Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File: S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier: 3C9xctnAfF1PNd6Qj1bm4Uz1HKrmigkDhJSkymNgR6I=
Subject key identifier: 04:12:11:C8:0D:03:EA:9D:A0:3B:D6:04:86:E6:90:34:F7:1C:1D:7E
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 019CAB34262373BB0A4B807B741AFBFA3D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: P0ZNxLk1sdECgdi1Tm-5Bi4YFqM.roa (hash: 3tOX45ZYiLFtcCM+7LWZEAit3POwqgmH66Hrj3e5Vfs=)
2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: q1tX8eZmfC7DPYrDCf2HH0s9pKXwiPxc32D2Nm+m4d4=)
3: cZRfewhlPFdbhtSL2-IO-d8yDz8.roa (hash: /ZuVeMzeVzi++K3VrthuhTskTcvhDVAWNr2p0osd/jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:26:23:73:bb:0a:4b:80:7b:74:1a:fb:fa:3d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=041211c80d03ea9da03bd60486e69034f71c1d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:a2:80:b5:ec:48:56:44:d2:d3:be:25:ab:
b4:c8:e7:05:9e:ec:7b:d8:f8:97:74:e8:68:04:cc:
20:ae:63:28:99:7b:b0:f0:d8:65:ce:de:44:45:ce:
82:9f:cc:09:d4:83:c6:d6:ab:dd:a2:f8:1b:15:30:
3b:4b:b4:75:ce:62:da:4e:72:5e:35:cb:2d:dc:38:
98:b7:11:45:1a:48:df:ef:bc:6a:3e:0e:42:e4:7e:
f3:45:4c:87:2f:95:5f:64:a1:e1:be:3d:51:66:b2:
2a:84:37:d6:1e:cd:4e:53:59:b8:fc:c5:3b:0b:cd:
b0:60:13:a9:63:f8:1b:d8:e3:01:e2:42:69:68:8b:
03:a7:a7:a0:0f:5e:b2:26:ce:1e:01:27:dc:9f:86:
71:84:a2:a0:91:92:a8:e1:74:7d:e1:09:3b:b7:4d:
ea:f8:a0:e1:49:e1:89:46:7f:1c:9f:d1:ba:5a:c8:
6d:60:3e:85:79:c7:62:fc:7d:50:32:9a:ad:5f:2f:
b6:d6:c3:d9:d7:6a:54:1a:43:89:89:e8:72:7b:15:
f0:e1:db:95:f9:29:e6:98:f8:37:c6:bc:4a:56:96:
e5:32:c7:8b:83:54:db:0d:c1:66:3f:70:52:07:c8:
bd:65:8a:c7:1d:d2:4e:c5:26:28:12:ba:18:8d:a2:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:11:C8:0D:03:EA:9D:A0:3B:D6:04:86:E6:90:34:F7:1C:1D:7E
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:29:c9:fc:ad:df:a2:3d:a9:05:68:d3:68:b0:46:39:7e:10:
9b:60:0d:43:66:69:ff:36:29:3d:22:b2:f7:46:59:99:e0:6e:
db:41:2c:6a:04:18:d8:de:33:98:c6:77:c5:08:e7:dd:98:14:
f0:93:cc:ff:26:30:60:0c:ba:6d:04:ae:9f:6c:11:15:1e:f2:
be:68:0c:98:18:51:c2:00:46:91:7e:2e:b0:9b:68:64:ce:51:
a8:19:f8:cf:8a:b2:d6:54:a7:f9:cc:b8:a7:89:cb:74:67:ec:
41:da:80:9e:9c:aa:dd:35:51:f4:2b:e7:3f:7d:58:65:28:34:
ab:93:88:60:35:92:e9:29:3e:b2:ce:b4:58:1a:39:8e:1c:75:
7a:57:cd:3e:cd:93:eb:25:6c:74:d4:fa:0e:e2:ea:a2:a3:bd:
d7:ad:76:9e:51:ed:c5:60:0b:77:3e:87:48:10:5f:ab:d0:97:
cf:bb:a7:6f:77:3c:96:72:73:74:be:8c:7b:7f:71:a3:6b:de:
d9:22:dc:1c:ec:b6:4f:46:71:62:0f:d7:5d:73:ed:13:93:0c:
4c:bb:57:45:82:dd:b3:9e:a8:00:97:be:62:fb:b5:5a:5c:30:
63:f2:bf:34:e5:d8:f9:79:74:1d:77:96:b7:a7:23:85:f9:fc:
ad:f1:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:32 2026 by rpki-client