Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
File: S5nNYSQguFk0kdhobOTEr4W5CtU.mft (raw, json)
Hash identifier: wB3lwff7SekuwpsqO4Ckdb9zWgq/m2Je64MOFOObd8g=
Subject key identifier: 3D:F2:D9:2A:D8:8F:BE:5D:44:84:C2:39:97:7E:B2:12:2F:5A:BA:CE
Authority key identifier: 4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
Certificate issuer: /CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Certificate serial: 01A137B6308DDC9145519151D56FA09C393C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
Manifest number: 04D2
Signing time: Wed 14 Oct 2026 00:00:49 +0000
Manifest this update: Wed 14 Oct 2026 00:00:49 +0000
Manifest next update: Thu 15 Oct 2026 00:00:49 +0000
Files and hashes: 1: 8DpSJKviZ7cSTOBb1JPdqUAWjZI.roa (hash: KJ3gvkRDPvd6FYiFgYbSLnhGd4p7f+DOyl+s6ewmo1Y=)
2: NDIauRSXxmTRxMaMxKWAcWs2hiY.roa (hash: niReydPhxoIGyEf8VzGlx6ngoJ93K3AzsN+453eTTKQ=)
3: S5nNYSQguFk0kdhobOTEr4W5CtU.crl (hash: OoREJQSXm5RwmjzPMh6IlOSwSPF47F6fo253wdBNpZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:b6:30:8d:dc:91:45:51:91:51:d5:6f:a0:9c:39:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b99cd612420b8593491d8686ce4c4af85b90ad5
Validity
Not Before: Oct 14 00:00:49 2026 GMT
Not After : Oct 15 00:00:49 2026 GMT
Subject: CN=3df2d92ad88fbe5d4484c239977eb2122f5abace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:e9:4e:47:0a:eb:91:b1:fd:f0:55:de:63:
a2:f8:aa:8d:b2:97:27:79:4a:72:ed:95:dc:f6:d6:
8e:44:97:6b:57:2f:e0:c0:8b:3d:b7:50:e9:cb:98:
26:f7:9b:bb:dc:a0:ef:4f:df:fc:5a:2b:ca:1b:75:
91:1f:c1:17:8f:84:ad:b0:91:c5:b0:ea:49:8e:ad:
19:4e:6e:75:a3:02:1c:be:7d:9c:e2:d2:cc:e4:99:
4a:4c:bb:eb:ed:d9:89:5f:a2:9e:3e:4c:96:54:00:
bd:11:3c:9f:6c:b9:22:76:a6:74:39:2c:8c:07:7c:
93:15:58:8f:a9:f4:f3:8a:bb:7c:02:a6:75:e5:5d:
b3:a0:df:c1:9f:a7:ca:7a:41:2e:39:45:46:57:0b:
21:28:0c:82:9d:a0:6d:7f:a8:80:1b:63:b6:d2:32:
67:a0:a4:09:82:a3:a4:97:4b:57:d3:8b:c3:6b:15:
bd:18:c4:c2:6b:0c:6e:ef:f2:51:1e:82:7f:c0:9f:
99:d9:04:6c:a6:8f:37:f2:94:22:d7:4b:04:90:a2:
c7:49:b8:98:29:ae:54:1d:47:ec:2e:4e:16:ec:75:
50:0c:0e:76:3b:19:39:2e:2b:05:3d:be:cd:e2:7b:
fd:89:88:e9:da:e3:d8:6d:f8:f8:c7:86:a6:c0:53:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:D9:2A:D8:8F:BE:5D:44:84:C2:39:97:7E:B2:12:2F:5A:BA:CE
X509v3 Authority Key Identifier:
keyid:4B:99:CD:61:24:20:B8:59:34:91:D8:68:6C:E4:C4:AF:85:B9:0A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5nNYSQguFk0kdhobOTEr4W5CtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7c1b17-b7b5-4401-b0a7-974720889ffa/1/S5nNYSQguFk0kdhobOTEr4W5CtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:89:f4:9a:53:6f:a0:84:af:55:26:9f:33:fb:84:bb:0a:a5:
2f:9b:89:77:fa:57:b3:49:7f:b3:f4:41:ea:82:5e:72:66:ee:
1b:62:64:0d:3d:a4:92:34:20:d6:1e:49:92:60:6a:18:53:4f:
3b:c8:c3:b5:28:42:49:c8:76:db:d4:b9:3b:ce:c5:95:37:10:
c9:54:2c:15:56:ab:56:e2:5e:80:b7:31:1e:28:bf:57:ff:11:
61:b2:ba:cf:96:d7:6a:15:02:fb:78:ad:a3:d8:62:f1:9d:29:
05:94:67:17:6d:62:3b:0b:37:44:7b:bb:64:ea:b9:e7:92:09:
bd:0b:52:be:63:d7:89:8f:ca:63:a2:ae:ef:4b:58:fa:e1:2a:
1b:1a:a3:df:b2:de:61:cd:0a:f9:31:d1:87:c5:a9:9d:7d:b7:
e8:d3:76:5d:17:a1:dc:b2:ba:06:07:3d:d3:22:3a:ff:94:57:
f1:98:63:05:35:23:42:5d:f9:9a:ef:1c:4a:ae:27:d9:62:e5:
93:a1:c0:a8:76:ff:dd:52:b6:39:f7:87:67:be:02:53:7b:a7:
3d:a3:6f:54:be:a4:f9:34:a7:dd:9b:95:07:03:45:0f:9a:99:
b7:b5:c7:43:db:ae:0b:71:5f:9e:40:2c:40:5d:a8:f8:1e:ee:
76:0f:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:53:48 2026 by rpki-client