Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: CD27EvNTpA0Hcv2XN8aTNmT0hcxNNfcoL2ynxzruJ04=
Subject key identifier: AF:57:F3:0B:1E:7D:AF:66:FD:54:28:C0:E7:BC:A1:0F:A4:BF:F2:A8
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 019D9D3F5399EB425E83ADE32514400DDE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0D22
Signing time: Fri 17 Apr 2026 21:01:06 +0000
Manifest this update: Fri 17 Apr 2026 21:01:06 +0000
Manifest next update: Sat 18 Apr 2026 21:01:06 +0000
Files and hashes: 1: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: KChEBeu8sxMDv9I2tdudVIuag8h+uK69nwdJ4Y+bW3U=)
2: u0QvJos6aQuVHi55RUrNrXgfUVw.asa (hash: ACtAtsRiatajmXHP1C5zTlEQsTPl4TCmsquEFaxzwfI=)
3: xLJtQXm9P6maxGC-hxArjHM1WvQ.roa (hash: fh/uCHUwOCAmoBiX5Ih0Qna/9cR2PxvxnSe6Xn99zr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:53:99:eb:42:5e:83:ad:e3:25:14:40:0d:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Apr 17 21:01:06 2026 GMT
Not After : Apr 18 21:01:06 2026 GMT
Subject: CN=af57f30b1e7daf66fd5428c0e7bca10fa4bff2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:0c:b7:45:7e:93:d0:5d:51:02:36:16:8b:
4e:46:6f:ae:c7:d8:84:b5:d7:78:4a:77:9a:86:d2:
33:e4:5f:c1:8e:36:96:88:b9:21:fc:f4:68:73:4f:
63:8d:0c:cf:22:77:b4:df:9e:9c:d7:5e:c8:18:72:
13:fe:c2:43:9b:48:be:f3:66:e4:0f:bd:e6:8d:b6:
55:4e:7e:e4:58:90:75:59:9f:b4:51:a2:58:70:88:
d5:c1:e8:ba:48:ed:bd:0b:c1:41:40:db:32:7c:9b:
61:e4:2c:be:d2:93:a8:a9:0b:96:6f:af:56:1e:78:
a4:bf:6b:36:8d:50:38:0d:e1:39:8a:de:fb:e0:61:
93:9f:98:4f:42:ba:c3:7f:44:57:cf:1e:84:7f:21:
fa:1c:1d:3b:f6:0f:05:20:7f:b2:c5:f6:1c:ad:ec:
ea:1b:1b:15:57:6f:88:fa:5b:2e:95:c8:8e:80:b7:
a2:75:1e:d2:ab:ab:49:32:9d:4b:07:3f:e9:40:1d:
a1:4b:e5:e2:7b:06:17:74:20:ff:99:61:9a:c7:7d:
33:53:8b:77:44:f8:18:5f:da:a1:62:59:2e:cf:79:
49:08:a5:a9:d0:75:2e:0e:34:39:0f:f1:32:ac:e2:
35:40:20:04:03:d5:76:d5:f0:93:ee:9f:5b:2d:24:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:57:F3:0B:1E:7D:AF:66:FD:54:28:C0:E7:BC:A1:0F:A4:BF:F2:A8
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f5:34:4b:2d:8e:01:d0:2e:85:f1:42:0c:32:d0:c9:bb:67:
3e:25:6f:ec:7e:2e:8a:29:e2:57:2e:3d:a5:c7:21:94:44:d1:
3a:a8:43:bd:62:3c:6e:f2:d1:07:0c:b1:3b:19:10:ca:64:cc:
4c:66:5c:f8:20:67:80:7e:90:63:ef:89:05:a6:35:c6:e3:b0:
b1:29:56:a6:64:1a:0d:80:87:74:1b:20:a3:bb:aa:1e:8d:73:
8e:bf:59:41:d7:be:b0:bf:7c:12:99:a8:b2:9b:28:1d:4c:b3:
0e:d5:31:02:d0:6e:66:48:fd:a0:f8:2b:12:9c:a1:da:2d:26:
41:02:ca:d5:3c:c9:ac:c8:7b:56:9a:6f:d1:e2:a7:3c:9f:ec:
73:84:00:ec:ba:e3:87:82:df:be:30:61:a7:69:27:0f:bd:aa:
1e:dc:08:95:17:d0:26:d4:dc:5d:ba:79:ba:85:cd:3b:81:71:
bf:ad:f6:df:44:68:44:fe:d6:9e:8a:6e:88:bc:d0:b9:59:c3:
c6:90:a6:81:ea:e7:ed:91:14:44:f9:05:75:05:59:97:0c:14:
03:10:6d:0c:17:b4:2a:59:5d:b9:68:93:02:56:b5:fd:45:10:
d1:50:6e:67:70:17:a3:d0:6d:1d:21:83:45:70:9f:40:7a:e1:
ea:68:63:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:01:34 2026 by rpki-client