Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: ReWuQJUGs0UY/FcVpdzYh2VQlVAr+ruNa7Mf9FB5fig=
Subject key identifier: 74:73:96:CF:AC:60:08:C5:46:77:49:6E:D0:63:E5:60:D2:55:6D:78
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 019CAB6BAF6DBFE5A5F112A1FD4F305FFD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: vdBajUj9XAtDetmoWEDmZgeGKurBk9xIPYC8FjE9LZA=)
2: gArRCC3q1YnlfTTgUixtQVGvcFs.roa (hash: narCCTYRY9LX6p6g8xSiiHiFz+JGuLFkwOfUQUNN3Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:af:6d:bf:e5:a5:f1:12:a1:fd:4f:30:5f:fd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=747396cfac6008c54677496ed063e560d2556d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:e1:15:19:26:a3:97:aa:66:66:bc:a3:5e:
9a:9e:61:0e:1a:b8:84:9a:5f:f1:6f:d3:ee:9f:b7:
05:86:c6:bd:03:34:14:c7:2d:13:50:9c:6d:0d:de:
eb:7a:32:7c:3e:31:7e:63:a8:5e:05:82:97:4c:63:
16:af:af:3a:f5:94:cc:7c:6d:7d:3d:d8:86:8f:19:
88:3b:98:2d:12:1c:ad:ea:32:1a:51:16:d2:e5:77:
df:5b:25:9a:f4:37:73:c3:a1:96:c0:1e:63:9f:40:
02:f7:f4:1d:d9:38:b0:b5:b9:3b:78:1b:0e:de:a2:
fe:85:4e:5c:3e:73:b8:5f:bc:7b:2a:d2:e7:25:9e:
23:7e:8b:2f:82:09:b2:3e:71:2b:d6:a3:23:f6:11:
9b:4a:3b:3c:08:fd:22:b4:eb:18:e2:80:52:d9:84:
55:e0:b3:43:e1:46:52:4a:37:24:23:bb:fd:69:b2:
cb:c9:26:fa:5c:f8:11:51:2f:77:88:ec:61:97:0c:
fd:bc:55:97:96:e3:ab:cd:37:02:87:30:61:6a:b2:
a6:3e:41:ea:3e:60:ca:11:58:58:3b:b6:55:0b:bb:
02:d4:ac:c5:d8:d6:33:75:32:0c:c4:fd:8c:1c:e0:
8c:1b:b5:b8:25:87:37:81:fc:9a:b8:bf:a0:1a:a8:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:73:96:CF:AC:60:08:C5:46:77:49:6E:D0:63:E5:60:D2:55:6D:78
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:09:39:8c:b9:0a:91:c0:73:3c:58:49:a8:63:b9:82:a6:fb:
a6:38:7a:96:30:0e:ac:13:82:eb:f5:2d:c5:f9:67:24:38:9c:
aa:36:99:b1:cc:18:da:22:65:e3:1a:7d:ea:a9:2e:2b:f2:8e:
39:b6:e2:f8:fb:c1:db:8d:8a:b1:8b:aa:e5:ca:c1:b6:88:69:
1f:ae:97:cf:16:e7:70:2d:64:19:48:b2:49:a6:47:de:72:c1:
e9:86:d5:fc:ec:09:6c:11:6c:8f:44:04:14:fb:81:23:87:4a:
26:55:1f:e2:1d:eb:e6:3c:40:c1:4e:de:12:15:18:d9:b0:0f:
40:d8:91:16:48:28:44:e5:81:16:7e:25:ad:c9:f2:65:b4:2b:
f1:9e:2d:14:7d:69:4f:03:b2:2a:10:87:8d:16:be:61:7a:5e:
0f:20:fc:56:05:2d:e4:88:03:31:76:13:97:4e:01:cc:57:b3:
ae:3d:91:5c:f9:69:e7:42:41:16:88:ab:f8:f6:c2:34:27:1f:
eb:0b:32:dd:79:8e:be:8b:dc:7d:d0:3f:fa:79:55:da:bd:12:
ee:1a:d5:6d:c5:fd:e0:2b:b3:ef:82:84:14:ba:69:0b:e7:b3:
7c:a1:5c:db:7d:53:d0:0d:30:f2:d0:2f:96:4e:0d:31:3b:d2:
50:97:38:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:46 2026 by rpki-client