Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier: H80XeCOwpLA8248gJTAUGAFhEfzOCouE4QROrowqEJ8=
Subject key identifier: A8:0F:AC:A1:26:54:BE:ED:27:93:2E:37:CE:75:F4:B0:46:2F:46:52
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019D9C99E15143F800022CC92BA9F73E093A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number: 01BF
Signing time: Fri 17 Apr 2026 18:00:23 +0000
Manifest this update: Fri 17 Apr 2026 18:00:23 +0000
Manifest next update: Sat 18 Apr 2026 18:00:23 +0000
Files and hashes: 1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
2: 1-IsyXimgStm6iFdQzOtOH_LpB-w.roa (hash: cwbLRv/LdraPm/ncl7j6i/Fdy+jmyYNWU7iKuNjynNk=)
3: 1-Ltnis49LppJocd3k7gXrTQpkNg.roa (hash: fES976vUY7+JDOXisLep1HRMnouImf0rWbzUHBGyogQ=)
4: 2Za9dVMumbJLSFClL77aVj2ULF0.roa (hash: qlmsqbUXglSigqm8nRIHNKmW1s8wDeCWA2RRZbXlpQg=)
5: Qa8jr4r9oUMQqXWjabdDfQ7gmpU.roa (hash: THpSlkIZjg5gNVTxY4YREvnaBYJcv0jhBmfGA2+voJQ=)
6: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: 8jyNzHjhxFBSYZdiOlrvi3RxBRAof62uErkbMld86GU=)
7: WwtbUDEcYKOBmbiB4ccytduAdws.roa (hash: 1KKu453lPDcs/h9S9JRacXBXWjGi0AAYJKEx+9blrYA=)
8: lh9y2z8BjPboXQB7En0Art145ss.roa (hash: WeVrGCLtXYuvgZeAFcelbJV4mJDRhqOFt2yLKIQQeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:e1:51:43:f8:00:02:2c:c9:2b:a9:f7:3e:09:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Apr 17 18:00:23 2026 GMT
Not After : Apr 18 18:00:23 2026 GMT
Subject: CN=a80faca12654beed27932e37ce75f4b0462f4652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:ec:08:27:98:d9:e5:76:79:16:3b:65:e1:
9b:b4:23:38:0e:a4:5c:eb:3c:c3:98:af:a3:ef:24:
08:44:d4:64:b1:d0:7f:e9:e5:15:e5:ef:b5:71:33:
29:0a:ff:4f:d3:7e:74:6a:1b:24:52:03:92:f3:d4:
6a:a8:32:49:be:74:7d:f9:cf:9f:c2:ca:68:f3:8e:
f5:e8:34:20:51:be:5d:6f:0c:44:46:88:6a:b8:d1:
07:3b:de:80:4d:8d:0a:2b:6b:02:78:d3:8d:29:68:
29:b2:ee:1f:84:ff:96:80:ca:fe:9a:23:2b:f2:da:
a1:b5:d7:95:f1:68:6f:7f:71:3c:0f:de:89:0b:eb:
84:34:77:5a:4b:0a:4a:8a:58:96:60:91:1e:df:d8:
03:76:d2:39:fd:fa:33:a9:a6:24:77:15:c7:a1:75:
23:43:3a:48:14:c7:a8:4d:3d:f4:f9:0a:b5:18:92:
28:7b:d7:bf:91:fb:c6:a0:50:fd:05:8e:4f:db:50:
c6:6e:2d:36:b7:0e:58:a1:14:a8:66:7c:b5:d0:40:
ce:86:89:07:1e:79:3a:f2:66:3c:2f:d6:b8:9b:8a:
87:dc:af:ab:e5:60:9a:ad:37:6b:63:f0:59:f3:10:
ac:10:01:df:d5:78:fd:01:3a:ce:d8:7a:ac:c0:91:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:AC:A1:26:54:BE:ED:27:93:2E:37:CE:75:F4:B0:46:2F:46:52
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a5:5f:45:c2:fe:76:8c:06:18:98:1a:87:68:bc:46:c6:69:
31:38:26:1c:67:fe:13:75:a4:d7:12:58:b3:46:03:9a:88:f3:
62:d1:f1:1b:7a:f7:a2:b4:bc:22:13:d2:3c:55:d2:62:53:b8:
63:f0:c6:16:84:4e:47:98:95:dc:02:e8:b8:26:5e:17:e5:b5:
4e:f5:de:74:49:ed:93:08:b2:2a:91:ee:f1:97:55:ee:18:65:
00:35:15:ca:2a:55:f2:c0:b5:d4:78:25:e5:0c:91:03:b0:ac:
4b:51:18:c6:e2:6b:5e:c0:16:1c:7b:f3:90:0e:cd:2b:36:cc:
07:82:c5:13:3f:24:aa:1e:04:e4:54:b2:6e:9d:a3:a6:ca:80:
bb:18:aa:77:dc:18:2a:85:7f:2d:2b:b2:75:ed:77:79:b2:28:
e1:28:2d:af:05:a6:a7:0d:68:86:93:30:98:68:27:20:4e:00:
34:c9:81:9f:19:63:d5:d3:b2:cb:f6:f1:95:78:4d:77:c8:87:
fc:72:80:f3:30:a3:b3:d8:00:09:9b:65:05:64:8c:9c:0b:d1:
b8:27:df:d8:29:03:fc:18:99:23:f4:ff:9f:77:c6:05:69:8b:
c7:7c:8b:13:8a:83:1d:b3:7c:84:4e:9f:c1:c5:f7:d8:f3:23:
99:c9:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:54 2026 by rpki-client