Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: nAhyryeoloaKCc4M9y85R7+Z9LFotf10h4haA6GxxtI=
Subject key identifier: 25:AE:3C:E4:E8:81:59:A7:31:8A:1B:C2:20:D5:A2:7C:92:1C:1F:9D
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 019CAC46FE046611C34F4BC543AB5DAA00FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 0A32
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: PsMvD4wF5v1oLq4HWEcQ7h0vW+6LsbJI0bnqd3SxYCo=)
2: Z15aMKSwaav6tVruPDM8dqX-OrU.roa (hash: T5sFynuOqb9ftXUvpV0JfIR7RY1qYAplZnnlFh9SU6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fe:04:66:11:c3:4f:4b:c5:43:ab:5d:aa:00:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=25ae3ce4e88159a7318a1bc220d5a27c921c1f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:9a:6d:52:bf:10:e9:64:86:b0:c5:4a:11:
49:b7:6d:52:2c:2c:aa:56:e0:0b:b3:11:cd:93:2c:
18:8c:02:d9:fe:d3:8b:c3:7b:b2:4c:dc:16:af:ca:
a9:b0:94:4d:9f:71:e0:96:80:7b:a0:82:3c:c4:26:
f9:3e:4c:c5:11:ae:43:59:06:42:a6:9c:19:a7:3d:
2e:a6:1a:5f:74:b9:59:50:b6:25:53:4e:48:e9:53:
54:3e:31:50:80:f2:3a:29:dc:6f:fa:48:60:5c:c9:
b9:b9:09:db:0f:af:24:87:04:75:5f:df:f7:ec:62:
90:4c:77:51:94:11:c0:f5:72:7a:81:4e:29:83:91:
c9:be:78:3b:05:60:4d:4c:6f:60:a7:47:e2:2d:93:
46:fa:48:a4:e0:36:e8:03:73:3c:58:4a:05:ef:9b:
36:36:f8:95:bb:8e:7a:76:42:d6:9f:38:df:39:9a:
59:12:46:70:c2:46:e0:b7:63:28:d5:b9:1d:b4:21:
b0:22:f1:73:4d:e1:3c:65:86:70:4b:c1:d6:33:af:
ae:db:e6:17:46:b1:8b:2e:36:35:64:ec:21:4b:cc:
2c:ba:71:e6:b0:ee:a5:71:09:a9:04:e6:3b:3e:a8:
a2:b6:8c:20:7d:5e:64:10:d5:25:6b:93:99:c1:86:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:3C:E4:E8:81:59:A7:31:8A:1B:C2:20:D5:A2:7C:92:1C:1F:9D
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:22:4c:76:e4:44:c7:96:01:5f:e3:76:8e:76:3d:cd:79:76:
58:cb:d5:7f:91:9e:4c:b2:5f:d1:47:a9:59:d7:77:ed:11:40:
2d:00:af:b9:04:52:eb:eb:08:96:07:47:fa:ba:0f:31:dc:c6:
22:6a:58:1d:6f:d4:56:37:1f:3c:17:9a:6b:d7:a3:3e:45:fa:
87:41:3a:77:18:b7:16:e5:37:31:06:8c:fd:16:d1:02:c0:60:
f2:ff:2f:c2:8b:f8:f9:d0:ef:77:15:f2:65:f6:a5:ac:10:bf:
89:b3:fa:23:45:95:7a:ea:47:74:4f:08:63:cb:ae:ee:29:ec:
a6:0c:c0:49:f9:34:a8:94:ff:6d:79:f5:f5:53:87:13:a9:a6:
d6:ad:e0:3e:72:ef:f3:1e:02:c8:32:34:c1:b5:e0:54:f6:3e:
08:ef:5b:4d:8d:28:a3:d6:e5:12:cf:9d:52:72:b2:39:a2:fb:
b2:5c:6c:0f:f7:bb:7b:01:48:63:4b:ce:6d:2c:d8:15:a1:53:
39:1a:50:4c:c5:fc:35:71:a7:93:7e:41:6f:5b:ee:3d:02:d1:
35:e8:19:17:59:cc:68:fa:4d:82:58:fc:06:ec:92:60:6c:5f:
64:a1:61:86:0a:91:df:df:3e:01:d4:d7:0d:53:b6:97:c0:92:
6a:7f:48:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:33 2026 by rpki-client