Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier: WgcrnsUKGTzd/Nb0Dm1TT4GjV/9VyVquCdKuy6B1OgU=
Subject key identifier: 77:8C:C7:16:B3:AD:EA:11:B8:C6:6F:15:AB:E0:31:2D:97:D6:0E:24
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 019D9850916428BDDEF8B6DBF9DAE7A4E531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number: 059A
Signing time: Thu 16 Apr 2026 22:01:50 +0000
Manifest this update: Thu 16 Apr 2026 22:01:50 +0000
Manifest next update: Fri 17 Apr 2026 22:01:50 +0000
Files and hashes: 1: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: g/GZ3JVPQE3Yw12Ky0WWxiU5TAsDxtNg1vo73J5N+z8=)
2: TK0mGYfamFzjvmIKhbAYXRFUv18.roa (hash: mEStbrRzYyO+KhV7aEr8CwcL0UmalaKifwEWpoVMtQg=)
3: Yjfy-v-HKMEWBvN16nQfiAd0IRs.roa (hash: uBEQAFGBVO4swE9ohNLmgnxXcBg9SBRkpgcmULSTVLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:91:64:28:bd:de:f8:b6:db:f9:da:e7:a4:e5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Apr 16 22:01:50 2026 GMT
Not After : Apr 17 22:01:50 2026 GMT
Subject: CN=778cc716b3adea11b8c66f15abe0312d97d60e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5c:d1:ea:0e:3b:21:d5:4a:61:97:24:8d:58:
92:97:8f:16:21:41:a3:b6:9c:63:1b:97:4d:be:20:
f3:ed:2a:72:d4:c5:2e:d5:aa:f3:a9:27:a0:6f:a7:
2f:5c:5a:68:5b:0a:2e:3d:18:54:79:ca:b4:cb:60:
bd:39:1e:89:7f:db:79:b8:de:5a:04:2e:3d:b5:72:
6c:76:15:87:c0:72:a6:c4:1e:63:04:7f:ce:56:aa:
31:07:af:ca:06:25:0d:f8:b5:1b:8d:cf:45:ac:3e:
f2:d6:57:94:62:cd:2f:a4:61:a7:35:2a:58:f4:1c:
8a:c9:69:94:22:87:f0:3d:88:1a:52:59:3a:23:6a:
8b:a8:a3:02:d8:b9:88:52:37:e2:22:dc:2e:16:68:
f3:dc:9e:64:60:b5:d5:57:de:05:fc:b3:ba:9c:21:
52:66:9f:bb:ba:0e:31:9a:5b:81:fd:9d:fe:57:6b:
c8:d3:b2:8e:a3:2a:c6:4e:3a:a6:ae:05:c0:e1:c6:
24:05:0e:69:d1:12:14:72:82:1b:ce:66:da:55:be:
8c:12:31:a7:20:48:a1:a7:d6:68:eb:ad:f5:f9:1a:
d0:19:ae:c8:22:4b:68:dc:f6:b0:0c:20:2a:a7:44:
73:c7:ea:6b:f3:d1:85:57:58:e3:06:76:d6:2f:e2:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8C:C7:16:B3:AD:EA:11:B8:C6:6F:15:AB:E0:31:2D:97:D6:0E:24
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e0:b1:10:95:0f:ee:41:ea:c9:f4:6e:50:43:c6:1d:90:57:
fa:04:75:9b:3c:14:95:03:fc:2c:ed:9b:3a:16:96:d3:13:a9:
ba:9b:94:8f:a8:f4:61:75:db:7e:0a:c5:da:4c:37:d6:7a:97:
ad:31:b7:bc:92:f0:5d:85:1c:28:63:00:23:80:ea:3f:fc:7a:
44:58:4f:e6:73:9f:4b:9e:07:1c:5a:49:93:46:51:ea:df:36:
ca:69:68:ff:24:73:57:6b:cb:d9:45:85:f7:cf:93:d4:0c:42:
44:3f:74:10:0e:97:05:6e:8d:67:84:7b:68:0a:3b:13:29:9f:
67:50:af:fd:86:30:0c:be:39:cf:49:0a:19:51:d2:b4:a5:78:
9f:69:dc:c4:cc:c1:0e:da:78:1c:de:34:87:27:1f:91:66:cc:
f4:72:bc:71:2d:b7:4b:48:bc:9b:19:79:a5:05:b8:cf:0a:8e:
0a:1e:de:59:32:05:cf:1a:df:da:ae:53:4e:8a:c7:fe:70:da:
65:cf:9a:a6:c8:14:6e:78:3f:02:b8:fd:f0:8e:c5:46:3e:54:
d7:9f:15:dd:1e:77:fd:9c:c0:f5:06:14:7b:6f:d0:e0:66:14:
a9:19:58:f3:4b:a6:33:da:5e:2c:95:ed:eb:cd:b2:9c:e4:c2:
73:2b:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:36 2026 by rpki-client