Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: HMPEdXDh6jvdLHf0PQPtNdWHH9DW6IeN9YxfQ49737o=
Subject key identifier: 97:A0:01:79:67:C2:03:7E:F0:0A:B5:A1:DC:B3:80:7D:B1:6F:C6:59
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 019D9AE36844776812CAB85D016A836DD51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 0721
Signing time: Fri 17 Apr 2026 10:01:27 +0000
Manifest this update: Fri 17 Apr 2026 10:01:27 +0000
Manifest next update: Sat 18 Apr 2026 10:01:27 +0000
Files and hashes: 1: 0BJuBVxjSdXsph85MS86HogqU6Y.roa (hash: oglBxgTG0Cvmu+e7zp3i2v5YTMsrt5rMaLc4kAaFK7o=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: 4TIx9uEaToOtgCRAONQeoyn0qM0velPybl34m2Xp318=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:68:44:77:68:12:ca:b8:5d:01:6a:83:6d:d5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Apr 17 10:01:27 2026 GMT
Not After : Apr 18 10:01:27 2026 GMT
Subject: CN=97a0017967c2037ef00ab5a1dcb3807db16fc659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:d1:28:04:9f:59:c8:8a:27:59:4a:23:7e:
a7:31:6e:31:4d:e2:52:5c:9d:78:a6:b8:a1:e1:6c:
81:c1:ef:02:76:a4:ee:45:a4:63:c1:a3:99:50:9f:
e8:4c:8c:ba:50:23:80:e1:e1:ed:3d:50:e1:e1:4b:
0a:46:64:ab:16:02:c7:a2:fd:52:84:ef:4f:c0:2a:
c8:d6:c2:b5:07:48:24:66:62:26:6a:09:53:d6:e1:
ab:1d:9a:f3:48:aa:0a:77:e9:ff:7f:8d:ed:fe:de:
3c:30:88:67:f9:19:be:d0:c7:1e:30:54:bb:d1:85:
98:3a:62:3b:e9:17:87:ea:02:d9:bf:50:7f:e0:ce:
33:ae:39:b5:b2:43:a3:81:87:56:e5:2c:c2:c3:96:
b9:bf:64:39:d9:95:24:21:81:25:35:92:0e:1a:14:
1d:e4:c9:14:0c:9d:8d:98:f1:96:34:8b:e6:a8:b8:
b3:37:d8:85:58:4c:ba:cd:53:9a:a8:1f:80:0e:73:
58:8a:cd:3c:98:96:a4:85:ad:e5:cd:d2:af:dc:b8:
6d:08:1a:01:a0:40:08:9f:8a:2d:3d:d4:d0:a1:98:
38:a7:d8:2d:7a:4c:3f:42:70:49:f1:48:ad:a8:0a:
2e:40:c6:46:00:27:00:94:c5:8e:b6:ea:9a:fb:bc:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A0:01:79:67:C2:03:7E:F0:0A:B5:A1:DC:B3:80:7D:B1:6F:C6:59
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:55:0d:33:a7:0f:76:a7:75:81:d8:ed:ae:68:8c:cb:3c:47:
84:b2:01:c2:1a:f5:2a:83:3c:2c:c3:8e:0c:6a:0b:7f:70:4f:
02:8d:7a:38:6f:88:2e:e2:4b:a8:76:80:ce:3e:f6:dc:07:27:
4d:59:eb:5a:5b:46:0d:ba:a4:d6:ba:f4:e2:65:cd:ba:14:5e:
81:d5:6f:38:0e:71:94:84:10:fa:9d:08:3f:9e:a1:a3:95:8c:
36:63:6d:36:c2:cd:17:1d:6f:ec:fb:99:75:46:7d:3c:21:4a:
19:87:01:94:e6:37:68:09:d5:b7:3e:93:07:d2:ed:ff:71:5e:
54:86:8f:12:e4:a2:a2:86:e5:c9:73:89:2f:3c:ad:59:17:d4:
b4:7b:c2:27:86:7f:4e:d1:dd:dc:4f:1b:6e:5b:d4:13:b6:4c:
4e:50:06:48:2e:2b:24:f5:3e:fe:14:2a:8e:96:5a:11:f5:c4:
23:bb:bf:63:a1:59:e1:e4:fe:5b:b0:0b:ce:22:ca:72:53:5e:
5a:c1:67:61:fa:0c:5d:48:2b:db:5e:82:8d:d1:b8:44:42:52:
06:87:9a:95:06:6b:b8:dd:e6:43:d8:7c:a7:8e:98:9a:39:fb:
0e:1e:5e:3e:06:a7:ce:df:1b:f5:f8:72:7e:ce:18:e6:66:fa:
49:cc:1b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:51 2026 by rpki-client