Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
File: S0g59fGdvV8HCyEzK1HblgDs_x4.mft (raw, json)
Hash identifier: 3xeAPGNqpbltWvXfvECeWo3T6T62HuiwNJwYTeezh9A=
Subject key identifier: F1:8B:46:F2:30:A4:DE:EF:DC:C0:67:B7:45:68:E8:C7:A7:0B:E4:06
Authority key identifier: 4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
Certificate issuer: /CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Certificate serial: 01A0BEB054FA03B3AD1679B278634399B12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:00:22 +0000
Manifest this update: Sun 20 Sep 2026 12:00:22 +0000
Manifest next update: Mon 21 Sep 2026 12:00:22 +0000
Files and hashes: 1: 03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa (hash: VqgoLuy2vs3Aqndad7HT8djT9h+8QRfwiwp+Z6UCQlM=)
2: S0g59fGdvV8HCyEzK1HblgDs_x4.crl (hash: yzSdnYPpGBPtmz7AEIpyWvIil7ObBDq/4To+OHJQLuU=)
3: ZFi-VF-nsRadbtFze21Z8_HjAMk.roa (hash: Yk/ofossI179okCkrA1xAfMSkH76UYS/s2OiRTVcCg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:54:fa:03:b3:ad:16:79:b2:78:63:43:99:b1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Validity
Not Before: Sep 20 12:00:22 2026 GMT
Not After : Sep 21 12:00:22 2026 GMT
Subject: CN=f18b46f230a4deefdcc067b74568e8c7a70be406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:0b:df:0b:8a:1b:80:98:d5:6f:13:d2:2f:
eb:b6:15:90:9b:3f:ae:c4:d1:39:e2:c6:1e:4a:ef:
6a:d5:c2:60:79:c4:d5:0a:6e:26:80:f1:34:81:14:
d4:4e:cd:a4:f5:98:9e:a2:45:7f:ee:57:b7:2b:8e:
f2:da:1c:6c:14:c6:ec:56:48:3f:80:a9:4d:db:72:
dc:43:4f:a5:a0:cd:7e:37:fe:a1:f2:a7:c6:27:6f:
83:ed:93:eb:fe:43:57:74:e1:b6:0d:ee:ba:3e:8c:
ba:1f:24:7a:cd:7f:25:99:5d:8a:fe:97:75:4d:12:
b0:d5:4c:1e:97:42:7c:4e:df:e4:90:f7:8f:8e:bb:
7b:f6:b2:9b:9f:ed:a0:9b:a7:01:b8:10:e8:41:f0:
ef:51:82:f3:41:f0:fa:6c:8f:6b:65:bd:e9:b5:30:
a9:e9:c1:5d:a9:43:4f:b7:47:48:2e:32:36:af:f2:
9c:f0:c6:69:1a:30:67:7a:fd:a5:ee:23:40:71:88:
ca:02:e5:8f:75:e3:d4:bf:84:64:0f:c9:f1:61:37:
e4:1b:71:63:2d:00:64:90:5b:44:ea:70:4d:11:f5:
4d:a8:2f:d1:ea:a0:96:26:a0:b9:02:eb:26:fd:91:
a9:11:f7:87:23:c2:3f:cd:6a:8b:69:cc:00:2c:7a:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8B:46:F2:30:A4:DE:EF:DC:C0:67:B7:45:68:E8:C7:A7:0B:E4:06
X509v3 Authority Key Identifier:
keyid:4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e6:90:b0:5f:7b:a5:4d:08:36:99:91:68:c4:eb:8f:a0:9b:
4b:57:3a:4f:6c:b1:7f:ff:38:17:3d:62:0e:3e:8a:1f:8b:35:
b8:e7:c8:16:42:f0:f2:d2:eb:93:58:d2:b1:8f:ad:09:f3:84:
31:02:ad:54:da:0e:e8:91:a7:7b:33:f5:d1:da:01:b2:25:1c:
f8:17:fc:4e:05:f0:71:6a:8f:b2:59:d2:8c:8e:6f:0d:49:51:
90:8a:22:03:66:c0:77:da:c4:56:78:c3:fe:45:b0:83:dd:56:
c6:06:25:95:6d:15:7d:23:77:6a:cf:ed:02:7d:f9:ff:05:53:
2a:d5:ae:2b:d1:b7:3d:b7:da:82:1a:d0:9c:e8:1a:b5:c7:a1:
34:69:13:94:93:ac:9f:1d:31:ef:19:9f:61:f5:2b:6d:29:b5:
d2:08:e1:55:f3:64:d8:22:fe:8b:0b:f9:9c:cf:5b:c5:94:37:
27:e4:4d:36:fa:37:e4:6b:ac:e3:fa:91:6c:41:ff:bf:8a:b4:
a2:2e:9d:0f:b6:7b:1a:f4:bd:b3:e0:7b:6a:eb:f8:07:e4:2b:
c2:d0:98:1a:53:13:f6:51:24:ab:92:bb:a7:4b:32:96:6e:df:
7f:04:3c:69:1a:6e:4c:0a:6f:43:5b:72:97:66:ed:50:cd:af:
92:de:d6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:13:00 2026 by rpki-client