Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: YfSCloL42zXrC8RloDt7vbxLG2KZOJ+o1dSlayVYNTo=
Subject key identifier: 9D:08:8D:23:55:D8:3F:63:3B:2C:BE:2A:0F:92:DF:34:04:62:F0:1D
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 01A0EC9C95DA7CE59E7E1ECF7E04DD8FA2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 10:01:19 +0000
Manifest this update: Tue 29 Sep 2026 10:01:19 +0000
Manifest next update: Wed 30 Sep 2026 10:01:19 +0000
Files and hashes: 1: 1j-cndh73up45TjcJHDMi8wQ8Xc.roa (hash: KpN3w6f7/yCpGmCh1vdlXsD6GVlxoKm9AQfV9ZcUMXk=)
2: 44Nps6a4A0iJ-S5FNbgCYPVDl-g.roa (hash: +egeaF2cFoduaGGr7Icg4ElpBQ+dGnmrC99v7y4WFaA=)
3: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: jX0t2cW2POhDUD3S8svreGhK9Db2+nyfT8LB15NY/TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:95:da:7c:e5:9e:7e:1e:cf:7e:04:dd:8f:a2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Sep 29 10:01:19 2026 GMT
Not After : Sep 30 10:01:19 2026 GMT
Subject: CN=9d088d2355d83f633b2cbe2a0f92df340462f01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:06:0e:88:64:c4:59:49:2f:65:b4:7b:9b:81:
36:3a:49:c7:35:d3:c7:f9:20:34:23:5c:e4:bd:fa:
cd:7d:32:bd:04:12:e5:4f:03:50:d0:1e:2d:c8:d4:
03:12:4d:26:f7:2f:da:0b:46:12:3f:2b:cd:db:90:
47:a0:d6:27:ed:49:9b:0c:60:7a:26:1b:2a:d1:3c:
da:48:9b:a9:9e:47:d1:fa:6f:b9:34:84:4d:68:3a:
9a:db:95:ac:09:d6:4f:6e:b2:20:40:9b:ae:05:ae:
36:98:df:d7:58:42:45:4f:aa:8d:63:d8:4e:30:75:
26:e7:b5:fc:62:4d:fb:18:b4:6d:dc:4b:ad:d1:25:
13:c9:7a:f6:18:fc:49:b7:81:dd:df:cd:9e:cb:cc:
4e:c3:43:2d:ba:62:3d:26:4d:d4:51:69:d1:f3:49:
3c:1f:59:06:5f:89:be:95:f8:91:a1:81:2b:d1:48:
e9:a1:a4:50:ca:75:8f:64:68:8b:99:f8:f2:7f:a6:
71:34:05:96:b2:ec:49:a3:f3:b3:38:69:23:8b:4c:
de:fd:14:7d:7f:4d:f6:b3:30:22:0f:00:1c:44:f4:
0e:75:97:86:0e:b7:b0:07:d1:f6:9a:a3:e3:12:09:
19:5e:56:ab:6d:cc:f8:77:67:19:c6:c9:7a:03:29:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:08:8D:23:55:D8:3F:63:3B:2C:BE:2A:0F:92:DF:34:04:62:F0:1D
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:f0:97:3b:1c:f4:0b:08:8a:83:e2:22:5f:54:d8:65:06:
3c:6b:05:5f:d0:09:8f:05:5a:01:a1:e7:39:9e:94:db:3a:ec:
81:8d:df:d1:d7:a6:e5:0c:29:4c:d5:ff:57:d7:45:9a:a7:97:
c8:9b:d8:8e:af:74:9b:a2:d3:44:85:bb:67:43:74:c1:de:2a:
a7:ec:e8:2b:a1:28:13:04:87:e3:6c:ba:fb:6d:63:d5:91:8c:
3c:5f:e5:12:b4:8b:26:f6:40:f0:45:a5:8b:a7:8b:fd:61:f2:
0c:55:2b:8f:5b:5b:5d:83:03:7d:f0:09:9b:64:5d:4b:4e:29:
86:3f:d2:e0:72:ac:6b:1c:ee:6a:7b:29:6e:12:78:0c:d5:cb:
a0:a0:56:0e:51:7c:9e:a4:04:43:a5:b8:07:02:09:9c:d1:68:
22:40:91:b6:f0:e3:9a:a2:7a:55:2d:21:22:d0:44:1b:4d:49:
35:f7:e8:2a:05:5b:f8:d8:5b:80:7b:02:41:81:06:ff:a4:21:
d3:48:bf:96:7a:a3:e1:ac:a2:4d:da:48:f0:c6:b2:79:10:c3:
4d:ba:4a:1a:6d:d4:3f:25:d9:d6:05:bc:2a:ae:a5:1f:10:cf:
e3:61:a3:7a:51:e9:88:b7:78:97:91:e2:98:cc:13:c5:2c:26:
cf:75:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:14:24 2026 by rpki-client