Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: E1jErUuEbBcTy+lI283ySAml+3sWUwm6UCEwG+EC7Os=
Subject key identifier: 34:02:19:AA:3E:1C:B2:2F:AD:72:B3:8F:CE:C7:FD:38:01:6F:72:10
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 019CA97C8A70A330E6FC18A66A453413B68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 13:00:37 +0000
Manifest this update: Sun 01 Mar 2026 13:00:37 +0000
Manifest next update: Mon 02 Mar 2026 13:00:37 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: xF8i/YS8Q/yac7+WNMLSVQK34UIlg0rxF1HnP9Bd2pA=)
2: oVwWnlXDmkKEJPwq_QTywUic6pg.asa (hash: vXDqor38fMbrJg0yNnP/TrAYe/tgp8ecmN/4akEFjw0=)
3: rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa (hash: RRythu0hdE7VczlwlFEUnLZKoxWCSbWPkOFFbdjDuKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:8a:70:a3:30:e6:fc:18:a6:6a:45:34:13:b6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Mar 1 13:00:37 2026 GMT
Not After : Mar 2 13:00:37 2026 GMT
Subject: CN=340219aa3e1cb22fad72b38fcec7fd38016f7210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:d5:bb:76:8d:91:42:e3:f4:ef:48:21:f4:
70:52:04:63:1f:42:77:f4:b4:df:4c:93:df:63:a8:
f5:1b:8e:7e:b8:f8:47:de:08:06:48:85:31:a9:61:
75:9f:a1:20:66:06:19:fd:4b:92:b1:31:e4:17:de:
df:33:0b:29:27:a6:73:1a:81:89:0f:2e:7d:ab:ef:
98:f5:47:46:aa:a6:27:7f:70:aa:38:6d:31:29:57:
79:6b:b7:1e:f1:b7:59:ac:7f:30:a6:5a:82:43:e7:
f8:12:92:43:84:c5:40:80:da:7f:2a:30:fb:2b:36:
ba:79:e3:70:6f:74:52:ac:f9:71:38:79:6d:bd:df:
60:e4:d1:97:89:44:c9:54:85:99:63:1a:3d:d2:b5:
c5:cb:36:bb:a1:6a:6a:d5:72:f3:66:7a:f5:6a:3b:
aa:06:9f:12:e2:4f:03:28:ac:b3:a7:c0:93:12:df:
e5:00:de:48:0d:81:8f:cd:bb:c4:b6:b3:09:6a:a5:
20:11:85:d0:4f:7c:e8:71:e1:bf:ae:e0:47:4a:41:
d7:75:33:bb:6c:18:aa:04:41:25:66:58:c8:d7:0d:
c4:7d:95:e0:5a:f4:d9:a0:96:aa:3d:de:e0:a1:ae:
62:2e:ec:24:04:11:c5:d6:20:ff:10:cc:7f:51:8c:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:02:19:AA:3E:1C:B2:2F:AD:72:B3:8F:CE:C7:FD:38:01:6F:72:10
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4f:9f:8a:86:79:e7:9f:9d:3b:20:29:b0:93:5f:66:aa:62:
98:a0:37:77:dc:a6:12:6e:ce:e0:ef:b3:8e:79:45:9e:43:86:
8a:79:01:f8:21:dd:b3:06:ca:ee:33:01:e0:30:ea:5c:e5:b9:
12:5d:3f:a6:ee:a1:7b:2b:5e:eb:cb:48:08:b6:d9:3c:bb:a2:
d7:63:eb:c6:de:19:27:7f:20:02:95:74:1f:6c:d5:74:d9:54:
aa:b0:32:59:77:2a:c0:68:fc:65:6c:69:35:23:5f:e4:20:28:
5b:1f:b3:43:2f:e4:d9:10:34:97:15:53:29:0e:29:72:eb:bb:
a5:0d:3c:59:4e:8f:c2:c3:48:08:2a:6c:67:80:f3:f9:5a:17:
79:c8:39:b6:7b:a5:09:36:a5:4c:09:ae:ee:b1:1b:6a:63:21:
53:d9:93:5b:14:1b:c8:26:53:1f:ba:33:92:58:c1:38:c6:56:
b9:11:ca:3c:86:95:9c:37:9d:5b:cf:dc:36:47:b7:18:9e:a6:
45:43:d6:10:18:0a:cb:e1:cf:0f:70:69:1a:82:97:f4:f1:69:
1d:f3:16:4e:13:d2:bc:4c:41:14:cf:ac:88:fb:60:c1:2a:34:
28:6d:a3:61:d0:ac:fd:1d:57:84:5e:2d:76:ee:42:be:92:e0:
75:6a:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:37:41 2026 by rpki-client