Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: nVRvUn+lcwx9ySxKLWhGu0U4btA2g6jr4gMJY9IzXoU=
Subject key identifier: 4A:B8:25:E7:9A:DB:09:2A:D9:63:6D:57:9E:1E:BF:E3:12:29:3E:BD
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 01A0D804B7301CCECBB080CF42ED19153456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0B9C
Signing time: Fri 25 Sep 2026 10:03:02 +0000
Manifest this update: Fri 25 Sep 2026 10:03:02 +0000
Manifest next update: Sat 26 Sep 2026 10:03:02 +0000
Files and hashes: 1: 9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa (hash: HOLT/uX07DZotEdYvRZ0JcT8iyC7/R6c7JRLNLUWdZM=)
2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: rSceEVt/G3ntsgGneUz7YibV//K0WsIm6HgDRpKHUJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 10:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:b7:30:1c:ce:cb:b0:80:cf:42:ed:19:15:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Sep 25 10:03:02 2026 GMT
Not After : Sep 26 10:03:02 2026 GMT
Subject: CN=4ab825e79adb092ad9636d579e1ebfe312293ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:ff:f7:bc:37:c9:8f:13:45:ed:33:cf:f2:
59:f5:28:16:3d:53:25:8f:ca:0f:1d:81:7c:fd:b9:
ff:69:84:a4:cd:fe:4a:6a:52:29:01:cb:4c:94:b1:
b1:5c:e9:75:15:18:3e:57:ee:fb:ca:cf:ff:3a:2c:
72:fb:e1:84:67:c1:5e:30:f2:e7:c2:c6:c6:ff:da:
de:66:de:83:c4:01:43:ec:94:27:40:4b:0f:e2:78:
60:fc:4a:e4:42:3b:12:36:c7:1e:5b:34:3e:74:22:
bc:23:2b:ab:fb:f7:5b:43:83:a9:b8:40:ed:8d:a8:
2a:9b:20:9b:35:36:39:62:8c:0c:85:eb:35:3e:0c:
7f:27:e9:75:b6:cf:d0:f7:9c:71:57:be:4b:37:96:
2e:a3:28:13:30:8b:27:91:45:b8:95:0f:f9:f3:19:
33:43:dc:30:5f:dc:6f:aa:68:f9:d6:ba:fa:15:45:
7e:6d:41:17:84:b0:45:cc:c4:b8:2c:8c:01:f2:4f:
d4:f1:e1:8e:f4:2c:cf:93:c0:33:ef:1a:bf:17:1c:
fc:84:95:b6:66:f6:3c:ae:50:6e:ea:cb:1b:38:6c:
63:c0:02:02:88:67:96:84:07:b2:60:12:db:5b:8a:
58:6d:79:85:22:8d:fa:e7:8e:b4:ae:5b:01:fc:00:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B8:25:E7:9A:DB:09:2A:D9:63:6D:57:9E:1E:BF:E3:12:29:3E:BD
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:55:72:45:d6:4d:f1:69:c3:b7:69:38:08:32:0c:f3:1b:d6:
31:1d:0d:13:a2:27:98:9d:9b:ed:67:84:73:8d:3c:6a:fa:12:
d7:9f:01:2a:10:c6:c0:f2:e8:86:80:aa:2d:d0:48:a9:85:46:
88:ec:48:e8:b9:76:e7:2e:83:7f:0c:e9:5d:f4:b4:95:c7:50:
db:25:bd:11:e7:af:cc:0a:d1:b8:2c:79:5b:98:00:8f:af:3d:
93:b2:f6:bc:70:4b:e7:85:bf:94:68:4f:10:41:c1:5b:ad:05:
41:23:4d:13:9d:48:2e:08:29:b6:ef:2d:ba:67:65:b5:73:e2:
84:9a:f0:2a:03:ec:48:9b:7e:36:75:de:4d:bb:08:67:78:d0:
6c:36:a8:45:d2:b0:1c:01:04:dc:97:f1:85:7d:d3:e3:e6:9f:
d6:87:df:66:61:a8:b2:b0:0d:e2:54:3d:1c:a1:46:5c:4a:6f:
78:f0:21:c1:a3:31:a0:94:64:3c:00:32:76:d4:d4:5d:f8:6f:
89:d1:cb:f5:27:2a:44:c5:4a:7a:68:c8:5c:cb:26:d8:86:04:
19:05:b2:a7:21:32:11:88:56:3f:b7:74:71:d9:fc:54:67:48:
67:d1:df:a8:97:0c:46:be:d5:7b:77:e9:54:f5:2c:b3:2d:6c:
93:56:0d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:14:39 2026 by rpki-client