
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: BOgNd3lunZme4nz6TnEBVvJbgiCg4/HKMQV2bVdMi+4=
Subject key identifier: 4D:0C:C0:F4:15:4C:1C:BB:B5:8B:FA:AB:ED:9E:84:F2:5C:4A:00:2D
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 019EC25C4AD277D1326CB747B28064759694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 19:01:28 +0000
Manifest this update: Sat 13 Jun 2026 19:01:28 +0000
Manifest next update: Sun 14 Jun 2026 19:01:28 +0000
Files and hashes: 1: 1j-cndh73up45TjcJHDMi8wQ8Xc.roa (hash: KpN3w6f7/yCpGmCh1vdlXsD6GVlxoKm9AQfV9ZcUMXk=)
2: 44Nps6a4A0iJ-S5FNbgCYPVDl-g.roa (hash: +egeaF2cFoduaGGr7Icg4ElpBQ+dGnmrC99v7y4WFaA=)
3: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: DvOUCVFTnbUrMiyQg9g7fL6uRyrWzbcE8IWJ7J73bVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:4a:d2:77:d1:32:6c:b7:47:b2:80:64:75:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Jun 13 19:01:28 2026 GMT
Not After : Jun 14 19:01:28 2026 GMT
Subject: CN=4d0cc0f4154c1cbbb58bfaabed9e84f25c4a002d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:6b:d3:f3:b6:a1:62:09:48:a2:b8:1f:b3:
e3:d6:d8:dd:b5:c1:cb:5d:d8:57:07:c7:80:ca:17:
cc:81:8f:ab:57:b8:0e:7d:d4:19:ae:3c:8a:58:69:
f3:ee:97:f4:75:48:1e:f4:6d:b8:4d:c8:b1:fb:bc:
9a:cf:cc:45:32:45:3a:8f:50:a3:17:c9:e3:35:69:
05:20:94:89:1a:ff:1e:b9:1e:90:10:ec:e4:c6:2a:
e7:fb:6d:83:65:c8:93:0a:4c:2b:01:f1:de:23:12:
de:a9:87:26:48:d2:98:0a:62:c0:58:1e:1d:84:1a:
09:25:3b:27:e9:d9:a6:18:5a:64:7e:dd:33:c0:cb:
d7:6b:56:79:0e:2f:f2:30:d6:1b:59:bc:ad:58:3a:
6b:08:87:fb:dd:90:fe:a2:99:df:15:9f:be:d6:2d:
11:37:84:88:f4:a6:34:6b:fe:8a:2e:5d:de:e6:aa:
40:bf:0c:4f:6a:50:7d:88:a8:8f:a1:33:14:ae:c0:
86:ce:7e:78:e7:1c:28:a0:94:34:d4:aa:00:84:b2:
00:17:31:66:6b:8b:e3:71:98:3a:50:44:dc:87:91:
c1:c1:ff:12:4e:21:95:1b:e0:cb:af:63:c0:ef:52:
e3:c3:03:e4:ed:62:dd:86:f3:30:d5:b2:c0:bd:b5:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0C:C0:F4:15:4C:1C:BB:B5:8B:FA:AB:ED:9E:84:F2:5C:4A:00:2D
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:77:74:6d:b3:c1:41:a1:94:74:7f:8f:a7:99:64:a3:19:34:
f4:a3:ef:9a:69:9a:b6:7d:fb:2a:ba:c0:3d:65:25:7c:1c:00:
d3:20:27:25:34:ab:e7:67:52:f6:2a:92:b4:9d:1e:0a:1d:7b:
91:1f:4d:be:e7:19:a2:c2:4c:f5:c5:2e:50:ba:2f:15:04:51:
fc:5f:35:6e:56:d7:da:76:a4:b4:50:08:f9:f0:a5:ba:38:a8:
d3:f4:02:df:d2:1d:88:1f:e7:61:03:7c:ac:39:4a:cf:f2:89:
c1:19:4d:8e:49:36:7e:65:64:e2:3a:86:b2:56:63:e6:06:16:
fa:cd:d7:98:e6:b2:f5:75:f8:b6:08:36:26:f9:db:b7:28:18:
e6:3b:a9:ba:3a:10:d8:27:44:38:59:96:22:2f:28:36:49:d7:
19:9b:82:ea:5b:f5:62:67:58:99:5d:d3:6e:7f:7b:6c:38:6f:
60:45:86:55:c1:0c:2e:f2:7c:22:f2:f8:15:43:21:cc:4b:f0:
9b:8a:b7:c2:85:e2:9b:6a:18:f5:aa:5f:79:34:2c:ed:7b:76:
4a:b4:67:71:96:ab:3d:15:6c:0b:02:b0:95:df:81:41:34:b2:
09:94:4c:82:d0:00:9f:93:ca:2c:0b:21:69:9d:73:64:e2:8d:
5d:45:54:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:29:49 2026 by rpki-client