Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
File: S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json)
Hash identifier: 2K9gjnsBEv7i7VWtLJf7zqFy52vEXj0s3lqSFIxQIss=
Subject key identifier: CE:9C:5A:BD:1D:4A:26:68:3B:37:8C:4C:91:03:39:F5:6D:10:FD:B9
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 019CAA902B3B9B53B7FD71CEFB721C7AD86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
Manifest number: 17FC
Signing time: Sun 01 Mar 2026 18:01:40 +0000
Manifest this update: Sun 01 Mar 2026 18:01:40 +0000
Manifest next update: Mon 02 Mar 2026 18:01:40 +0000
Files and hashes: 1: A7oH_fLfnOw7C8Ezc6fn-0zm-WM.roa (hash: p+2iqj6NoeYI6sIm7F3U7seEwOT2LgHbpeFNruLRw/8=)
2: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: wQRadjmG9CQoPgZ8/j3zFCsDcHTQAAUM5LRzcUpaCI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:2b:3b:9b:53:b7:fd:71:ce:fb:72:1c:7a:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: Mar 1 18:01:40 2026 GMT
Not After : Mar 2 18:01:40 2026 GMT
Subject: CN=ce9c5abd1d4a26683b378c4c910339f56d10fdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:82:d2:eb:f8:bc:e9:dc:cc:72:13:6c:26:
20:16:bd:06:fd:1d:6d:bb:2b:d8:31:1e:37:1a:07:
2b:47:f2:75:0e:50:df:df:c5:47:ab:83:04:f4:71:
e7:af:b1:54:06:a2:5f:65:8a:f3:f0:82:dd:78:48:
65:45:7d:27:03:a3:34:11:91:e2:a5:6a:03:bf:4c:
cf:16:1c:1b:c2:8c:fc:8c:b8:1c:83:1a:0f:1c:28:
58:00:4d:d2:4d:20:35:48:44:d6:b2:56:ed:4e:af:
4c:ad:55:67:c0:4d:49:c6:fb:10:80:70:49:3f:b8:
b0:10:98:a6:f1:52:73:5c:f5:4f:64:e2:5c:b2:c8:
56:3d:4b:17:c3:71:94:ec:c6:3a:60:93:05:8a:a0:
e1:35:4c:cc:ca:c3:8c:eb:d3:11:04:f0:cd:57:54:
23:ae:b8:61:42:66:8e:14:6e:0f:a2:24:40:79:c7:
c9:2a:d4:c5:29:4b:cf:9f:33:92:10:b2:85:97:99:
04:77:fa:29:8c:07:3f:88:36:37:55:05:91:72:00:
5e:00:ff:3c:10:9e:83:78:66:69:71:72:ed:3d:a7:
6a:03:34:c1:3f:e5:55:8d:f4:46:a0:56:a2:9d:b7:
df:4f:0e:18:0c:61:b5:ac:d7:09:96:fc:c3:73:30:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:5A:BD:1D:4A:26:68:3B:37:8C:4C:91:03:39:F5:6D:10:FD:B9
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:04:53:e0:8d:1d:51:c1:1b:c5:b2:9c:3b:88:fe:ea:b4:c0:
bb:ab:fd:fc:c8:5e:aa:e4:b6:09:94:d0:fa:1a:52:15:1e:b4:
e5:49:ff:78:ef:bb:f5:81:62:81:79:41:14:6d:c4:3c:b2:b9:
1b:b6:24:94:a4:2c:39:bd:b9:be:b6:90:bf:15:cf:a1:04:e3:
99:eb:80:70:4a:1e:ea:27:14:25:9b:43:8c:34:d4:0a:ea:b0:
70:a0:14:24:be:2b:95:83:9b:96:1e:8a:b5:16:27:e6:e6:f0:
1b:f0:ea:12:d5:60:94:73:52:f0:3b:25:44:01:f7:c0:c9:2b:
c8:f0:97:88:4e:41:1c:f8:d7:49:21:7e:b3:78:36:9d:8c:02:
00:0a:ec:10:f6:d4:41:c2:20:39:44:a7:af:42:eb:cd:6d:24:
79:a8:31:af:30:33:a3:29:e4:fa:84:83:ee:81:97:1d:03:f0:
f9:65:f8:e1:bc:7b:7a:32:66:50:95:66:a3:ea:5e:47:76:3b:
3d:92:08:8c:0c:41:c7:60:cf:e9:72:3c:f4:62:33:5d:bc:94:
af:7b:45:d7:0e:96:51:3a:d3:3b:97:65:a3:7f:39:be:a1:dc:
16:32:9f:cb:3c:ea:44:5c:ba:61:da:12:42:6d:c3:3d:11:71:
d1:58:ff:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:06 2026 by rpki-client