dc:
96:3e:18:cc:8f:f3:f1:03:10:d3:b5:62:53:12:8b:6a:7f:94:
31:b4:05:80:bb:c8:3b:75:9c:06:09:e1:34:db:42:f6:63:ca:
94:44:d3:c1:2d:4d:7c:fb:b5:89:d7:3c:cf:59:1d:4f:79:34:
79:a7:af:c1:2e:45:9e:5d:c0:cc:61:ad:71:c1:e0:4e:04:b3:
4f:49:d2:71:2c:68:19:2e:d1:07:8d:ed:a6:a8:8d:cb:28:34:
97:05:d4:0f:ad:4c:aa:7c:ae:ac:d0:d5:e0:58:8b:a6:0f:d8:
55:65:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:57 2026 by rpki-client