Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: 9uA4fOZ+Oz1er0SsyOmfv7cjQUo1wty86Y0/WaWsH0c=
Subject key identifier: 28:99:AE:A2:1C:0E:8D:EC:1E:52:E4:26:E8:B2:E7:2F:0B:74:5D:61
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 019EC0DAEC309C97118BA299005D60CEB74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0DB9
Signing time: Sat 13 Jun 2026 12:00:33 +0000
Manifest this update: Sat 13 Jun 2026 12:00:33 +0000
Manifest next update: Sun 14 Jun 2026 12:00:33 +0000
Files and hashes: 1: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: NglSy1WAH7icUUZZh8Wd/o0apLkKU9FawJZ5o0CDp8k=)
2: u0QvJos6aQuVHi55RUrNrXgfUVw.asa (hash: ACtAtsRiatajmXHP1C5zTlEQsTPl4TCmsquEFaxzwfI=)
3: xLJtQXm9P6maxGC-hxArjHM1WvQ.roa (hash: fh/uCHUwOCAmoBiX5Ih0Qna/9cR2PxvxnSe6Xn99zr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:ec:30:9c:97:11:8b:a2:99:00:5d:60:ce:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Jun 13 12:00:33 2026 GMT
Not After : Jun 14 12:00:33 2026 GMT
Subject: CN=2899aea21c0e8dec1e52e426e8b2e72f0b745d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:de:e4:b8:17:06:57:15:8d:13:48:09:b1:
68:76:a6:8d:c1:46:06:50:6b:c5:95:b2:39:32:19:
32:65:d7:48:3a:f6:4f:f9:7e:4d:5c:e4:27:1a:a8:
09:8f:15:c3:32:75:7d:1a:e3:a8:69:b8:c7:c8:4e:
aa:28:be:84:84:8a:2f:d8:09:e2:c0:4f:64:84:8f:
a4:e0:ae:ed:5b:43:e9:39:8d:c1:84:5d:1f:e2:dd:
78:54:a0:5a:b7:08:38:3c:1c:3a:e3:65:70:0c:c7:
77:7c:cb:ca:89:da:28:58:0c:1f:d9:4d:6a:f1:d3:
a2:30:b4:6e:88:7c:6e:24:16:6f:d4:cc:ed:af:9f:
b1:ac:75:15:02:26:9d:95:d6:4f:e0:03:0b:39:d2:
b2:56:df:67:3d:d3:30:00:df:85:d8:5b:f7:13:9c:
38:4e:a9:d0:76:61:f2:48:b6:08:cc:54:b5:b5:23:
a1:57:fb:64:78:37:42:79:ff:1e:a4:72:2e:48:a9:
70:19:05:b4:32:00:35:ba:34:41:81:64:81:ac:1e:
ac:b9:58:9e:c7:b8:a6:62:61:08:02:61:5f:e0:ba:
73:e7:37:4b:c5:47:db:a8:77:49:09:3b:b5:05:e2:
b2:c0:85:12:21:51:0c:73:49:75:79:2c:2a:1b:a8:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:AE:A2:1C:0E:8D:EC:1E:52:E4:26:E8:B2:E7:2F:0B:74:5D:61
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:da:c4:3d:1b:19:6b:f0:06:0e:0c:f8:20:48:8f:cf:d9:
24:8a:6d:8d:46:1e:47:81:4c:c3:ec:70:91:1d:c6:83:3f:a3:
13:56:b7:6c:0f:16:96:4e:76:03:b2:a2:7e:bd:57:b6:b3:3e:
d1:32:c2:46:85:70:a4:aa:1b:2b:60:0f:1a:8b:bc:ad:a6:0e:
cd:95:ee:bf:63:2d:d1:1b:8c:a1:eb:53:df:96:55:54:65:07:
fe:63:11:b4:23:7f:ae:59:80:cd:65:e6:cb:8e:11:2e:a8:87:
69:e6:ff:14:14:27:36:ae:80:3b:9e:43:e7:05:0f:96:cd:50:
43:36:81:83:9b:63:58:75:e6:80:04:d9:90:2d:38:97:f7:ee:
e6:98:4b:1b:3b:92:7e:96:44:ca:e7:a7:bc:fc:c1:21:40:7d:
24:a5:79:78:55:25:4e:81:21:aa:7c:42:ba:6c:a6:02:9b:79:
cf:61:fe:20:fc:20:c6:0a:47:5a:0f:a9:47:8a:8c:e9:2b:a4:
10:80:69:61:f7:e6:e2:72:30:c2:7a:59:e8:5b:97:d0:aa:d6:
88:34:e8:04:75:62:67:fe:6d:d3:19:01:df:52:a3:7e:c1:63:
c7:a7:7a:31:f5:42:76:e0:ac:4f:66:e1:e7:ae:57:3a:20:5c:
51:b4:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:12:56 2026 by rpki-client