Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
File: S5nNYSQguFk0kdhobOTEr4W5CtU.mft (raw, json)
Hash identifier: 73EVvNbMlNSuLlYwt3oGGKPjB+Zlif4JYBRJg2IWbX4=
Subject key identifier: 4D:D0:F8:D9:6A:C0:B0:F3:43:6E:89:04:06:92:26:92:A1:7F:E2:BB
Authority key identifier: 4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
Certificate issuer: /CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Certificate serial: 019D9C9A5B709B60241ECDFFE140020A82E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
Manifest number: 02F4
Signing time: Fri 17 Apr 2026 18:00:54 +0000
Manifest this update: Fri 17 Apr 2026 18:00:54 +0000
Manifest next update: Sat 18 Apr 2026 18:00:54 +0000
Files and hashes: 1: 8DpSJKviZ7cSTOBb1JPdqUAWjZI.roa (hash: KJ3gvkRDPvd6FYiFgYbSLnhGd4p7f+DOyl+s6ewmo1Y=)
2: NDIauRSXxmTRxMaMxKWAcWs2hiY.roa (hash: niReydPhxoIGyEf8VzGlx6ngoJ93K3AzsN+453eTTKQ=)
3: S5nNYSQguFk0kdhobOTEr4W5CtU.crl (hash: fKnDJwFznYM58L4PCEmaoqpwDWHzjpR9PyyKa29W4k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:5b:70:9b:60:24:1e:cd:ff:e1:40:02:0a:82:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Validity
Not Before: Apr 17 18:00:54 2026 GMT
Not After : Apr 18 18:00:54 2026 GMT
Subject: CN=4dd0f8d96ac0b0f3436e890406922692a17fe2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:66:61:a3:61:c5:e5:f6:36:36:70:1f:99:
b3:11:59:c0:73:4a:04:9c:50:7d:0e:1b:ae:e9:7d:
15:40:3a:f8:ba:c3:c9:61:7d:ea:99:e2:91:63:30:
6c:b2:a7:ab:33:2d:e2:73:61:69:70:fa:23:1b:e9:
7e:24:4a:fa:e8:1e:75:cb:67:0b:90:1d:2a:fb:33:
2c:c4:41:9b:28:94:98:9a:ed:d2:83:4a:6b:dd:57:
b5:0a:ef:02:f4:8d:71:29:cd:ff:da:b9:9e:b0:9d:
d1:c0:fb:61:7b:82:b8:a2:b3:a5:6d:81:e3:88:24:
03:83:6a:f3:0c:a7:d2:5f:d5:61:3d:e3:23:09:69:
99:f6:85:46:7c:ae:a0:a4:4f:2d:20:56:d9:88:be:
90:f7:de:24:09:60:52:13:28:3d:9d:3d:98:50:cd:
db:86:28:6c:df:15:0b:75:f1:4a:d5:a1:8d:28:8e:
72:14:f1:bc:82:2c:35:00:d1:03:4a:b3:d0:06:16:
c3:89:5d:e5:4b:9f:e2:24:80:04:a0:85:6c:44:3e:
57:53:b3:af:a3:3a:c3:85:53:67:7d:42:49:d9:74:
42:87:de:4d:31:f7:98:88:9e:21:a3:50:4b:69:c5:
5f:0c:8c:7a:1c:95:16:92:95:e8:34:31:73:99:4e:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:F8:D9:6A:C0:B0:F3:43:6E:89:04:06:92:26:92:A1:7F:E2:BB
X509v3 Authority Key Identifier:
keyid:4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:72:b2:90:41:c8:2a:f6:9f:e6:b8:b0:6c:2b:18:2b:98:7c:
22:5e:98:cc:c6:f4:79:5f:e1:d7:73:ca:cd:ae:d2:18:6c:89:
0e:dc:fa:12:2d:aa:bf:e2:53:e1:7c:17:f0:61:b8:31:4b:ce:
3b:9c:c1:89:a3:9f:49:16:0a:9c:10:be:5f:a9:4b:fe:9c:9b:
95:0f:9e:8c:84:a7:fc:78:af:eb:9d:6c:e6:64:a0:02:bf:f7:
c6:66:c4:c6:46:d2:7d:a6:c6:fa:16:75:b9:bd:fe:1b:cd:59:
20:e7:fb:3b:a4:47:dd:9c:e8:38:cf:75:ea:f9:a1:3b:c3:ca:
3e:88:60:89:b8:5b:6c:d8:e6:e2:08:d2:59:2e:cd:aa:e8:1c:
75:f4:57:34:76:3a:6b:da:ea:9f:fd:fa:44:34:bb:c1:3c:39:
e5:81:de:c4:e8:76:8e:22:48:82:67:20:91:69:dc:41:a8:ea:
66:73:19:4a:bd:c2:ee:9c:1a:47:ff:8f:2a:d5:0c:5f:ab:1d:
fe:1d:85:f7:a0:29:be:d5:66:bb:03:6e:6d:75:24:02:41:82:
23:c8:9f:f3:4c:3f:83:35:76:f6:d7:60:7b:2a:ff:f5:91:67:
5c:30:38:5a:80:12:86:0c:6e:52:d5:b5:d2:ae:71:6c:29:a3:
90:83:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:07 2026 by rpki-client