Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
File: S5IeM_-6Ocahgd1C7jwK-gwiINA.mft (raw, json)
Hash identifier: rGhKLsR/1W5B3W1kH5ruhDBXt3B+MMPtQpcSMgNOhmk=
Subject key identifier: 46:97:B7:3F:E3:2E:54:29:DE:33:DA:CE:BC:FD:0D:F0:09:AD:E8:40
Authority key identifier: 4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
Certificate issuer: /CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Certificate serial: 019EC06D8F316D1F389204F6F45A80DD8999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
Manifest number: 43
Signing time: Sat 13 Jun 2026 10:01:06 +0000
Manifest this update: Sat 13 Jun 2026 10:01:06 +0000
Manifest next update: Sun 14 Jun 2026 10:01:06 +0000
Files and hashes: 1: S5IeM_-6Ocahgd1C7jwK-gwiINA.crl (hash: fKMhbpperT0iIGX/j8+IgO3gyvdEaq4CHhabaDbbMsU=)
2: zQ6JtQe6ANshosjASGiX3HEOrVM.roa (hash: K4kNGYoNbxGtFYvRjMbuvsJfpbwJrRENNuvEwmp7Hp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:8f:31:6d:1f:38:92:04:f6:f4:5a:80:dd:89:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Validity
Not Before: Jun 13 10:01:06 2026 GMT
Not After : Jun 14 10:01:06 2026 GMT
Subject: CN=4697b73fe32e5429de33dacebcfd0df009ade840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:5b:ff:45:94:e8:78:33:dc:61:e5:6e:8c:
4a:3a:6b:24:4e:1d:05:d3:78:96:9a:b3:02:1d:2e:
18:e9:c8:ca:97:50:e2:64:6d:76:21:25:fa:1b:2d:
af:5c:3a:ae:b1:f1:9a:e2:a0:26:64:9c:fc:21:1b:
5e:37:61:d1:78:7d:5b:90:b6:0b:2b:2a:71:60:9b:
d5:8c:f3:64:d0:ad:59:d8:14:df:9c:63:46:2d:45:
31:4b:12:42:0e:a8:c5:60:2d:88:52:75:a4:af:7c:
41:dc:c1:ed:b7:a0:45:e1:eb:c1:43:b9:aa:63:a4:
0d:f7:05:6e:24:64:a2:21:69:2a:5e:4e:30:6a:8d:
c2:0d:b2:b6:52:10:15:03:c9:15:40:09:29:cd:4c:
33:66:7a:21:2f:8e:6a:89:03:57:9a:88:96:79:eb:
ad:04:38:55:84:c7:a7:07:ad:51:39:03:a8:6b:f8:
12:00:12:8d:08:32:35:76:ff:20:c6:34:37:35:e1:
99:b1:5d:00:ba:00:76:76:a0:a2:03:d9:96:24:db:
1e:c0:59:d8:26:30:b1:ff:31:72:29:88:b7:de:47:
7b:84:93:d1:33:40:b7:54:71:08:f5:52:cc:bb:ee:
73:d7:8e:6a:fd:1d:57:20:8e:75:ed:70:59:61:2f:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:B7:3F:E3:2E:54:29:DE:33:DA:CE:BC:FD:0D:F0:09:AD:E8:40
X509v3 Authority Key Identifier:
keyid:4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c7:ee:cc:82:f5:51:97:3c:0e:83:02:06:79:91:f0:f1:2e:
c9:3f:63:37:37:c8:81:89:33:3f:05:fd:e3:6d:5e:b6:5d:d7:
5d:17:ea:88:d6:d7:c5:e0:79:fe:16:db:79:1d:9e:57:f8:f9:
cc:3d:3e:89:4c:9d:92:0c:27:80:5b:e0:60:24:46:48:5a:14:
1f:65:d7:80:f4:d6:9e:fd:e5:f2:1a:ee:ec:05:b7:c2:3f:fb:
52:34:45:bf:99:00:f5:d1:da:65:9d:58:0d:e4:68:25:c3:e2:
97:56:9a:f6:e1:ad:23:3a:7c:93:4e:05:7e:55:21:bc:89:1d:
32:ee:62:2e:58:88:55:a3:da:9e:ed:91:c5:24:ec:2f:12:e3:
fd:b4:9a:99:f6:6e:93:44:75:e4:11:f6:db:e1:4c:9d:42:aa:
4e:1d:13:55:90:e2:2e:40:ce:cb:1c:0e:3e:6f:44:32:7b:22:
ee:b0:c0:fb:6c:1b:36:2a:f7:d2:c9:ba:55:cf:ca:1d:3b:c0:
78:14:83:f7:ee:3d:c9:3e:ca:17:dd:62:de:7f:f7:c1:1c:6c:
ea:12:21:87:29:9a:3b:3b:b7:fd:db:77:cf:c8:af:28:24:11:
70:c3:eb:f5:62:72:1b:10:c2:27:b4:d5:b6:20:5f:c2:bc:54:
7a:f0:75:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbY8xbR84kgT29FqA3YmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTIxZTMzZmZiYTM5YzZhMTgxZGQ0MmVlM2MwYWZhMGMy
MjIwZDAwHhcNMjYwNjEzMTAwMTA2WhcNMjYwNjE0MTAwMTA2WjAzMTEwLwYDVQQD
Eyg0Njk3YjczZmUzMmU1NDI5ZGUzM2RhY2ViY2ZkMGRmMDA5YWRlODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwclb/0WU6Hgz3GHlboxKOmskTh0F
03iWmrMCHS4Y6cjKl1DiZG12ISX6Gy2vXDqusfGa4qAmZJz8IRteN2HReH1bkLYL
KypxYJvVjPNk0K1Z2BTfnGNGLUUxSxJCDqjFYC2IUnWkr3xB3MHtt6BF4evBQ7mq
Y6QN9wVuJGSiIWkqXk4wao3CDbK2UhAVA8kVQAkpzUwzZnohL45qiQNXmoiWeeut
BDhVhMenB61ROQOoa/gSABKNCDI1dv8gxjQ3NeGZsV0AugB2dqCiA9mWJNsewFnY
JjCx/zFyKYi33kd7hJPRM0C3VHEI9VLMu+5z145q/R1XII517XBZYS+EyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaXtz/jLlQp3jPazrz9DfAJrehAMB8GA1UdIwQY
MBaAFEuSHjP/ujnGoYHdQu48CvoMIiDQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVJZU1fLTZPY2FoZ2QxQzdqd0stZ3dpSU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xZDQ5YzQtNDExMS00MTM2LTg4YzMt
OWEzOTU0ZTA2NjdkLzEvUzVJZU1fLTZPY2FoZ2QxQzdqd0stZ3dpSU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xZDQ5YzQtNDExMS00MTM2LTg4YzMtOWEzOTU0ZTA2Njdk
LzEvUzVJZU1fLTZPY2FoZ2QxQzdqd0stZ3dpSU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8fuzIL1
UZc8DoMCBnmR8PEuyT9jNzfIgYkzPwX9421etl3XXRfqiNbXxeB5/hbbeR2eV/j5
zD0+iUydkgwngFvgYCRGSFoUH2XXgPTWnv3l8hru7AW3wj/7UjRFv5kA9dHaZZ1Y
DeRoJcPil1aa9uGtIzp8k04FflUhvIkdMu5iLliIVaPanu2RxSTsLxLj/bSamfZu
k0R15BH22+FMnUKqTh0TVZDiLkDOyxwOPm9EMnsi7rDA+2wbNir30sm6Vc/KHTvA
eBSD9+49yT7KF91i3n/3wRxs6hIhhymaOzu3/dt3z8ivKCQRcMPr9WJyGxDCJ7TV
tiBfwrxUevB1Zg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:39:34 2026 by rpki-client