Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: tPciZf+ALmMqWqvMquIqEVDXoe/YK7BvoTSuZrnuf+g=
Subject key identifier: 4B:96:18:AD:33:2A:0A:1C:1A:16:05:6C:BA:72:14:33:3B:F4:C5:49
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 019FA7BD3163DD4D0CA583989CEC9BF864D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 08:00:21 +0000
Manifest this update: Tue 28 Jul 2026 08:00:21 +0000
Manifest next update: Wed 29 Jul 2026 08:00:21 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: 8F6zFRjKFhqA0Y/gf6eFY2Av8cP5WGPRO67xAnYRhzI=)
2: nPrrHTYTNDyw_L1eEGSJYuwqgp0.asa (hash: rMc0Aj00lJIniIoH5S83QDg35h6VGczGqXsIv4euxXE=)
3: rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa (hash: RRythu0hdE7VczlwlFEUnLZKoxWCSbWPkOFFbdjDuKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:31:63:dd:4d:0c:a5:83:98:9c:ec:9b:f8:64:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Jul 28 08:00:21 2026 GMT
Not After : Jul 29 08:00:21 2026 GMT
Subject: CN=4b9618ad332a0a1c1a16056cba7214333bf4c549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:d5:de:c4:4b:ba:6e:40:a9:ae:3f:4a:50:
01:b1:b5:06:2d:59:18:19:37:4a:f6:02:60:7a:de:
10:e4:bd:10:59:55:fd:05:bb:22:56:ab:31:3b:7d:
80:0b:db:f2:53:30:c7:fe:91:51:de:ae:bf:73:2b:
0c:70:b1:74:31:91:1d:71:ec:92:ff:80:7d:44:4d:
b6:cd:1e:93:fc:0c:fe:ba:94:fa:f5:4c:d8:f2:c5:
3c:23:2e:be:58:01:46:8b:7b:9d:a3:8c:7d:d9:6b:
9d:95:f4:b5:88:9e:5e:a6:4b:2f:cf:08:62:bf:eb:
cb:5b:e4:70:d7:7a:a7:72:45:6c:68:2b:0b:06:74:
5d:98:21:09:cc:21:6e:0e:83:f0:25:3c:dd:35:d1:
78:74:e1:73:a0:8e:e9:29:f6:51:91:34:80:7c:c5:
0a:6d:64:94:19:7b:7d:a9:9b:f7:fc:69:31:dc:ee:
30:67:60:db:4e:34:c5:4f:dc:2d:71:b3:48:b4:53:
25:25:f6:f4:ec:6b:55:b1:bc:8d:02:eb:53:e7:67:
52:be:2e:d9:c3:df:b5:9d:93:69:d2:81:ea:a1:83:
56:da:27:b6:a4:37:e8:64:a6:a3:f9:31:96:43:49:
29:80:04:73:7a:cb:32:a4:82:88:cb:fc:78:c1:a7:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:18:AD:33:2A:0A:1C:1A:16:05:6C:BA:72:14:33:3B:F4:C5:49
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6e:7d:94:6b:b8:be:51:43:4f:a4:35:c7:ed:e4:db:4a:23:
af:53:cc:ef:09:7e:8a:63:58:be:ca:b0:b6:63:0a:77:d0:18:
88:f3:22:83:2d:85:3b:bf:46:b0:83:0a:7d:8f:dc:6d:79:30:
38:1e:7e:ef:7b:24:bf:74:57:ee:ba:e1:6c:fc:95:32:19:9c:
bf:2a:fd:de:fb:40:4f:1a:b6:0c:13:93:ae:29:90:95:30:68:
6c:94:09:93:62:4c:e0:b2:d2:d4:ec:3b:6c:f9:3c:40:c5:8c:
8b:f9:9e:ce:8e:1e:14:f7:c9:b2:ed:8c:99:b5:4b:44:e9:6e:
f7:06:00:c0:60:75:e7:8b:1b:7a:f2:e0:ea:ad:bf:c9:37:02:
48:1d:cb:ab:31:0c:9c:51:a2:82:ea:3e:26:14:65:3d:48:03:
c0:e2:98:ae:6d:90:48:9e:f5:02:ca:4b:b6:d0:30:c2:2f:c0:
68:03:b1:77:da:7a:22:e0:27:5a:79:c4:46:e7:2c:60:22:fb:
51:90:04:1a:f5:bc:bc:22:89:6c:99:44:0d:3e:67:6a:c0:51:
f5:2f:c2:a0:56:0b:cc:41:27:02:07:67:f8:7c:b9:db:bf:45:
e8:3e:5c:72:f3:00:7a:6c:90:70:ed:fd:03:18:75:56:d1:53:
0b:05:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:38:23 2026 by rpki-client