Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: dnWnOhDygHudkpohIRyfCUXpyTlTw/bvrhF6R6oH0F0=
Subject key identifier: 0F:AA:A3:EC:BF:7C:9E:1D:FB:A7:3A:68:95:DD:B3:95:D4:E8:54:82
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 019EC0A41ADEB8C58E56B6B04289726418D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0A86
Signing time: Sat 13 Jun 2026 11:00:40 +0000
Manifest this update: Sat 13 Jun 2026 11:00:40 +0000
Manifest next update: Sun 14 Jun 2026 11:00:40 +0000
Files and hashes: 1: 76Y2-HUPTiLdTCSIpYCkR2ZgGcQ.roa (hash: aIEXIJxpvH5c1txE7w8Ef9ChmAewpEGy4MTuP+uMjCA=)
2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: xSFlAiPOnIuSK5qkyitmkoReX0r4+BRGiTmBGC9xySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:1a:de:b8:c5:8e:56:b6:b0:42:89:72:64:18:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Jun 13 11:00:40 2026 GMT
Not After : Jun 14 11:00:40 2026 GMT
Subject: CN=0faaa3ecbf7c9e1dfba73a6895ddb395d4e85482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:4b:1c:a8:31:75:1b:6e:5d:ef:a6:6e:75:
d8:bd:aa:53:5e:b0:ce:a0:de:af:5a:f5:5e:1d:07:
67:b4:a6:ba:58:3e:35:60:87:9d:68:f1:bf:5b:9d:
b9:d0:8c:e9:23:bc:38:14:b8:eb:28:b9:68:67:4a:
cf:1f:b4:32:b0:df:a2:aa:b3:f6:67:81:3e:82:6c:
45:7c:b3:7a:8f:51:29:f4:5c:9c:eb:6a:e0:d6:83:
1a:90:23:20:45:4e:ec:97:1e:c5:b7:9c:87:a9:12:
45:25:87:6f:a4:12:e6:83:95:5e:92:f5:63:04:bd:
c8:f6:c5:f5:28:07:ff:7d:7c:da:78:17:8a:5e:4a:
b0:f4:e3:79:17:40:f8:cc:88:d8:c3:8e:c0:00:48:
62:fb:f9:11:ed:84:df:74:a7:84:19:c2:5d:3c:72:
d4:cd:06:5d:e3:88:29:85:34:f6:d8:2a:12:f6:4d:
92:8b:10:4c:e1:35:8a:d7:09:ca:dd:16:90:a4:b2:
a7:ae:2e:36:2c:71:9e:c7:2e:0d:2d:f0:74:ae:75:
3d:cf:fb:77:ac:fe:3d:cc:22:45:8d:ca:8f:81:aa:
b6:aa:55:53:8e:db:b1:48:26:b6:47:ab:2f:6e:18:
ab:29:e0:35:43:d8:f2:e6:0c:dc:fb:e5:43:f9:78:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:A3:EC:BF:7C:9E:1D:FB:A7:3A:68:95:DD:B3:95:D4:E8:54:82
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b5:56:d1:28:ec:6b:9b:b0:26:f1:b1:a5:dd:12:5d:13:95:
b5:60:5b:f2:8d:72:ea:a9:5d:04:bd:39:a8:b5:c5:d3:20:ff:
36:16:cd:08:bd:03:d3:32:ca:68:60:90:d4:09:34:d7:0e:09:
7f:4a:8b:28:18:a2:35:ca:b3:18:56:50:d0:10:3d:64:46:b9:
4d:91:67:56:34:6a:9b:f0:2f:1a:2b:1f:33:9d:cb:9a:ad:61:
f1:77:cb:12:0f:ca:a0:48:a1:1a:65:33:ef:e4:15:07:00:c5:
18:cc:1f:b6:d1:9a:0b:da:f0:76:33:35:af:b1:79:ac:7d:3a:
ca:1e:eb:59:e0:40:1a:95:ed:6e:77:d3:bd:62:f3:9c:74:e6:
43:4f:c8:8f:e0:6a:f5:3c:2e:13:fe:f1:21:4c:4d:1a:71:4b:
44:db:f0:a4:0a:28:df:3e:74:04:4d:e8:58:74:1f:d0:fa:70:
77:f8:e9:95:28:19:b4:80:11:af:1d:d2:e5:bc:40:4d:e2:6a:
4d:93:3e:99:13:84:ed:b4:5a:41:c4:63:8e:cc:be:2e:2c:9c:
d3:da:b0:7e:62:21:fd:05:7a:da:31:fd:c1:ae:d7:17:ef:67:
b8:b7:3b:1d:a0:a6:8d:0b:c0:ef:e8:5c:b2:c2:0f:dd:f7:d8:
f3:f1:84:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:53 2026 by rpki-client