Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
File: S5nNYSQguFk0kdhobOTEr4W5CtU.mft (raw, json)
Hash identifier: Gnoufff0xFK8aLjUPMNeWDPvnYtu06wFz2a2EyzcCgg=
Subject key identifier: 88:E8:98:9A:92:B8:FB:4E:F0:70:17:99:3E:81:5D:6F:E9:31:D9:3E
Authority key identifier: 4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
Certificate issuer: /CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Certificate serial: 019CAF10F09C9CA60031C5A0C0280F735265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
Manifest number: 0279
Signing time: Mon 02 Mar 2026 15:00:48 +0000
Manifest this update: Mon 02 Mar 2026 15:00:48 +0000
Manifest next update: Tue 03 Mar 2026 15:00:48 +0000
Files and hashes: 1: 8DpSJKviZ7cSTOBb1JPdqUAWjZI.roa (hash: KJ3gvkRDPvd6FYiFgYbSLnhGd4p7f+DOyl+s6ewmo1Y=)
2: NDIauRSXxmTRxMaMxKWAcWs2hiY.roa (hash: niReydPhxoIGyEf8VzGlx6ngoJ93K3AzsN+453eTTKQ=)
3: S5nNYSQguFk0kdhobOTEr4W5CtU.crl (hash: 9Bo5O9qnmnBPPOLVKmxqPSFGe8N7vqzmtxBvrNouffI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:f0:9c:9c:a6:00:31:c5:a0:c0:28:0f:73:52:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Validity
Not Before: Mar 2 15:00:48 2026 GMT
Not After : Mar 3 15:00:48 2026 GMT
Subject: CN=88e8989a92b8fb4ef07017993e815d6fe931d93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e2:db:27:b4:9e:26:04:c2:dd:e8:72:52:b6:
8a:3c:44:4b:ec:92:1c:25:c4:7e:18:bb:f8:f9:a8:
6d:de:50:94:0b:5e:2e:bf:eb:af:dc:96:2d:80:01:
f9:92:1f:83:de:05:5e:4e:a7:92:db:76:0b:d1:9d:
57:b4:8d:54:6a:7a:f5:ab:c1:c6:fd:22:df:aa:03:
9f:8d:c0:2a:7a:46:41:68:5e:ad:2b:ac:2a:26:a2:
b6:78:29:fe:da:bd:f2:a5:57:6c:aa:28:09:12:34:
3e:ba:b2:aa:3c:46:69:0e:ff:52:c2:d6:0f:b8:37:
a9:7a:65:31:93:0e:e5:25:9a:b5:ef:5f:23:28:7a:
e8:b7:b5:80:08:75:e2:9e:fa:94:17:7f:31:83:6f:
6e:38:20:e5:72:2b:49:f8:dc:ed:90:31:3c:1c:29:
c8:71:40:20:62:f0:52:e2:dc:1b:82:c5:0d:0d:cb:
1c:35:8b:05:77:42:de:12:47:45:01:6c:d8:ae:81:
7f:1a:4b:69:81:26:28:8b:05:91:12:b5:91:9e:9b:
07:80:a0:a5:50:61:84:4b:71:7c:8d:0e:32:29:93:
8f:23:90:7c:96:d3:b4:25:8f:70:18:f0:a5:ab:c3:
3a:ca:49:df:f5:e3:72:ff:c3:fb:66:c6:df:ab:f4:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:98:9A:92:B8:FB:4E:F0:70:17:99:3E:81:5D:6F:E9:31:D9:3E
X509v3 Authority Key Identifier:
keyid:4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6e:7c:1f:15:b2:c8:7c:8e:14:83:b0:f8:ed:c6:14:50:c6:
39:ac:04:8e:e1:bf:8a:0a:02:0d:ed:68:34:d7:78:5e:4d:a8:
33:af:30:cf:c7:ac:43:01:29:33:56:50:26:7f:b5:9d:3a:06:
2c:65:77:6c:c0:5f:17:e8:0f:4d:5c:80:bc:02:af:f9:72:04:
61:d0:a9:f2:8e:c9:f0:06:ec:c1:c0:e5:82:3d:b8:2a:10:c9:
17:6a:b9:c8:db:63:4d:8a:ec:32:fd:f4:97:28:a6:5c:3e:64:
52:aa:c8:46:36:8c:03:56:7d:5d:61:a4:41:74:1d:6d:46:22:
08:59:c1:94:fa:14:90:25:0d:ae:4e:ce:5f:62:d0:29:4c:99:
9b:0d:46:97:b7:15:0d:b5:ab:86:0c:b0:c0:05:02:9e:63:1c:
84:7b:ac:d9:8c:5e:d7:6d:fb:3c:20:fd:d3:17:99:e3:e3:5c:
72:c6:02:65:3d:48:74:19:bc:14:98:4e:ac:6f:03:2b:8b:23:
74:8c:ae:67:61:25:84:3c:3b:22:68:63:f7:0d:7d:a8:2a:5e:
1b:19:83:7e:d2:f4:ff:ad:c5:db:3a:14:0f:e5:97:cf:de:49:
a8:42:d2:aa:d4:f4:26:a1:ab:e9:31:b2:4e:04:84:f1:87:b9:
a9:94:70:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:56 2026 by rpki-client