Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
File: S5nNYSQguFk0kdhobOTEr4W5CtU.mft (raw, json)
Hash identifier: rrgbGA8m9zCOkSy+F23rN8HlNxgDC24SBKgCUijE+2Q=
Subject key identifier: 6C:7E:43:C3:E6:E8:C0:E2:B2:12:FC:F2:A4:96:20:8B:8B:1C:A5:78
Authority key identifier: 4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
Certificate issuer: /CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Certificate serial: 019EC412EB84451C578C7BED18EBE4DE1896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
Manifest number: 038D
Signing time: Sun 14 Jun 2026 03:00:34 +0000
Manifest this update: Sun 14 Jun 2026 03:00:34 +0000
Manifest next update: Mon 15 Jun 2026 03:00:34 +0000
Files and hashes: 1: 8DpSJKviZ7cSTOBb1JPdqUAWjZI.roa (hash: KJ3gvkRDPvd6FYiFgYbSLnhGd4p7f+DOyl+s6ewmo1Y=)
2: NDIauRSXxmTRxMaMxKWAcWs2hiY.roa (hash: niReydPhxoIGyEf8VzGlx6ngoJ93K3AzsN+453eTTKQ=)
3: S5nNYSQguFk0kdhobOTEr4W5CtU.crl (hash: DyU/sFPH6QCvvzBpzEbIyla/Se9byLIEQK4QPAq/T+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:12:eb:84:45:1c:57:8c:7b:ed:18:eb:e4:de:18:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Validity
Not Before: Jun 14 03:00:34 2026 GMT
Not After : Jun 15 03:00:34 2026 GMT
Subject: CN=6c7e43c3e6e8c0e2b212fcf2a496208b8b1ca578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:51:d1:e3:7b:2e:b9:ea:ae:36:fb:ac:29:
c3:ae:15:1c:15:f1:ab:55:38:51:22:bc:77:02:65:
c5:af:f0:70:31:27:d0:33:36:4d:66:27:16:05:ab:
b9:f1:6f:5f:59:88:cf:1d:8d:51:9e:bb:30:14:8f:
9a:49:87:fd:3e:c5:dd:49:db:4f:d1:c7:64:89:f1:
83:82:f0:2d:1c:c0:af:a2:fe:09:5b:a8:dc:9a:a0:
36:23:1c:30:bb:26:5a:d8:86:b5:5e:2d:e9:68:2c:
ec:ba:fe:c4:bf:af:83:0c:e2:7e:bf:98:15:ea:25:
00:7e:53:04:f5:53:f7:1e:7a:eb:46:2d:ae:2a:28:
87:aa:20:7b:e1:4f:f3:4e:0d:b0:6f:eb:ca:08:e9:
9f:a0:9f:38:15:85:05:98:d5:27:d3:dd:4f:27:d0:
1a:ec:ba:8e:9d:e4:82:8b:8f:99:14:91:9a:aa:b9:
21:ce:82:39:01:5d:8c:18:60:b0:80:f6:bc:20:57:
ea:b2:41:91:47:f2:26:b0:50:67:b1:dc:9b:42:86:
c5:0f:5f:0f:f6:ac:2e:4f:68:f3:ce:1b:48:3e:aa:
4b:16:2e:1f:0a:ac:92:85:62:37:82:8a:29:4d:21:
8c:eb:90:e0:dd:bd:72:28:53:84:03:ed:71:b4:65:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7E:43:C3:E6:E8:C0:E2:B2:12:FC:F2:A4:96:20:8B:8B:1C:A5:78
X509v3 Authority Key Identifier:
keyid:4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a3:dd:fa:44:f2:51:40:3f:ea:3e:4c:15:c3:dd:27:41:76:
fd:d6:82:a1:4e:91:56:69:b8:83:21:0a:c8:6a:86:be:1b:ee:
9c:55:ae:14:ce:5b:5b:35:6d:15:77:87:84:b2:da:b0:ea:c5:
7c:bf:2f:33:d2:da:91:57:9b:87:7c:5e:5e:f0:39:99:eb:c1:
86:ea:91:8b:b3:d3:82:11:5a:93:3f:ca:04:3c:b6:a9:2e:56:
12:0e:bd:c4:ff:48:7e:93:c8:2c:53:4b:9c:df:70:cb:2d:a8:
23:1c:13:56:f2:18:8a:fd:bc:fb:5c:7c:ab:4c:9b:b7:50:81:
73:7f:d4:f3:81:eb:0d:07:cb:e5:f8:01:89:d0:a5:a3:03:5e:
d6:85:22:dc:52:b9:74:04:36:90:f2:6d:ad:53:7b:d9:cc:5d:
29:f5:b3:9c:ac:a9:06:ee:67:94:4e:e3:57:b1:42:06:87:55:
38:ba:f4:95:c5:27:81:1e:3f:9c:48:f0:38:d1:3e:c7:94:a8:
f2:b3:52:1e:09:cc:13:8d:f3:e5:bf:4b:07:77:82:5d:1b:e5:
ea:3f:a2:93:26:40:a2:7d:0e:98:1b:27:eb:18:c2:dd:3a:9c:
16:a4:b5:ba:38:48:2c:6d:fa:34:49:9a:bc:56:95:7e:1b:81:
e1:33:a5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:38:05 2026 by rpki-client