Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier: rXkebhI18Vxv31nF5d+mq36jwIi+6xi+r0CRK4ywxWc=
Subject key identifier: CC:FF:B5:49:47:C4:90:56:0A:3D:9A:F7:99:09:19:82:61:5D:3B:D4
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 01A12F8F76C0A234AF08FA60A45AF61FDE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number: 1AA8
Signing time: Mon 12 Oct 2026 10:01:33 +0000
Manifest this update: Mon 12 Oct 2026 10:01:33 +0000
Manifest next update: Tue 13 Oct 2026 10:01:33 +0000
Files and hashes: 1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
3: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
4: dw9DFWakqWyGOvPpVMr5LqWzzOU.roa (hash: vpyPXqpUatnsbNFIl69kvcHIfHdO0INTOAaGxcZLEhQ=)
5: kSkniVRVZqjXlp9BCZT6zQWlnDU.roa (hash: FfDKz/98X7m6YKQq0UNqzZ0ctHS3WQFyRiYlyLAtxCw=)
6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: g2AElUaUzyCRhTPijoDBNkD3lLHWgD3bPVA0gl5iAoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8f:76:c0:a2:34:af:08:fa:60:a4:5a:f6:1f:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Oct 12 10:01:33 2026 GMT
Not After : Oct 13 10:01:33 2026 GMT
Subject: CN=ccffb54947c490560a3d9af799091982615d3bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:32:e4:19:a2:87:df:b4:3d:8b:8d:f6:4b:
7f:30:80:b8:25:18:f4:de:61:ac:dc:62:08:de:82:
03:1b:18:05:4d:b2:f2:ae:74:f2:64:93:25:42:0d:
c5:fc:72:01:75:9c:e1:15:e7:bb:25:77:1b:09:d5:
cf:c2:74:ce:5e:d1:b0:c9:53:e2:3c:13:f4:78:93:
f0:7c:41:af:d5:68:74:7f:c5:06:72:9d:c6:ea:76:
d7:d5:4b:80:73:a0:15:bd:44:a8:9b:81:1c:6b:7a:
cd:99:7a:0f:61:b0:f2:a3:bf:2d:bd:5c:33:d3:e4:
41:27:21:77:a7:5d:a7:a7:b8:41:23:f7:65:7f:55:
78:58:d7:4a:07:20:4f:56:30:bb:a9:2c:86:ca:a5:
69:8c:ad:71:5c:6e:21:fc:25:4d:86:19:b6:69:0a:
49:3a:03:da:a8:65:94:96:f9:b4:37:16:9b:24:2c:
bf:13:ae:68:2a:18:b2:de:78:92:f2:32:99:c4:5c:
28:80:98:19:b6:ee:40:71:a4:c3:2c:a3:5a:43:f9:
75:fa:d5:bc:81:cc:e8:4b:e9:ec:95:ba:92:02:f6:
b3:68:e9:bd:b9:19:7f:ed:cc:9c:5e:c4:26:39:13:
b4:92:ca:c3:3c:fd:4f:0d:b2:57:02:d0:e9:86:34:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FF:B5:49:47:C4:90:56:0A:3D:9A:F7:99:09:19:82:61:5D:3B:D4
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b2:8b:5a:74:79:01:e2:7b:17:52:06:40:8c:8a:f6:3f:3c:
f5:c3:35:0d:72:5b:47:44:16:72:15:7e:21:d9:24:e8:26:2b:
48:40:05:9e:2d:2f:a9:05:27:99:5d:b9:e7:af:c7:ab:f5:5a:
f8:09:dd:95:10:75:06:e7:e4:8d:d1:1e:8e:02:b0:77:77:e7:
d4:d9:f9:8b:8d:fe:3d:59:58:9b:bb:57:2f:a1:19:79:91:4a:
db:36:51:51:a3:11:8b:66:0c:f8:42:a1:ff:11:61:d6:e5:51:
ba:d6:1b:4d:95:63:bd:6c:35:0c:31:5f:54:81:23:7b:86:0e:
92:3d:90:02:b2:e1:bf:34:24:83:ee:1c:95:95:62:a1:29:cf:
66:74:01:71:7d:6c:9e:d1:b7:d8:23:18:82:11:52:29:75:66:
df:be:7c:4c:96:b7:5d:51:7c:94:fe:1d:a6:39:e2:33:1d:8d:
bb:d6:08:30:7c:03:0c:f3:da:3e:e8:6b:90:6c:cd:0a:7a:91:
1f:16:ac:be:c6:03:1c:b0:7e:1a:ce:71:87:8c:f2:08:a8:ce:
60:ac:3b:bf:37:ab:17:c3:5c:0e:a1:bf:5c:32:f5:fc:97:b2:
2e:ec:03:34:25:e0:07:00:0e:f0:e2:05:87:03:f1:ca:31:37:
d0:e7:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 14:53:08 2026 by rpki-client