Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
File: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft (raw, json)
Hash identifier: wSxMNGhUO7MvQnluPEfFiREcT6Fe3brYlUuVRktn24A=
Subject key identifier: D3:F1:3B:F4:AF:8D:4F:A6:6E:6A:B6:4B:A0:20:03:9B:32:36:55:59
Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
Certificate issuer: /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Certificate serial: 019DA48B4BE4FE6D3776EC5F3FB098401897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
Manifest number: 1562
Signing time: Sun 19 Apr 2026 07:01:25 +0000
Manifest this update: Sun 19 Apr 2026 07:01:25 +0000
Manifest next update: Mon 20 Apr 2026 07:01:25 +0000
Files and hashes: 1: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl (hash: 1n4UUGM5yQ5J2RroHtukP9v/nvAuYjLgynYg+Oji5WA=)
2: oZ5KMTsfThBFq6HeEDiKMmNpYEI.roa (hash: Fya1WLYfdNkhjXqChkihYHmhU9AOfJPUlY74dXuOW2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:4b:e4:fe:6d:37:76:ec:5f:3f:b0:98:40:18:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Validity
Not Before: Apr 19 07:01:25 2026 GMT
Not After : Apr 20 07:01:25 2026 GMT
Subject: CN=d3f13bf4af8d4fa66e6ab64ba020039b32365559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:d0:a0:43:19:75:60:05:ac:71:b1:b1:fa:
ee:39:e8:44:ed:c5:38:da:36:4b:16:ec:b5:6a:28:
8e:05:94:06:9b:a2:0c:00:50:e0:14:a3:1e:a6:2e:
60:ce:07:d6:6c:a7:4d:e0:71:9f:aa:99:7d:64:a5:
f1:cc:f9:9d:57:1a:ee:02:7f:16:07:78:d7:4a:5a:
24:c5:e8:9c:1d:2c:04:1a:2b:e2:63:f0:06:0b:67:
92:9e:93:ad:7c:88:bb:69:c6:5a:a6:1f:d4:fc:db:
10:d6:d2:32:3f:d7:b1:cb:ef:46:ba:ca:18:eb:86:
79:28:76:7d:5f:35:82:3a:56:56:78:62:f0:a0:2a:
c3:c5:6b:7c:95:f9:55:e4:ab:6e:1f:de:fe:2c:2b:
50:ae:5a:30:cc:75:b5:e8:ae:12:45:df:08:fd:57:
bd:de:20:86:9e:23:a1:41:80:64:d5:ef:6f:72:4b:
ed:f6:d6:44:65:56:cb:f0:61:d9:e9:03:13:82:87:
ee:f1:2d:f5:5b:21:1c:2b:ad:17:6a:78:bd:02:22:
42:38:7e:56:13:be:28:2c:62:dd:f1:30:03:6a:81:
c7:91:12:36:35:f5:1e:c3:62:f2:4b:f0:e3:f7:ab:
1f:64:ec:ca:e3:96:59:35:0f:75:f0:bb:4e:4c:61:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F1:3B:F4:AF:8D:4F:A6:6E:6A:B6:4B:A0:20:03:9B:32:36:55:59
X509v3 Authority Key Identifier:
keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:0b:01:ef:1d:b3:75:02:83:47:be:c9:de:82:89:72:eb:
55:ad:d5:fe:67:7b:62:bc:04:29:e8:ff:66:fb:98:c8:f7:80:
db:dc:0c:5e:d5:e8:51:27:97:4f:99:a4:99:72:b1:37:80:93:
40:41:df:e7:ab:0d:d6:47:02:f6:92:fe:e7:32:8b:25:6a:a4:
27:4a:18:0c:8c:cb:49:b8:81:a6:43:26:85:db:fa:10:4b:c1:
4e:16:44:a0:bc:ce:4e:52:f7:d4:2b:7f:3d:c7:50:79:58:8d:
5c:65:26:c2:b6:ee:f7:41:3a:72:4c:07:b5:ba:40:c3:b2:75:
b7:78:63:d2:9f:01:99:2e:36:74:65:b3:17:1a:e3:d3:1f:e0:
c7:43:33:d1:54:16:f7:aa:7b:63:26:a7:bc:38:78:9e:ff:32:
0e:2e:5f:7c:ad:1e:5a:96:96:96:41:56:c0:c8:7f:25:bf:84:
47:c2:d0:71:36:0e:9f:db:49:dd:3a:0e:ba:d5:29:22:62:9a:
9a:55:b0:7e:ca:be:64:c2:a7:13:10:57:8e:7e:a2:fe:1b:4f:
ca:1b:c6:95:d5:f5:c1:9e:24:58:09:64:ce:43:25:fb:73:ef:
ba:1e:24:73:a4:3f:a3:00:7e:6a:3c:75:d8:98:a3:b2:5a:3e:
f0:9d:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:19:10 2026 by rpki-client