Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier: X26pmW9JCKheLWPhkSHmHsM/390wlZ7ZFUgTiTdo6BY=
Subject key identifier: 91:C6:8B:E9:AD:97:B7:6F:62:65:99:B2:B0:68:B9:28:D6:6D:0B:C4
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial: 019CA8A126F674E5777CB7CECACEB68D15A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number: 0BD8
Signing time: Sun 01 Mar 2026 09:00:59 +0000
Manifest this update: Sun 01 Mar 2026 09:00:59 +0000
Manifest next update: Mon 02 Mar 2026 09:00:59 +0000
Files and hashes: 1: 4vUJXm8eNnXrmzWPEJu4hyJ74bE.asa (hash: E4sIlw3AAVJ0Z5hHy6GY0z+mLPDpAHtRm2YAKcmDuRI=)
2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: 3LZRs8XeNk3eiWjQ7dE8U6NDXwLNGFTaMA+O4k80184=)
3: q7Y942LXE7VDqi3CVQGg7s-T4B4.roa (hash: um+Nzf6xvoV3Y4Z8bfjOD2xB6Pty18EAptHerBiWZz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:26:f6:74:e5:77:7c:b7:ce:ca:ce:b6:8d:15:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Validity
Not Before: Mar 1 09:00:59 2026 GMT
Not After : Mar 2 09:00:59 2026 GMT
Subject: CN=91c68be9ad97b76f626599b2b068b928d66d0bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:97:3f:73:95:69:56:58:85:4f:24:32:7f:
a0:d9:dd:f7:79:a2:db:fe:e2:61:f9:c0:e9:f0:38:
c6:16:74:9f:88:6a:9b:36:d2:e3:a7:d1:a6:c4:0f:
f3:1d:fc:33:12:95:df:a4:3e:b2:48:dc:2e:ae:04:
13:39:55:0e:8d:9e:ae:71:16:ff:06:85:24:40:da:
56:28:eb:40:6f:59:a8:f5:39:49:79:02:fb:9a:ff:
50:a7:ed:d9:6c:1f:c1:20:17:a6:67:e2:1a:0c:54:
1a:da:39:54:61:af:c5:1d:90:5c:5d:87:6a:6e:65:
5c:02:ea:70:3a:45:5d:d7:1d:30:3a:84:89:3a:92:
4b:b9:45:dd:ce:61:d0:65:40:10:71:17:1e:ae:fa:
68:24:15:27:ce:7c:c5:54:ea:75:b6:b1:83:68:d3:
12:2e:7c:84:bb:17:12:da:58:cb:4e:4f:cb:d1:12:
0c:dc:e4:e0:e2:ee:0c:54:b7:f1:4f:02:d4:2c:2c:
1b:0a:b9:88:25:12:e0:d3:27:bd:c5:59:21:f9:e6:
10:1b:4c:43:b2:71:2a:2b:69:48:f6:a7:4b:59:50:
88:cc:5a:6b:85:11:e2:a6:b3:43:26:3b:ab:ad:d0:
3a:50:67:c6:da:97:6d:d7:d0:c1:07:84:ba:f1:bf:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C6:8B:E9:AD:97:B7:6F:62:65:99:B2:B0:68:B9:28:D6:6D:0B:C4
X509v3 Authority Key Identifier:
keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5b:12:e7:68:f1:16:08:a0:e4:d5:99:d9:22:a5:7b:f3:78:
08:45:c4:be:9f:a2:6f:92:df:60:ff:43:63:c0:66:8b:08:fd:
50:57:d1:c9:0a:c6:8b:77:d8:af:95:df:0f:18:32:fb:0a:98:
34:22:43:5e:0f:92:b2:d9:26:d5:5c:90:90:09:55:e0:74:db:
a4:4d:f8:1c:2c:98:8f:2b:96:22:66:c1:6b:ce:a5:45:c3:e9:
b6:ed:c0:3d:ef:68:40:18:92:a2:df:72:40:6b:f6:a3:92:e9:
3d:a0:8a:dd:21:df:f6:c4:e5:0d:f7:e2:ae:4e:1f:5d:d3:64:
01:bf:40:f4:08:d7:bc:6c:1d:43:cc:a7:2d:08:9b:84:a2:27:
0a:38:5c:1a:6f:2b:5f:3d:14:2d:bd:55:23:d7:53:a3:1e:1b:
76:b6:8f:27:82:0a:91:77:b6:a5:90:25:b5:d5:b4:23:87:c0:
8f:f6:c2:38:9b:3c:eb:9e:2d:f6:d1:ad:cc:03:03:1b:d8:34:
6b:c3:e6:c9:f0:59:2f:33:b6:04:26:6b:95:57:63:db:d4:6c:
cc:75:73:2a:2f:62:65:df:25:86:11:66:d7:37:0a:5a:c8:b5:
59:35:a4:2e:fd:d4:c2:52:20:52:01:e9:22:fc:e9:47:1e:d6:
fe:54:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:33 2026 by rpki-client