Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
File: S0g59fGdvV8HCyEzK1HblgDs_x4.mft (raw, json)
Hash identifier: Nm4jK7inKehDmuOh+Kxz2LLZqU+fpJoD3gL6yo+J5KQ=
Subject key identifier: FA:6C:F2:27:B1:76:F4:AF:B3:03:4C:A3:B3:57:45:7C:65:0D:A6:C6
Authority key identifier: 4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
Certificate issuer: /CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Certificate serial: 019FA8990F60163895908F5E4C03E55D5CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:30 +0000
Manifest this update: Tue 28 Jul 2026 12:00:30 +0000
Manifest next update: Wed 29 Jul 2026 12:00:30 +0000
Files and hashes: 1: 03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa (hash: VqgoLuy2vs3Aqndad7HT8djT9h+8QRfwiwp+Z6UCQlM=)
2: S0g59fGdvV8HCyEzK1HblgDs_x4.crl (hash: hJ6DTTvVYhIcylUTIb0p9vgoPXaKY15pe41/0z9Ls6E=)
3: ZFi-VF-nsRadbtFze21Z8_HjAMk.roa (hash: Yk/ofossI179okCkrA1xAfMSkH76UYS/s2OiRTVcCg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:0f:60:16:38:95:90:8f:5e:4c:03:e5:5d:5c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Validity
Not Before: Jul 28 12:00:30 2026 GMT
Not After : Jul 29 12:00:30 2026 GMT
Subject: CN=fa6cf227b176f4afb3034ca3b357457c650da6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:e9:3c:c2:b7:5a:ec:56:e8:cd:39:a5:04:
84:03:c0:ea:78:84:d0:24:e8:01:c1:85:df:f5:24:
60:63:bd:b2:23:12:6c:a5:96:24:ba:6c:eb:7b:0b:
27:ef:fb:06:36:10:0a:ae:16:1f:10:20:16:c4:d3:
0a:86:c0:aa:b1:48:1c:e9:85:8a:ca:4c:20:26:01:
eb:7e:59:3f:c3:95:84:0a:70:19:01:11:a7:3f:5d:
be:04:16:c8:7f:24:82:c4:7f:0b:16:dd:81:d5:09:
7e:44:87:5c:6e:66:6b:70:70:c3:cc:84:08:72:8c:
ee:db:4e:b2:3a:a0:68:7c:50:ea:35:8e:fb:60:f4:
60:b6:b1:03:4e:de:c9:93:19:c1:03:d3:f1:3f:34:
ac:7a:13:29:d6:d0:13:c2:73:9b:dd:ea:c2:63:be:
ca:36:2f:78:d1:31:6c:4a:15:7b:7e:4c:af:55:9e:
92:1a:db:db:04:dc:b2:06:88:50:96:25:2c:d0:82:
34:e9:b1:79:28:0f:09:7b:a8:01:7c:2a:3d:86:d1:
e0:e7:cc:8b:57:3c:59:e0:62:67:ec:3d:85:46:c0:
ba:61:46:b7:d3:83:a2:94:58:42:76:c7:c7:73:f5:
40:c6:a2:e2:98:e1:70:91:eb:24:e0:00:47:8f:50:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:F2:27:B1:76:F4:AF:B3:03:4C:A3:B3:57:45:7C:65:0D:A6:C6
X509v3 Authority Key Identifier:
keyid:4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6a:93:93:f4:9b:e3:33:dc:d9:2a:c3:92:c4:d9:a7:79:42:
35:7e:55:2b:a1:6f:64:46:13:06:8f:7b:19:d6:b0:1b:8b:a2:
d5:26:24:4a:c7:e4:0c:c4:79:5e:5a:fa:c5:5b:33:63:4c:20:
a9:bb:ad:46:3c:d6:d3:1a:94:d8:5c:0e:37:2f:51:63:73:67:
c5:d5:59:e0:2e:3a:50:e5:df:d5:f3:b0:ef:fe:25:1f:a7:d2:
98:c1:03:f3:89:75:28:27:de:40:3a:bf:cc:bb:f5:51:48:0a:
23:23:bb:58:ef:43:26:d3:ca:4b:d5:00:8d:2c:ac:bd:a5:ef:
a8:a6:91:bb:93:83:a5:c4:df:58:03:06:64:d5:a9:fd:90:05:
9f:d5:3a:c4:e1:8b:ac:3a:69:89:25:6c:7e:d4:50:5f:a7:d7:
9f:6b:12:64:9e:04:0c:f9:64:5f:6f:e7:fe:5e:85:62:f3:51:
f5:8d:02:3e:81:bb:d8:f9:7f:a2:0b:52:d0:bf:b8:f1:48:6f:
45:d7:d6:94:9a:7b:5a:8a:90:80:7d:d3:df:74:62:fa:4e:fe:
a2:25:f6:a7:cb:33:64:0b:83:d4:06:a2:c5:19:ea:1e:fd:a4:
eb:a3:24:2c:18:4b:ec:1b:31:f3:50:22:e1:c9:80:e7:71:2e:
ed:93:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:14 2026 by rpki-client