Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier: 2IfE2u36JVzpQtmjBv/94IYDsK/boa0g3//XvQgcAms=
Subject key identifier: 25:34:88:B1:18:3A:BB:2A:C0:7A:74:C6:31:59:5A:1B:AC:E5:91:C6
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019EC413327D4144F071FD418B94FF9BA1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number: 0258
Signing time: Sun 14 Jun 2026 03:00:52 +0000
Manifest this update: Sun 14 Jun 2026 03:00:52 +0000
Manifest next update: Mon 15 Jun 2026 03:00:52 +0000
Files and hashes: 1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
2: 1-IsyXimgStm6iFdQzOtOH_LpB-w.roa (hash: cwbLRv/LdraPm/ncl7j6i/Fdy+jmyYNWU7iKuNjynNk=)
3: 1-Ltnis49LppJocd3k7gXrTQpkNg.roa (hash: fES976vUY7+JDOXisLep1HRMnouImf0rWbzUHBGyogQ=)
4: 2Za9dVMumbJLSFClL77aVj2ULF0.roa (hash: qlmsqbUXglSigqm8nRIHNKmW1s8wDeCWA2RRZbXlpQg=)
5: Qa8jr4r9oUMQqXWjabdDfQ7gmpU.roa (hash: THpSlkIZjg5gNVTxY4YREvnaBYJcv0jhBmfGA2+voJQ=)
6: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: 9T0Vk9n8auFDE1WZH9DyronOfJBiSCehMaXdYfpxdgQ=)
7: WwtbUDEcYKOBmbiB4ccytduAdws.roa (hash: 1KKu453lPDcs/h9S9JRacXBXWjGi0AAYJKEx+9blrYA=)
8: lh9y2z8BjPboXQB7En0Art145ss.roa (hash: WeVrGCLtXYuvgZeAFcelbJV4mJDRhqOFt2yLKIQQeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:13:32:7d:41:44:f0:71:fd:41:8b:94:ff:9b:a1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Jun 14 03:00:52 2026 GMT
Not After : Jun 15 03:00:52 2026 GMT
Subject: CN=253488b1183abb2ac07a74c631595a1bace591c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:84:e5:2a:4a:bf:7c:7c:4f:45:39:1c:a0:
72:1a:81:60:2d:f6:50:36:96:ea:7e:f5:5e:60:02:
96:17:d8:a3:60:20:8e:63:ed:f9:2b:4b:21:3a:8c:
a2:09:ba:99:a0:fb:0b:9b:45:48:f7:3b:8a:59:3f:
1f:7d:5b:59:f8:93:7f:ba:90:78:1c:50:44:43:1f:
8f:69:8b:27:56:20:0d:91:fa:d0:31:10:54:56:03:
64:8d:eb:e7:7b:a2:9c:b9:62:6a:ea:7c:44:dd:ad:
d7:86:79:aa:45:c4:09:b9:24:4c:5c:6a:c9:95:b0:
df:9f:11:d5:77:01:09:97:db:e1:50:06:9d:c5:5d:
23:99:93:a4:eb:37:13:3c:68:9f:17:29:79:38:c0:
f6:44:b0:33:a6:46:df:1b:05:13:01:15:99:2b:aa:
26:fe:d3:17:33:1e:37:d3:4b:f6:88:c7:d5:09:79:
74:42:dc:0e:87:cb:e1:05:e8:0e:78:8c:c8:fc:8e:
a6:cc:03:64:6b:8c:14:f5:7c:ab:9f:6b:57:3d:80:
17:d2:b3:02:f7:c0:b4:4e:ac:ac:7a:3f:98:48:21:
37:49:0f:5d:02:4d:52:ee:66:de:57:c1:74:52:a4:
bf:01:f4:04:4f:19:6d:74:4c:76:12:d3:b6:ae:f8:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:34:88:B1:18:3A:BB:2A:C0:7A:74:C6:31:59:5A:1B:AC:E5:91:C6
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c2:e2:72:f7:e4:88:f7:7e:64:33:d5:9f:80:44:14:e5:6e:
f2:82:26:81:ed:85:6c:e6:b0:1a:59:2a:23:db:c4:1d:52:aa:
23:f1:5e:7b:29:3f:15:75:3d:ec:db:be:45:17:6d:91:a8:10:
12:b1:c4:66:40:51:00:a0:f4:57:7a:9f:f5:76:6c:d1:92:78:
a9:16:77:fd:cb:8f:a2:22:ed:a0:5f:09:58:e7:46:7c:86:0b:
04:ac:5c:c3:f5:44:75:23:b9:eb:e5:3b:26:f1:09:86:37:1a:
bd:d1:fa:63:ed:a8:37:98:48:08:f7:d5:b7:61:63:dc:29:67:
59:cc:52:1e:3d:36:cb:16:76:b8:01:8f:d3:76:a2:8c:cb:95:
a2:6d:5b:2f:f6:ff:5d:74:2f:b9:1a:44:58:ba:60:0a:0f:fa:
27:b5:7d:87:e0:6f:4e:b4:c4:55:2e:a9:70:84:3f:10:b0:d4:
79:a0:c1:3b:ed:a1:6f:d2:65:1c:ea:b5:f7:d3:3d:c8:cc:52:
cc:14:e3:1d:9f:14:bc:67:5d:cc:50:89:7b:96:dd:dc:74:15:
6f:5e:5d:2d:a4:0c:39:78:15:97:46:d6:8d:f3:ef:39:0a:90:
de:64:4e:e8:76:4e:69:50:9a:ac:02:11:3b:a2:16:47:94:1b:
d3:15:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:34 2026 by rpki-client