Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier: fLwcr3kyDxD2uc82SQimkI+E/XHcD9W8q7j5MaLhBM4=
Subject key identifier: 17:45:AF:F5:BC:7C:F5:C6:17:76:2F:44:62:54:26:17:AA:85:8A:D8
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 019CA9B39AF65CF6D287744C7614BCC81AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number: 111C
Signing time: Sun 01 Mar 2026 14:00:45 +0000
Manifest this update: Sun 01 Mar 2026 14:00:45 +0000
Manifest next update: Mon 02 Mar 2026 14:00:45 +0000
Files and hashes: 1: NtzUoTARnkc4QLuLuKK3L5i08Gg.roa (hash: WHzeIB9oGHBY17wslEieeVrvaTIjdjtqABPLJfiC5Hs=)
2: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: eg7F0gTfn/s+JTd4rvo0ipR5vtiodjhzf7Et+q7rSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:9a:f6:5c:f6:d2:87:74:4c:76:14:bc:c8:1a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Mar 1 14:00:45 2026 GMT
Not After : Mar 2 14:00:45 2026 GMT
Subject: CN=1745aff5bc7cf5c617762f4462542617aa858ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:53:75:30:83:bc:13:8a:c7:90:12:26:16:
71:bb:68:db:ff:4c:91:be:8f:66:de:95:ce:03:e0:
2b:18:48:00:eb:e3:f8:a4:32:bb:d5:8e:01:2a:aa:
bc:ec:f3:af:d5:91:65:61:65:af:49:84:d2:4b:0a:
ef:24:c8:a7:c2:77:4d:8d:36:f2:9c:b3:b7:e0:5f:
3f:77:49:73:c8:8d:b9:be:47:bf:05:6b:45:3f:ca:
52:48:09:6f:c4:b8:53:3f:de:19:78:7c:07:c3:5a:
0e:c7:d8:1c:42:1e:c4:1a:4c:09:1e:cc:22:f8:fe:
5a:83:cd:e6:f9:d4:2b:94:bd:4a:94:5b:b1:25:8a:
a7:f0:d3:78:ce:48:09:38:5c:62:cf:ac:b8:30:2d:
e8:1f:4e:8e:7e:4b:c2:05:d1:32:4b:47:79:33:ea:
87:26:76:fc:97:ff:62:2f:e7:0c:55:35:25:c1:d7:
8c:e5:1d:85:b1:a5:f3:6b:ed:94:04:7f:1b:c8:78:
23:30:0d:47:b6:d2:4e:dc:f0:ad:67:29:dc:8b:61:
65:f3:23:a7:a1:af:8c:1e:ba:64:aa:ac:a6:b2:0d:
0b:9d:42:7d:bb:fc:c9:f9:a7:b4:29:c1:5b:1a:4b:
b6:29:b2:fe:dc:64:18:32:6e:67:50:e8:c4:cf:16:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:45:AF:F5:BC:7C:F5:C6:17:76:2F:44:62:54:26:17:AA:85:8A:D8
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:62:51:ae:f3:7e:73:c3:f4:41:be:aa:12:31:13:58:32:b3:
c7:35:c7:f9:63:4a:f7:79:de:dd:85:25:92:dd:99:4f:5c:21:
e1:06:54:8d:9d:c0:05:a6:c2:b6:ce:1a:e3:44:6c:39:9f:05:
a9:16:15:69:f2:ca:5a:7f:9e:44:2d:96:94:24:d6:01:25:63:
78:68:da:ed:72:0d:85:7a:13:5b:bf:3c:aa:02:d5:7a:68:df:
2f:04:d2:57:36:e6:15:35:b3:e7:32:5b:0b:17:56:dd:56:f4:
36:26:33:fe:5f:c7:56:e6:79:22:3d:8e:74:f2:15:0f:6b:ed:
0b:70:9a:8e:09:95:fd:39:d6:bd:23:fe:40:15:09:51:75:20:
34:dc:d8:3b:c0:8b:84:f4:a6:c2:63:17:c6:1f:68:9c:a6:fd:
dd:91:72:1b:6c:45:45:6b:fe:05:11:1e:e2:4b:e9:a9:3e:28:
fb:ea:18:90:17:94:9a:cf:e8:01:bf:d7:31:55:0d:1a:a2:5c:
40:3e:b6:9a:78:dc:96:3f:32:45:24:e9:22:e6:a7:38:87:75:
e8:45:5f:9f:42:f6:f9:68:c5:42:19:13:3e:f0:92:56:12:69:
14:65:4e:56:73:75:2a:e7:73:7a:28:1d:6d:ba:09:0a:b8:9a:
de:07:08:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:36 2026 by rpki-client