Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier: 9+hbNDyX/Xe1lcvEZU6bnvlpy1amQ9B9TvGnuUXHvp4=
Subject key identifier: B6:88:3D:CD:F4:29:12:D9:C8:98:DA:EE:F1:75:F6:CB:9B:FB:8F:0F
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 019EC224A3F60C877DA094365C004843BF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number: 0257
Signing time: Sat 13 Jun 2026 18:00:41 +0000
Manifest this update: Sat 13 Jun 2026 18:00:41 +0000
Manifest next update: Sun 14 Jun 2026 18:00:41 +0000
Files and hashes: 1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
2: 1-IsyXimgStm6iFdQzOtOH_LpB-w.roa (hash: cwbLRv/LdraPm/ncl7j6i/Fdy+jmyYNWU7iKuNjynNk=)
3: 1-Ltnis49LppJocd3k7gXrTQpkNg.roa (hash: fES976vUY7+JDOXisLep1HRMnouImf0rWbzUHBGyogQ=)
4: 2Za9dVMumbJLSFClL77aVj2ULF0.roa (hash: qlmsqbUXglSigqm8nRIHNKmW1s8wDeCWA2RRZbXlpQg=)
5: Qa8jr4r9oUMQqXWjabdDfQ7gmpU.roa (hash: THpSlkIZjg5gNVTxY4YREvnaBYJcv0jhBmfGA2+voJQ=)
6: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: xcgS5JUFcUIyc+cIxw6B27NyPosBl7tpRBu9QzInknw=)
7: WwtbUDEcYKOBmbiB4ccytduAdws.roa (hash: 1KKu453lPDcs/h9S9JRacXBXWjGi0AAYJKEx+9blrYA=)
8: lh9y2z8BjPboXQB7En0Art145ss.roa (hash: WeVrGCLtXYuvgZeAFcelbJV4mJDRhqOFt2yLKIQQeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:a3:f6:0c:87:7d:a0:94:36:5c:00:48:43:bf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Jun 13 18:00:41 2026 GMT
Not After : Jun 14 18:00:41 2026 GMT
Subject: CN=b6883dcdf42912d9c898daeef175f6cb9bfb8f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:d3:88:7e:e8:74:a5:34:1d:2a:0c:a9:69:
ba:51:9b:53:5c:ef:3e:9f:00:7c:ec:08:93:0f:4d:
6a:12:71:3f:50:9c:6c:d9:fe:ca:4d:14:69:39:c8:
8b:fc:5c:73:c4:8f:74:33:e3:92:f1:7a:c5:7a:ac:
bb:57:b3:9d:73:ce:9e:3f:b1:2d:db:8f:42:8a:56:
6c:f8:e6:00:81:20:e8:11:7b:e1:b9:e4:c4:bb:3a:
42:f8:12:6a:af:86:35:11:5f:a2:19:8d:11:c7:6c:
65:a7:e4:bd:72:b1:fc:37:d7:7b:2c:a1:48:25:d5:
9b:ac:72:20:43:b0:e8:56:0b:37:30:8e:d3:52:99:
97:11:51:42:77:f7:e9:28:5c:cf:da:c4:f3:f1:99:
bb:40:2b:ba:c0:77:7c:23:85:72:c3:49:2f:b8:ed:
53:ed:ce:78:fe:76:d9:f3:9c:d7:73:4a:72:93:b4:
89:ed:f7:87:d9:77:ff:03:4b:75:a7:b8:bb:3d:b8:
c1:46:92:f6:43:31:44:ee:44:3f:2e:fd:41:39:cb:
ef:c7:63:5e:5e:88:d1:e5:9c:f1:43:26:73:98:06:
c2:83:32:33:ff:df:b1:35:8e:57:5d:8e:fb:08:68:
74:4a:6b:84:72:a2:24:42:8b:89:2c:aa:b9:e0:a0:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:88:3D:CD:F4:29:12:D9:C8:98:DA:EE:F1:75:F6:CB:9B:FB:8F:0F
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:84:3d:ac:59:0b:e4:03:ce:d8:bb:e4:16:23:31:ef:44:92:
4a:4e:af:99:bc:30:0b:43:39:d6:79:38:20:eb:c5:a6:20:dc:
89:2f:7d:49:24:c0:83:a7:5e:53:74:81:90:be:30:43:2c:23:
ef:c1:18:27:83:1f:7c:43:9b:27:50:5b:af:7f:92:4a:b7:5c:
52:91:33:34:ae:17:af:1c:59:8e:7d:9e:9a:f4:9a:b0:4c:af:
b2:5e:37:0e:15:58:a5:d8:28:e8:38:eb:62:eb:bb:44:c8:eb:
de:ca:13:a2:a6:25:a9:18:a2:0d:f6:05:4e:52:e9:3f:92:26:
a5:55:a5:93:38:85:2e:18:d7:b7:c4:30:44:d0:43:62:54:4d:
d7:87:2d:3d:56:a6:df:80:82:7c:8a:05:24:1f:9e:d7:68:e8:
06:77:22:4b:e3:ed:41:9b:3e:80:f4:7d:92:dd:a9:f9:f7:aa:
c0:74:9b:04:13:dc:80:ca:de:0f:e6:dc:8d:59:71:b5:78:44:
83:a6:a0:4e:44:a2:3f:4b:c6:95:10:7c:7b:ae:d7:b2:b9:dc:
f9:27:8f:d6:82:bb:73:ab:61:13:99:c2:01:de:ee:d4:69:7b:
c7:b8:06:4e:c9:2a:a0:5e:4e:49:26:21:3f:1f:4e:ae:b6:3b:
c9:21:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:05:35 2026 by rpki-client