Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: Oz4od8r7bryk/dqA+2U5fqTGU1VXXgdt5nAyKLvVE+k=
Subject key identifier: 37:21:6B:63:39:DF:BD:A5:0F:11:62:64:A8:11:EF:3A:BA:2C:8D:19
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 019CAA21ACFB0EB5BB385F0B816407FC12CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 1533
Signing time: Sun 01 Mar 2026 16:00:59 +0000
Manifest this update: Sun 01 Mar 2026 16:00:59 +0000
Manifest next update: Mon 02 Mar 2026 16:00:59 +0000
Files and hashes: 1: IIymt_gIxj1wQiBNwoPBz_3n-qE.roa (hash: yR49/WGoG8+bW4KA9QnfHmFC2bKX29hGh6JWaLIVXdA=)
2: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: 3+bem1hVEkh9yI/8mxVYSKjTpz1idYPmSwGNhNNcpVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ac:fb:0e:b5:bb:38:5f:0b:81:64:07:fc:12:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Mar 1 16:00:59 2026 GMT
Not After : Mar 2 16:00:59 2026 GMT
Subject: CN=37216b6339dfbda50f116264a811ef3aba2c8d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:6b:df:75:cb:21:6c:7f:85:9c:b6:83:0b:
1b:09:ab:25:02:11:9f:fc:51:b8:c2:8e:5f:90:98:
bc:e4:d5:2d:97:da:e7:80:45:b8:eb:bd:c9:66:a9:
69:bc:90:46:36:6a:37:ef:21:2d:6a:14:fa:4c:8a:
e5:f0:16:af:55:18:77:39:7a:f8:cc:92:7b:19:8e:
22:88:0d:45:07:ca:14:f0:49:c6:63:fc:d2:55:a7:
eb:7e:be:d1:bf:ab:fd:b6:79:cd:ab:17:9b:cc:e4:
85:3d:29:f1:84:a1:0b:60:02:b8:67:91:5b:3f:f6:
a1:e3:e0:34:b2:7f:76:ba:55:9e:aa:14:8d:8c:a9:
34:c5:ed:9a:ef:df:1c:b1:f5:b6:be:8c:2b:9a:dd:
ac:c7:81:7a:ea:8b:77:fd:f7:7d:3b:06:42:75:60:
f9:4a:6f:08:b6:c7:1a:2d:d9:95:65:42:fd:20:d6:
84:ca:c4:78:25:22:77:17:40:f3:d9:33:df:51:66:
1b:d6:93:c0:6e:16:45:79:9c:12:cf:16:a6:53:96:
ec:fd:66:31:71:f2:f2:98:f5:2c:f4:cc:05:da:18:
06:82:c6:61:9c:03:74:0f:b6:7b:b7:f4:07:f1:be:
d4:d6:11:70:a2:8c:f4:17:e0:2f:91:a2:f8:2e:0e:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:21:6B:63:39:DF:BD:A5:0F:11:62:64:A8:11:EF:3A:BA:2C:8D:19
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:68:4b:96:81:cd:fb:f1:6c:60:e7:b4:ed:ff:95:67:53:2e:
46:71:a4:22:38:4e:6c:b3:e4:14:0e:90:4e:8f:37:b4:1f:e7:
18:18:17:49:f2:2a:f5:b7:4d:d8:8a:48:60:dc:d2:b5:4f:5b:
c9:ce:71:ab:50:db:23:d6:5e:d0:83:8d:f4:14:da:df:b5:38:
b2:f4:b3:1f:94:8e:36:4e:d5:8e:d4:48:42:72:e4:57:49:c2:
00:bc:cd:83:14:78:20:22:ca:90:e6:26:bf:cc:1d:3e:85:25:
a0:5a:86:12:ea:39:23:15:c1:64:aa:e3:bc:a4:2d:85:03:c6:
eb:bb:a5:e2:ab:2d:b1:02:b9:dc:d6:cc:4f:2b:bc:86:bd:8e:
ba:dc:0d:c6:0b:b6:42:48:09:af:0a:f5:fa:10:e2:32:f4:4c:
b7:37:62:08:ec:90:98:3b:c9:61:da:48:31:1f:e1:d6:5d:f6:
bf:d9:c0:e9:ab:cc:1d:82:e0:4d:3d:68:4a:8c:7c:87:bb:42:
7f:da:2b:8c:80:c0:95:64:7d:a2:06:bc:81:c1:43:91:e6:a9:
9d:9c:00:c6:27:76:fc:f6:8f:f8:2a:10:ea:2c:4a:40:c5:d4:
9f:fa:62:83:21:58:2b:ad:74:51:c2:d6:96:96:77:d7:57:f3:
97:6e:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:34 2026 by rpki-client