Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: PV8FEWXwhn40HMaEGrLDDYTxUgNGMpDMvwOBTvwZLw8=
Subject key identifier: 89:CE:54:05:AA:E1:FE:93:62:97:A9:84:A8:60:9A:91:D3:67:04:43
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 019D977462C949F51468C79228B4833D536F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 1073
Signing time: Thu 16 Apr 2026 18:01:20 +0000
Manifest this update: Thu 16 Apr 2026 18:01:20 +0000
Manifest next update: Fri 17 Apr 2026 18:01:20 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: Kh+klRq7E9XN4lA/f7p83QPhlOX1eOt4jC+Byecpq78=)
2: fcl-EttwXxzdVTjzavFgoRNlwJI.roa (hash: aFrd+hEOx0zldgqlIlCbagrbwCzJhdbfMgtfzgPtR+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:62:c9:49:f5:14:68:c7:92:28:b4:83:3d:53:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Apr 16 18:01:20 2026 GMT
Not After : Apr 17 18:01:20 2026 GMT
Subject: CN=89ce5405aae1fe936297a984a8609a91d3670443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:42:c2:62:ce:cc:6d:77:07:16:1a:cc:00:d5:
7c:d4:d0:f5:2e:61:50:20:6e:ec:82:9c:22:34:df:
af:fd:56:00:25:37:b7:4e:f7:df:12:29:39:a0:5b:
a9:59:a8:31:82:36:8c:46:71:8d:96:4b:a5:13:73:
03:36:87:42:d6:b3:4f:93:41:ba:f8:2a:63:71:03:
1f:83:98:91:f6:a8:36:e3:10:8b:f9:67:04:78:3d:
01:c1:53:74:f6:ed:59:8a:96:3d:d9:bb:8b:33:6f:
12:24:fa:df:50:80:10:86:cb:c8:22:15:61:07:8c:
b7:2b:50:25:3b:06:fa:73:2b:0f:d8:25:fd:1e:20:
fa:a0:8d:83:5c:24:67:6f:8f:3a:e6:aa:92:4d:d1:
0d:f3:7d:73:4e:48:eb:31:85:b8:09:39:a8:5c:ed:
2f:ad:9e:6a:76:94:a4:5e:2b:4d:d9:27:6d:9e:26:
fe:0d:5e:82:51:4d:94:6b:25:c9:e3:2a:55:14:e3:
b3:b2:ec:d1:4e:5d:cd:57:fd:17:a8:1d:d3:3b:f9:
19:ec:e3:1c:55:0a:c4:87:ba:01:7b:69:19:a6:53:
d0:7c:a2:87:8a:cf:17:bb:72:72:89:48:fb:96:35:
2d:db:77:39:19:06:03:b0:46:3e:ca:a4:64:26:81:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:54:05:AA:E1:FE:93:62:97:A9:84:A8:60:9A:91:D3:67:04:43
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:16:ed:45:7b:90:75:e3:ae:55:03:b3:92:57:bb:11:48:f4:
24:58:3c:f1:be:af:a0:a7:7c:c1:ee:56:57:a7:60:56:60:f2:
83:87:3c:2d:17:0e:72:51:91:9b:b4:09:9e:8b:98:32:18:82:
fd:56:61:3e:8c:43:54:9f:cc:db:d4:31:d4:85:f9:6d:b2:f8:
55:10:8c:e1:35:91:a7:29:de:57:b6:b4:94:0b:ee:54:bd:e4:
df:df:bf:b9:2d:fa:14:2e:c6:6e:8a:78:78:7f:16:f0:d9:b8:
12:59:b6:8b:a0:98:8a:aa:13:63:51:09:3a:47:a7:dd:84:20:
8e:39:7a:ca:30:69:79:08:1b:b4:68:bb:f2:b4:e9:26:ec:47:
82:29:73:f8:36:23:96:0d:6a:41:87:19:21:b7:53:52:a6:c6:
1c:92:9f:a5:bb:8b:55:b2:31:07:e3:d3:33:1f:9e:fd:25:cb:
71:ae:00:8b:1d:05:56:58:bb:17:0a:6c:41:a8:a5:60:cb:c3:
de:f2:99:cd:92:82:3f:27:d4:bc:a1:13:ba:2a:55:69:61:3c:
b7:cb:c6:32:59:8b:d7:85:20:d7:e6:d0:31:49:4c:b7:8c:b3:
6b:2a:98:30:c4:1f:e1:c4:5b:4b:a6:f1:64:c4:e6:f3:8b:4b:
09:b6:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:35 2026 by rpki-client