Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File: S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier: NMaSPZ2/BWxDL36WNWKIrV49U5SgC7gwgCIDWo3cOqw=
Subject key identifier: 4B:37:49:99:43:41:AE:39:9F:B8:F2:8A:1B:8C:78:6A:37:66:34:38
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer: /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial: 019D99D0A290C63EAF2254D88E21640F223A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:01:20 +0000
Manifest this update: Fri 17 Apr 2026 05:01:20 +0000
Manifest next update: Sat 18 Apr 2026 05:01:20 +0000
Files and hashes: 1: N07DYIFv3xqgyomuGHFgGcsx7lk.roa (hash: fN+WhDdgQjJRbbGF33NE6ZNpEbEDoV3Db8A2xN59eWc=)
2: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: jPZnXzaNq3IQ5dwMg2MRJaHwHiHJKiERPpQO9y8q/XQ=)
3: o5Bt-A5F4sUEfdarAj82so2-9rk.asa (hash: 9puN29QaYr3CoTjTv9qBsno8hmdQJUVSkIHnreuyEvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a2:90:c6:3e:af:22:54:d8:8e:21:64:0f:22:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Validity
Not Before: Apr 17 05:01:20 2026 GMT
Not After : Apr 18 05:01:20 2026 GMT
Subject: CN=4b3749994341ae399fb8f28a1b8c786a37663438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:9f:15:e4:f5:21:9f:ed:5c:85:15:24:5b:
ff:33:46:ff:9b:f3:53:9b:6f:cb:fb:e3:ba:09:fb:
23:25:d3:08:42:a9:f3:4e:45:33:99:ef:0b:f6:3f:
78:42:6b:2b:d6:c0:55:cb:b4:a8:d5:12:df:ea:5c:
1a:c1:fe:84:67:e0:2a:5e:1e:6b:b8:01:42:14:ad:
be:b1:94:fa:c5:8c:72:b3:81:a1:ec:4a:92:b2:78:
01:0b:9b:78:e5:2c:11:8a:89:25:9d:20:de:26:20:
2e:3c:1c:6c:fb:e9:f7:4f:78:bf:4e:45:60:49:d9:
e7:1d:df:bc:9c:e4:e9:ec:44:d0:26:9f:af:d1:71:
a8:4b:34:96:ab:54:55:9d:01:23:de:a0:36:70:ee:
3a:d1:8c:f2:dd:4a:1c:7f:ad:e2:02:9c:c5:5a:bd:
a5:20:00:c2:04:45:00:86:83:3d:d3:1a:1b:9c:c8:
94:78:08:47:10:d3:5d:e5:09:0c:5f:b2:b8:cb:5b:
d9:06:df:31:71:90:b7:85:36:58:c9:6c:e0:c2:4f:
fd:9c:7b:e8:23:8c:7c:53:8d:9f:dd:35:58:d5:29:
53:0c:54:53:a2:a6:01:87:d9:1b:16:e8:28:b6:57:
a7:09:59:02:b9:a6:6f:7b:d6:19:86:3e:d2:be:37:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:37:49:99:43:41:AE:39:9F:B8:F2:8A:1B:8C:78:6A:37:66:34:38
X509v3 Authority Key Identifier:
keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:98:f5:72:dd:5b:dd:26:2f:75:26:4e:37:81:bc:b3:33:84:
56:a8:52:a2:8c:9a:25:04:37:a9:42:df:b3:c8:61:9a:05:cd:
4b:de:bd:65:d9:24:be:2a:64:d2:fd:8a:30:b9:a1:5a:15:26:
02:6b:b1:4b:d2:65:c4:56:40:11:1d:7f:19:c4:7f:e4:e5:d8:
b3:3e:2f:6e:a9:98:ea:67:c3:9f:ab:cf:a8:f0:03:23:e3:0c:
1c:e0:de:ed:d7:6e:35:90:d8:26:53:1d:8c:ad:55:17:98:0f:
68:98:26:05:2a:db:c3:2c:ac:e1:69:6f:e7:a1:cd:a7:54:5b:
29:b3:74:ba:88:7a:52:ff:0c:3d:72:5b:21:89:f4:c6:f5:d6:
db:4e:2b:40:13:6d:26:51:bd:63:6a:a0:0c:df:cf:75:49:14:
f5:5d:d6:87:6b:43:40:0f:9f:d9:ae:ec:b2:0a:dd:58:4c:af:
2c:ba:83:87:25:41:a8:8b:b0:f0:75:47:d9:2b:44:e8:f4:2f:
15:4e:67:c5:9e:84:82:35:61:d4:fb:cf:62:22:5d:af:13:f8:
81:c5:b7:ee:b7:ae:92:88:3a:01:84:44:c4:36:6e:d9:1c:aa:
d4:1b:ae:ee:bd:2a:89:4b:81:17:c8:26:b8:66:fa:37:0b:27:
0a:5c:1d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:55 2026 by rpki-client