Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: ksYxGLkcQTFOVZFn/Y8QQbu4rhzclH+UN3aHX/EFehs=
Subject key identifier: 02:C3:60:7A:9F:C6:29:46:96:64:F1:EC:68:05:E7:BD:6D:A7:F8:CF
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 019FACACA726FD62BD2793DDD857FD0DB61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0B01
Signing time: Wed 29 Jul 2026 07:00:23 +0000
Manifest this update: Wed 29 Jul 2026 07:00:23 +0000
Manifest next update: Thu 30 Jul 2026 07:00:23 +0000
Files and hashes: 1: 9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa (hash: HOLT/uX07DZotEdYvRZ0JcT8iyC7/R6c7JRLNLUWdZM=)
2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: IaBF71TLY8GauoJa1WLzlAoZPvQpVAf9BMyJ8slaQEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:a7:26:fd:62:bd:27:93:dd:d8:57:fd:0d:b6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Jul 29 07:00:23 2026 GMT
Not After : Jul 30 07:00:23 2026 GMT
Subject: CN=02c3607a9fc629469664f1ec6805e7bd6da7f8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:9a:db:77:1c:4a:75:32:f6:b6:f3:63:e4:
b1:02:5d:6c:2e:90:0c:e1:42:a4:30:69:34:df:5b:
c5:f6:fe:97:ad:a5:4b:b4:b3:ac:5c:1d:6b:a4:15:
a6:52:c1:28:40:99:49:e1:7f:ba:6a:4c:72:28:48:
bc:25:61:de:ba:d3:43:4c:a5:6d:8d:fe:1f:a7:05:
e3:93:f4:99:5c:f0:c7:f1:6e:e7:28:d9:6f:d9:db:
4c:13:7f:29:bc:cf:5e:a5:73:c4:b5:7a:17:a2:5c:
d5:13:2b:0b:db:5a:6b:8c:c3:2c:22:e1:d3:3f:1f:
e8:42:0e:c1:af:d2:1f:b6:bf:cf:07:95:b9:d4:32:
c5:d3:95:ea:82:03:f4:56:14:17:df:8f:7f:c2:d5:
71:c0:ad:62:d3:f7:54:d9:e6:20:09:d5:7b:e8:9a:
a2:0a:c4:7e:28:09:ae:a2:a0:8d:56:bb:16:f2:db:
05:cb:cd:49:cd:a9:f4:a5:3b:f6:dd:ef:47:72:1b:
25:4a:df:60:fb:22:45:8b:db:5c:17:16:b8:93:d2:
2a:bc:aa:19:c4:3b:33:54:a0:19:62:47:48:72:35:
cd:de:3c:91:b5:b9:b3:88:e4:ef:3b:91:11:6d:55:
8f:fd:ab:db:cc:a3:b2:f2:d1:f0:b1:df:0d:66:f1:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C3:60:7A:9F:C6:29:46:96:64:F1:EC:68:05:E7:BD:6D:A7:F8:CF
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:41:c9:db:4d:25:48:b4:d1:ac:40:85:93:67:f5:86:6d:56:
96:0f:63:6d:8a:3e:a0:a6:3e:93:74:dd:25:ea:28:0a:b2:69:
70:9a:88:83:ff:d2:19:3d:27:2c:b8:a4:cf:1e:0a:97:66:b3:
b8:d4:2c:3d:df:b2:4c:56:b3:8e:f9:ce:4b:5b:3c:f3:53:49:
4e:64:f7:0b:59:b3:3a:cc:29:eb:bd:cc:d1:7d:0c:76:27:50:
37:d1:92:cf:62:c2:52:e9:be:01:f9:fc:e5:52:80:e7:30:3b:
b6:aa:85:13:fb:d9:ef:92:d3:0c:e7:af:4d:b6:3f:70:3e:d4:
11:fd:c3:5c:40:a7:0d:f2:aa:34:a6:5f:f8:be:07:e6:15:c5:
c6:d2:9f:98:ac:61:11:e1:18:17:01:c9:48:1e:f2:5c:ba:25:
72:cf:ab:a3:10:f8:98:ae:1b:6f:96:68:8e:48:03:84:2c:69:
f6:9f:de:e1:41:c8:f6:de:46:9f:43:7f:db:6e:d2:93:9a:64:
58:76:2c:f1:ba:01:d2:64:90:92:c5:47:0b:76:9a:b1:9f:c1:
9f:91:22:a9:cf:b1:97:09:42:11:29:6a:ff:4d:44:98:8c:71:
0d:23:07:bd:b7:3c:9c:0a:1f:db:a7:9b:82:90:9d:cb:fc:27:
f7:d7:0d:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srKcm/WK9J5Pd2Ff9DbYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjRmOGMwZTFiMzlkOGE4ZWY4ZThjOGI1YTBmZmVlMmI1
M2I1ODcwHhcNMjYwNzI5MDcwMDIzWhcNMjYwNzMwMDcwMDIzWjAzMTEwLwYDVQQD
EygwMmMzNjA3YTlmYzYyOTQ2OTY2NGYxZWM2ODA1ZTdiZDZkYTdmOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJqa23ccSnUy9rbzY+SxAl1sLpAM
4UKkMGk031vF9v6XraVLtLOsXB1rpBWmUsEoQJlJ4X+6akxyKEi8JWHeutNDTKVt
jf4fpwXjk/SZXPDH8W7nKNlv2dtME38pvM9epXPEtXoXolzVEysL21prjMMsIuHT
Px/oQg7Br9Iftr/PB5W51DLF05XqggP0VhQX349/wtVxwK1i0/dU2eYgCdV76Jqi
CsR+KAmuoqCNVrsW8tsFy81Jzan0pTv23e9HchslSt9g+yJFi9tcFxa4k9IqvKoZ
xDszVKAZYkdIcjXN3jyRtbmziOTvO5ERbVWP/avbzKOy8tHwsd8NZvGMewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALDYHqfxilGlmTx7GgF571tp/jPMB8GA1UdIwQY
MBaAFEtk+MDhs52KjvjoyLWg/+4rU7WHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUt
OTVkNWUxNmNkZGVmLzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUtOTVkNWUxNmNkZGVm
LzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkHJ200l
SLTRrECFk2f1hm1Wlg9jbYo+oKY+k3TdJeooCrJpcJqIg//SGT0nLLikzx4Kl2az
uNQsPd+yTFazjvnOS1s881NJTmT3C1mzOswp673M0X0MdidQN9GSz2LCUum+Afn8
5VKA5zA7tqqFE/vZ75LTDOevTbY/cD7UEf3DXECnDfKqNKZf+L4H5hXFxtKfmKxh
EeEYFwHJSB7yXLolcs+roxD4mK4bb5ZojkgDhCxp9p/e4UHI9t5Gn0N/227Sk5pk
WHYs8boB0mSQksVHC3aasZ/Bn5Eiqc+xlwlCESlq/01EmIxxDSMHvbc8nAof26eb
gpCdy/wn99cN7Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:46 2026 by rpki-client