Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier: yB/U3yabjHE7dPUPAa5pyiA0bruSX261jVCruGFAU6s=
Subject key identifier: 2B:1A:08:F6:D9:5E:79:F7:57:4E:4A:D7:A0:64:63:89:C1:90:B5:5F
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 019D9B19D46CE2A40B2508FC456B72D83E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number: 1199
Signing time: Fri 17 Apr 2026 11:00:54 +0000
Manifest this update: Fri 17 Apr 2026 11:00:54 +0000
Manifest next update: Sat 18 Apr 2026 11:00:54 +0000
Files and hashes: 1: NtzUoTARnkc4QLuLuKK3L5i08Gg.roa (hash: WHzeIB9oGHBY17wslEieeVrvaTIjdjtqABPLJfiC5Hs=)
2: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: w6jkj2ASrgPUkIsaPigiFK8zGEdK4IkkAKeZcXoJOLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:d4:6c:e2:a4:0b:25:08:fc:45:6b:72:d8:3e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Apr 17 11:00:54 2026 GMT
Not After : Apr 18 11:00:54 2026 GMT
Subject: CN=2b1a08f6d95e79f7574e4ad7a0646389c190b55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:be:e6:83:66:0a:35:4e:10:32:db:6f:c1:
d4:44:7b:e2:ff:ef:29:8d:cc:ba:46:7c:a9:7c:f5:
89:7d:41:d4:66:35:a2:f2:83:f6:53:12:37:33:a6:
a1:34:44:c3:28:34:d7:79:f1:1f:f5:72:c7:db:93:
81:d1:42:8c:cc:20:ea:86:08:ac:af:3c:77:36:cb:
25:62:b5:29:50:bb:a4:5d:05:82:af:f2:1c:99:92:
84:88:8d:99:90:9f:e2:45:ef:a8:fc:00:25:17:b5:
3b:00:df:14:dc:ac:1b:52:a1:65:21:0c:a5:d9:58:
87:44:89:4a:ad:9a:81:92:e5:46:05:87:29:a5:21:
38:0a:d9:26:24:95:a8:5d:47:09:9d:05:41:95:7f:
b2:79:a2:83:58:1a:84:cb:69:55:35:9b:4f:b8:ef:
02:4e:86:6e:af:33:0b:58:10:8a:38:32:2c:a4:08:
10:94:5d:53:78:43:c6:e1:75:86:56:93:5e:6c:e2:
3a:b9:29:be:5e:fa:5b:35:57:de:e4:13:e8:2d:d5:
8d:06:2a:d5:86:2e:e7:66:6a:9c:fb:f0:d9:c9:d2:
14:bb:5a:bc:a0:c3:12:a1:14:ed:66:7e:4a:fb:ff:
d2:97:12:70:a0:8c:20:a2:43:44:97:1d:4e:cf:ef:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:08:F6:D9:5E:79:F7:57:4E:4A:D7:A0:64:63:89:C1:90:B5:5F
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:30:b9:fa:e0:16:7b:af:8d:92:06:8b:29:f4:be:d2:4d:98:
53:49:e2:2d:88:de:12:4e:89:05:24:5e:f2:41:e2:e6:06:e3:
45:cf:40:74:07:4f:0d:38:43:c7:fd:b1:6a:3c:e1:7c:7a:09:
d9:4b:a2:1f:16:82:5c:22:d0:43:cf:f1:0a:9d:b2:a1:b1:ed:
61:48:cf:b4:f0:b6:f4:7f:05:95:f4:99:f7:cc:9f:b5:f1:50:
dc:cc:6a:6d:c7:ff:27:a7:0d:2f:80:c2:6f:36:78:83:bf:d2:
da:8b:28:5e:d9:ed:a4:18:84:4d:d6:cb:e5:7b:3b:5e:e6:fc:
67:c6:b1:91:17:38:e5:8f:47:c4:31:80:73:6b:5c:d2:2b:35:
e2:65:8e:16:58:7d:d6:57:55:c8:c1:e3:0f:47:06:91:bf:2f:
24:71:b2:5d:05:12:bf:71:84:78:78:d7:0a:d5:2b:04:c9:fc:
21:62:15:b0:d8:91:1f:e5:b6:af:71:e7:5b:39:76:c5:0b:95:
a7:83:70:73:3a:63:de:48:89:ba:68:16:00:12:d7:7d:77:d6:
a5:c9:59:aa:3c:d4:09:bf:8d:7c:68:69:69:e4:dd:c7:95:84:
26:e5:67:30:71:89:4a:54:1b:57:71:6c:05:d2:63:f4:73:bf:
f4:6e:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:22 2026 by rpki-client