Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: ukqO2pO+fpCpyzLh5lQOY2i61V3Cq3IOv1vyIImIZ/c=
Subject key identifier: 60:66:77:5A:88:B5:4A:0A:95:77:5C:DD:78:E5:53:36:23:1A:17:64
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 019CAD5A0E8ED801831E61A8903ADEF7DEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 06A6
Signing time: Mon 02 Mar 2026 07:01:26 +0000
Manifest this update: Mon 02 Mar 2026 07:01:26 +0000
Manifest next update: Tue 03 Mar 2026 07:01:26 +0000
Files and hashes: 1: 0BJuBVxjSdXsph85MS86HogqU6Y.roa (hash: oglBxgTG0Cvmu+e7zp3i2v5YTMsrt5rMaLc4kAaFK7o=)
2: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: Tqh9Sv+q60l1l3tLcvkSC/HCX05n0j3wG5tBe6p/0jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:0e:8e:d8:01:83:1e:61:a8:90:3a:de:f7:de:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Mar 2 07:01:26 2026 GMT
Not After : Mar 3 07:01:26 2026 GMT
Subject: CN=6066775a88b54a0a95775cdd78e55336231a1764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:b3:08:17:9d:62:6b:e6:21:45:fe:6c:c3:
27:98:be:1f:bf:f7:85:b5:d2:23:06:77:aa:f8:3e:
f7:cd:d2:17:7e:0d:3c:f2:f4:ac:bb:fe:e9:69:82:
ff:02:3f:36:c5:ea:74:b7:c1:aa:26:f4:57:cb:c5:
27:97:ad:d7:55:23:11:15:14:f0:4e:34:bf:a8:e8:
c3:35:02:1c:2d:00:96:4c:9b:8a:ea:cc:b5:e8:0f:
7b:f3:16:4c:8f:3f:47:eb:f4:83:bc:8c:a0:bf:ed:
3c:4b:68:47:7b:93:45:a2:f2:ac:02:e5:d7:85:4f:
85:a0:94:5f:37:60:80:60:7b:48:f2:05:27:57:a1:
d6:39:32:69:f8:95:32:ef:c6:9d:19:19:35:3a:f1:
d0:54:9e:75:7f:81:09:6f:62:63:ab:1e:30:d9:08:
24:0d:13:d4:f9:9a:96:c5:5d:e7:dd:64:9e:37:b8:
ef:57:2f:ec:ef:ca:22:c9:14:e0:bd:ff:03:66:5c:
16:d2:f4:3b:75:6c:0b:3f:1a:d8:c1:38:cc:51:92:
ff:ff:55:76:01:0b:b6:af:bb:84:07:ec:f5:ce:34:
72:32:a5:b7:50:3f:b1:6e:d7:96:e5:41:76:b3:6c:
85:56:f7:df:57:7b:a7:5d:ab:7c:06:0c:92:23:e0:
1c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:66:77:5A:88:B5:4A:0A:95:77:5C:DD:78:E5:53:36:23:1A:17:64
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:29:b1:9b:81:06:1b:70:c7:c6:7d:51:f3:f7:a1:54:e8:f1:
c4:4b:3a:55:fc:e5:56:e7:7d:d3:cc:7a:d6:a0:2d:8f:3b:7a:
4a:bd:c9:5d:75:8a:aa:5b:07:9d:72:72:fb:be:b0:29:41:70:
3f:7b:97:44:ba:b8:72:5e:2d:21:f8:25:8a:98:59:b7:c9:ed:
cb:86:eb:4d:87:10:46:13:e7:0d:06:69:f4:e3:da:21:93:7f:
d1:47:ed:75:00:9a:b0:ff:a7:15:64:0e:26:b3:d5:01:cd:7f:
d8:6f:12:3d:48:db:cc:85:fc:cf:fd:bc:dc:ad:8f:31:f6:6f:
86:67:b6:a1:3d:cc:8e:76:45:05:66:03:86:1c:77:59:24:8d:
fe:04:17:14:0d:af:c6:5f:01:af:46:d2:d5:3c:2c:73:d0:91:
20:2b:83:b2:d1:d2:79:1b:91:ac:01:1d:a0:f1:39:86:d0:8d:
07:aa:a9:d4:3d:fd:44:1a:f6:d7:13:e9:e9:29:98:38:a5:30:
a8:ed:dc:d2:47:ad:88:a2:66:e4:e8:97:bf:5c:50:33:67:3d:
00:8f:1a:59:91:39:2d:3e:eb:3c:92:32:6e:74:63:eb:dd:89:
95:28:6b:c8:18:4d:ee:1f:09:f0:8d:d3:aa:27:15:60:02:8a:
9b:34:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:22 2026 by rpki-client