Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: cGOxlJGSOaIr2xDL5NsKJlIUPPzfY/AR4p7hIz1qtWI=
Subject key identifier: F1:44:4E:2A:2A:DE:6F:8A:11:CC:E6:A8:BF:FF:35:19:53:29:6D:BC
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 01A0F643D3E895A73BB40E343CB7F7D200C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 1089
Signing time: Thu 01 Oct 2026 07:00:35 +0000
Manifest this update: Thu 01 Oct 2026 07:00:35 +0000
Manifest next update: Fri 02 Oct 2026 07:00:35 +0000
Files and hashes: 1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: gmzPTT7nYi8aKWm+JiaPBLUwucPCIZus4AydT1+NV9w=)
4: c2NaEAlgVUYgoY72a0dwilashus.roa (hash: fAkWFixs8K72eGX6Cl0h1wXhSk4FbU9HoS7xaKjx650=)
5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:43:d3:e8:95:a7:3b:b4:0e:34:3c:b7:f7:d2:00:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Oct 1 07:00:35 2026 GMT
Not After : Oct 2 07:00:35 2026 GMT
Subject: CN=f1444e2a2ade6f8a11cce6a8bfff351953296dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:6e:1f:76:5a:2a:02:62:d4:7d:be:ca:8d:
67:72:df:d2:33:c9:47:78:8a:5e:73:26:7a:65:ef:
28:9e:63:ee:11:95:cf:bb:35:c4:98:6e:38:15:da:
1b:1b:6c:a5:c0:e1:b3:67:0e:c5:52:fb:e7:6c:48:
2c:18:9f:61:2a:e0:ef:3f:51:cc:13:98:9a:18:bc:
1c:0a:10:8f:5f:bc:d4:66:e4:90:5a:86:47:57:c8:
0b:83:5d:da:13:f2:11:b2:77:60:5e:f7:e0:3a:dd:
20:b8:74:06:d9:fe:16:ea:2d:46:22:7c:b1:ab:b7:
0d:ce:f2:d9:11:22:fb:d2:ad:2e:4a:1d:46:4a:23:
83:b3:68:8f:44:7a:bd:9b:34:a7:7b:4a:fe:3a:1b:
3f:30:2c:e9:5f:37:d5:a7:98:a0:14:3f:f4:6a:59:
d6:36:8c:78:ac:90:3c:68:f4:05:77:98:d3:55:de:
a1:bc:2e:84:e0:c8:ad:a4:5a:04:7e:f7:2b:f3:53:
8b:b6:be:f4:93:59:7c:ad:29:69:97:f4:a4:7d:12:
c7:a8:63:04:55:41:06:33:82:06:90:a6:3b:97:92:
77:5a:3c:d5:4e:98:c8:cb:83:a8:be:ee:cd:46:d0:
b7:19:a6:17:7e:c5:90:b3:29:61:43:7b:f1:40:d0:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:44:4E:2A:2A:DE:6F:8A:11:CC:E6:A8:BF:FF:35:19:53:29:6D:BC
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:22:17:f3:df:21:43:d5:5f:bb:c8:1a:9d:07:ed:f3:75:f9:
c2:11:ab:9f:4c:e6:53:d8:08:b5:3a:e7:cf:bf:17:d6:3a:7a:
89:2c:59:94:97:88:32:c4:57:09:e7:47:d5:da:a0:13:d8:da:
fb:fd:8c:78:3e:d7:3e:7b:76:d9:da:91:eb:e6:26:53:e5:f1:
f2:a4:19:d9:05:ee:ea:c1:d3:0d:5a:fe:78:b0:2f:73:81:6d:
cd:6a:9e:4c:fc:b5:98:77:b2:1a:1b:cc:06:fd:e7:8e:8c:9e:
c5:16:8e:dd:19:fd:76:c4:86:56:5d:19:06:fe:42:95:0f:e2:
15:ea:fd:17:bc:b5:24:4e:55:0a:41:8a:f5:3e:c0:ef:62:db:
62:1c:ea:32:0a:5d:1b:ad:59:6c:83:77:05:27:66:17:c2:20:
c0:97:e0:dc:74:a6:44:57:84:1f:d9:ea:9e:e0:7f:5c:b1:5f:
38:47:f1:f9:30:40:19:19:21:4e:e1:8f:ca:e2:3d:54:00:90:
3c:5d:73:b4:94:5d:2e:f0:58:c5:f4:4e:6c:c9:52:ac:f6:22:
f2:0d:94:f6:ed:bf:d5:74:7c:9a:06:56:e4:4f:a2:75:a9:57:
a9:f9:47:e7:5d:66:71:93:80:b4:a9:16:42:c4:11:b9:f3:70:
7e:5b:8b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 11:54:03 2026 by rpki-client