Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
File: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft (raw, json)
Hash identifier: 0NpUqtoU0Ui43cVqMmq/KiYt9sMdy41Rl+9eYGpVeN4=
Subject key identifier: 77:16:23:18:71:46:D0:A2:19:04:68:16:15:2D:BA:A3:6D:C9:28:4F
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 019CAAC690921B957D9239561493478DC9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
Manifest number: 051F
Signing time: Sun 01 Mar 2026 19:01:05 +0000
Manifest this update: Sun 01 Mar 2026 19:01:05 +0000
Manifest next update: Mon 02 Mar 2026 19:01:05 +0000
Files and hashes: 1: S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl (hash: uDgatJr+yNyTtJVa2tMjcjXshw5VhZGSDtZtq5+4H5o=)
2: TK0mGYfamFzjvmIKhbAYXRFUv18.roa (hash: mEStbrRzYyO+KhV7aEr8CwcL0UmalaKifwEWpoVMtQg=)
3: Yjfy-v-HKMEWBvN16nQfiAd0IRs.roa (hash: uBEQAFGBVO4swE9ohNLmgnxXcBg9SBRkpgcmULSTVLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:90:92:1b:95:7d:92:39:56:14:93:47:8d:c9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Mar 1 19:01:05 2026 GMT
Not After : Mar 2 19:01:05 2026 GMT
Subject: CN=771623187146d0a219046816152dbaa36dc9284f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:b1:04:04:f1:14:f8:1d:38:8e:21:cc:9f:
5b:79:0c:9e:7f:0e:92:ce:c5:e2:f5:65:6e:aa:f6:
21:89:a6:82:e7:70:e8:60:f2:6f:f4:f1:c9:68:e5:
e7:7f:4b:93:5c:9b:b6:31:18:c7:f7:8d:c0:c7:e6:
0e:78:2f:91:1a:e0:9e:5a:59:1f:46:08:51:63:6a:
15:ea:48:da:f2:3e:31:1d:79:c1:8d:50:1f:d9:73:
5c:6c:a5:29:c7:24:2f:0a:83:d7:7a:9e:f1:29:d4:
00:67:c9:9b:34:8b:9b:e5:b4:b9:78:70:26:22:ae:
c5:62:13:8f:0f:99:7e:c4:0c:31:62:d3:bf:9d:8c:
64:65:db:55:15:7c:d9:9d:f8:01:5d:22:cd:02:44:
14:03:a8:f7:74:ed:de:11:fb:a7:38:71:7a:63:0d:
2d:83:5a:93:15:34:6b:f5:08:fb:d7:02:f7:c5:4c:
5e:32:7c:a5:af:ef:c5:cc:32:ef:4a:e9:4e:11:d4:
14:2a:99:b4:ea:f4:94:47:6c:51:37:9e:b1:9e:44:
f5:a0:6d:07:f3:da:96:8c:04:23:3f:d5:52:5e:6f:
16:55:a6:0b:14:68:a9:19:5b:2b:19:bf:68:e2:b1:
e5:07:34:dc:1e:aa:f7:cd:59:d3:91:bc:a1:76:dc:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:16:23:18:71:46:D0:A2:19:04:68:16:15:2D:BA:A3:6D:C9:28:4F
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dc:86:64:eb:d7:f0:cf:b3:92:54:f9:5d:04:01:5f:16:cd:
92:7e:f1:4e:74:2a:34:97:9b:3f:bc:1d:32:b4:b0:2d:8d:aa:
ff:7d:7b:f3:85:8d:05:22:ca:57:ac:cb:04:ca:95:89:ad:c9:
65:2e:64:f1:47:fd:85:0c:43:2e:04:0f:99:3a:c8:18:90:ae:
0a:ff:b6:00:fb:ec:c1:1a:25:48:e8:30:f4:cf:0a:77:e0:21:
be:68:23:b2:86:6b:6a:e4:b4:c2:c5:93:23:ab:f2:63:5e:f1:
a8:b7:0e:12:41:eb:a9:79:fa:da:73:7f:a9:fd:c2:f2:13:22:
9d:91:a9:3c:3e:b2:82:38:5c:e7:00:59:e9:67:b2:7c:3d:7d:
40:a4:75:e3:00:aa:12:9d:9e:26:49:0b:4d:5e:d2:17:4c:e4:
be:79:08:d0:f8:bc:f4:c5:0b:7c:6e:b9:db:d1:36:07:bc:f1:
4c:b7:16:f8:32:11:3e:ea:4f:ea:61:89:21:99:60:d5:ef:c2:
3a:39:e1:b3:09:76:c1:58:b8:77:14:61:a1:b7:35:98:e2:01:
4e:8c:e5:66:fa:6c:89:80:e4:9e:c3:c0:48:e5:da:47:2a:5c:
71:59:e2:9c:08:43:d1:73:3c:31:89:40:2f:bc:28:3d:45:d8:
82:1b:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:11 2026 by rpki-client