Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier: ZloeGW6uLLM2o03Xl3qpqOFIfuh4XixVDzE/Qlj00Ok=
Subject key identifier: 00:3F:06:2D:EA:03:DA:05:69:9D:5E:8C:9E:65:09:F4:95:B0:8B:70
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019CACB4AD0FFBAB0EDADAFB2A038850F1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number: 0138
Signing time: Mon 02 Mar 2026 04:00:47 +0000
Manifest this update: Mon 02 Mar 2026 04:00:47 +0000
Manifest next update: Tue 03 Mar 2026 04:00:47 +0000
Files and hashes: 1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
2: 1-Ltnis49LppJocd3k7gXrTQpkNg.roa (hash: fES976vUY7+JDOXisLep1HRMnouImf0rWbzUHBGyogQ=)
3: 14-ez02X85NdajMvzg3IYi1oPCo.roa (hash: wzz4sLOh3cyvyhQETYo7rxnHXTtGKJT0PTO0xorH6fM=)
4: 76vjA2IlaboVNhH8pUnwsKx3NRU.roa (hash: cNha0ihSmE73G6B3/ZW+DiUSd5SSspIg7GwLsGosYGc=)
5: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: J1zq6ETQhYOuHAlVTWVgKf1IOuwh8VSR3R8pNtLbQwQ=)
6: XsEQKonOzbCyg0bNofQH8qCMzZA.roa (hash: p1b9onbhDojIhV4i6qsyMbA1TavVpRDn1jJ1eW/nzGc=)
7: qBAd6yQPjLXAKJuuP_CdFngQD2M.roa (hash: /ofdK5/jkhAtRoiOLNcbcKncV7/sR7sjaCafbChgexw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ad:0f:fb:ab:0e:da:da:fb:2a:03:88:50:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Mar 2 04:00:47 2026 GMT
Not After : Mar 3 04:00:47 2026 GMT
Subject: CN=003f062dea03da05699d5e8c9e6509f495b08b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:ab:2a:2c:28:5a:6d:df:a8:4a:d4:34:5a:
73:8b:95:a5:ae:42:4c:c8:7b:f9:a9:91:dc:2f:16:
74:23:93:82:d0:b8:d6:b2:1a:55:f4:5e:55:47:82:
90:03:69:6e:c4:f9:61:d5:55:7a:56:8b:ac:63:3c:
4d:7d:0b:4a:0a:91:be:bc:26:03:0c:22:2d:71:ab:
99:d9:e7:85:68:e2:07:62:30:eb:c4:e3:9f:99:47:
ef:53:3a:a4:39:75:7a:6d:a3:92:d3:bd:70:4b:ba:
c1:3d:7e:8b:25:17:38:6a:08:5b:93:62:0d:ce:4e:
49:76:f7:8e:6b:fa:40:40:51:1b:52:2a:c1:46:6b:
09:94:30:ff:e9:5a:16:f0:e6:b0:b8:78:3b:dc:cb:
ac:8c:d3:eb:fe:83:e9:9f:95:97:31:cf:24:7b:c1:
87:a0:9b:41:48:c6:9d:cd:3a:1e:6b:4d:13:94:cd:
57:55:40:ac:df:4d:66:78:0c:1d:53:c4:3f:1e:91:
bc:1f:36:29:e9:ae:72:d3:de:63:1d:1d:14:1b:58:
28:08:fa:f3:1e:ee:31:17:35:a9:e9:7c:42:e3:70:
83:7b:8b:66:93:dc:4a:21:71:f4:f1:49:12:c7:70:
8d:32:46:da:84:a4:7e:be:49:17:28:15:84:e1:31:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3F:06:2D:EA:03:DA:05:69:9D:5E:8C:9E:65:09:F4:95:B0:8B:70
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:79:8f:fd:02:7b:63:e7:21:15:37:32:6e:e8:ec:08:26:be:
73:8c:52:e3:ee:72:41:d0:ff:5d:fd:5c:b3:93:be:ac:db:57:
2b:18:c3:2b:bf:4d:79:a4:1d:a6:69:94:7d:1d:cd:db:df:28:
85:24:48:3d:6d:1e:0f:e7:bc:6b:89:33:8e:ba:9b:83:8b:00:
b0:61:cb:ed:6d:b6:1b:a6:5d:55:99:fc:1f:1a:54:b7:19:8a:
b9:e0:00:3e:e9:6d:cc:91:8f:ef:fd:07:36:93:65:d1:02:0d:
67:d6:24:cd:c1:7f:ec:91:85:73:63:eb:4d:33:d0:52:a8:93:
eb:a0:fc:dc:e3:5f:1a:fd:25:56:7a:81:ec:27:43:02:63:2b:
87:0e:ec:40:5d:5f:7d:3b:04:04:a7:52:89:64:4b:00:e3:0f:
56:b0:57:08:f0:84:72:ba:dc:68:08:0e:86:0b:68:1f:5e:15:
60:2b:5a:c2:3d:88:08:29:d3:df:5d:21:bc:2b:5a:d6:73:c8:
ab:b3:9b:e0:3d:34:4c:db:10:8b:38:e5:03:4c:49:0d:e2:81:
40:70:15:2b:fa:f6:8d:18:2e:5e:34:0d:b8:00:b6:b4:61:6e:
c0:a4:c0:f2:b0:2c:44:98:2e:72:2f:35:75:89:75:42:2b:4d:
7a:e5:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:49 2026 by rpki-client