Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File: SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier: 4gU67BDKIPpupC5GghcTQLLnhiR+Di8zvC9opUFaxYg=
Subject key identifier: 2B:77:CF:48:53:65:8A:A3:AB:F1:22:41:F5:6F:90:BD:CB:3F:F3:18
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial: 01A0D34AE955D94A33ED6DAF08BC2A884EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 12:01:36 +0000
Manifest this update: Thu 24 Sep 2026 12:01:36 +0000
Manifest next update: Fri 25 Sep 2026 12:01:36 +0000
Files and hashes: 1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: LLA/m++DvoCtMMCFCPXDQxmMyE9u/1MAg22vekwS4k0=)
2: W4KHw-He6kWePo83bS5E3YXxts0.roa (hash: HnOkT9H7Ca2rZOkZ/pXWIqV8bBgY7J8LEGyl2k3M+hY=)
3: _a5oTu8gmKTkulokRAA15ZrEXNM.roa (hash: m1okP9QJB17W56hE2P8J+CdYw56KQB54uec3dsvEZRc=)
4: xZnQUNKtjz0xBu4GBzb-zu_Y-aY.roa (hash: +vp8PoavLw4YQsjZPIBnjlGldFa1m0sRHbYb6KV//EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:e9:55:d9:4a:33:ed:6d:af:08:bc:2a:88:4e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Validity
Not Before: Sep 24 12:01:36 2026 GMT
Not After : Sep 25 12:01:36 2026 GMT
Subject: CN=2b77cf4853658aa3abf12241f56f90bdcb3ff318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e6:72:47:2f:96:7c:33:c7:48:fd:08:06:64:
28:5f:2c:16:cb:64:6f:48:30:10:71:92:e0:f7:0d:
5a:bb:c3:c2:7f:54:52:cc:de:e8:f9:85:67:8a:97:
01:83:d2:f2:94:1b:a0:c6:77:46:7f:14:ec:82:d0:
d7:a2:9a:c1:75:5b:d8:a3:25:7e:99:5c:bc:8a:17:
de:5f:30:64:0f:6f:a9:6f:1b:4c:ce:25:41:0a:85:
b9:84:68:2e:f8:46:93:81:93:3b:cf:1f:2b:ba:be:
98:c6:18:10:1d:22:68:67:38:f9:cb:ae:3e:70:2c:
ac:af:b9:fe:00:ff:0e:2a:08:35:0b:6a:3a:95:1d:
21:3a:9a:44:c7:e4:0f:7d:1f:6c:e5:e2:d3:ed:17:
33:0b:d8:52:5e:29:7f:a5:73:c9:41:f9:d0:e6:c5:
c0:65:25:08:1f:5f:99:df:ee:99:68:6c:3c:ae:b2:
5f:88:78:57:f2:50:07:5e:5e:bc:2f:54:22:c9:dd:
91:be:07:3d:c3:aa:fc:21:99:0c:07:fb:91:48:e3:
40:24:04:86:a2:e5:cf:65:18:ce:11:a0:18:2f:a5:
ea:3b:9f:62:7c:86:fd:55:18:9d:64:d0:ea:65:4d:
32:5a:ff:39:50:d0:2d:9a:53:ca:ee:ed:64:74:cf:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:77:CF:48:53:65:8A:A3:AB:F1:22:41:F5:6F:90:BD:CB:3F:F3:18
X509v3 Authority Key Identifier:
keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:61:9b:de:92:90:0f:57:cf:b9:fe:dd:d3:0b:b3:49:b4:58:
61:ca:d1:ae:e6:14:86:63:c5:78:e0:e2:a1:83:b5:75:a0:7b:
22:f2:12:e7:25:d2:33:ac:c0:3b:2c:22:83:51:59:42:aa:0a:
dd:23:74:36:4e:96:1c:e2:57:de:3e:62:51:d8:b0:ac:3b:27:
b4:97:b2:62:77:60:0a:51:ca:21:77:f8:aa:f4:97:e0:c9:7f:
d4:8a:08:5b:a5:27:19:d7:a5:25:90:6e:3a:39:8c:e9:c1:38:
a7:d3:f5:c9:e3:87:12:d0:4d:17:27:dd:91:d7:6b:63:16:58:
4d:97:83:37:d7:d2:ee:e3:50:eb:19:eb:24:8f:ec:08:42:16:
b1:6a:c3:ca:b7:4c:30:8e:6e:c3:89:0e:d0:4a:26:61:36:e9:
f2:74:d2:d0:b3:17:bc:14:9f:21:d0:0e:aa:6d:a1:f4:3d:09:
78:1f:8d:4c:94:80:9e:87:66:71:cd:0f:36:05:bc:fb:65:7a:
9a:5f:87:6f:f9:fd:89:96:10:65:b1:d8:86:3e:79:43:b8:cf:
63:9c:36:c5:9a:d8:ca:83:88:a4:b1:a3:3f:19:d6:5c:9f:f7:
7f:3d:57:85:87:f3:e9:c6:b5:ee:98:b4:c0:77:1e:8f:0e:ff:
81:43:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:46:04 2026 by rpki-client