Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: pRb8cRtxITTpeh/js87CFEONPSVAL4hAbwIS4ExPgnU=
Subject key identifier: 32:B8:06:53:86:B3:4F:16:C5:C4:8F:7A:57:BE:EF:87:C5:C5:CF:85
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019FAE2D775051ABC8B8A2E533B040B86467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0DB9
Signing time: Wed 29 Jul 2026 14:00:42 +0000
Manifest this update: Wed 29 Jul 2026 14:00:42 +0000
Manifest next update: Thu 30 Jul 2026 14:00:42 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: y7Btp/BGAS9Sz8LodGN27G7HP7B3zS7xum+WnNXl9eg=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:77:50:51:ab:c8:b8:a2:e5:33:b0:40:b8:64:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Jul 29 14:00:42 2026 GMT
Not After : Jul 30 14:00:42 2026 GMT
Subject: CN=32b8065386b34f16c5c48f7a57beef87c5c5cf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:53:33:88:1b:8b:70:39:e6:a4:85:db:4d:
f3:a0:c4:57:63:6c:d2:95:e7:34:9f:f9:a3:3d:55:
4c:58:38:c1:4e:be:1f:fa:6c:a2:54:ec:8b:77:4f:
08:eb:c5:46:f9:6f:80:99:7a:41:45:58:cb:ac:d8:
c8:d7:55:90:e9:a8:36:ae:a2:3f:6b:00:e1:52:7a:
a6:84:fa:ed:f7:39:a3:de:49:e0:d9:e2:83:c5:dd:
37:bb:d7:34:a5:5d:f6:5f:26:df:a8:79:f4:e1:35:
f5:20:ce:ca:ba:fd:b1:f4:03:97:68:7d:b7:7d:52:
ec:de:71:0f:87:ae:ea:8a:1f:9f:6a:46:a7:31:3d:
f7:c0:d3:e0:f4:1c:71:68:ea:60:94:61:b6:cd:67:
80:d1:f0:b8:ad:4d:83:83:c1:0e:f5:a4:75:61:74:
a7:68:0b:04:c4:7f:db:fa:e0:57:db:ed:8a:2c:dc:
ab:20:99:b5:36:2e:2e:39:e6:79:f1:de:45:c2:46:
c1:56:f0:69:fd:9b:3d:8d:30:5c:87:a5:52:a1:cc:
5b:be:4b:26:fc:68:76:6a:98:84:fe:d3:b3:4d:65:
cb:07:88:60:32:65:5a:d0:8c:2c:d3:c1:bc:5d:ed:
d6:e3:09:9b:65:d1:c5:71:94:bc:ad:0a:97:d1:cf:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B8:06:53:86:B3:4F:16:C5:C4:8F:7A:57:BE:EF:87:C5:C5:CF:85
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:da:de:35:ff:e2:81:ea:f5:01:4a:c6:e1:c5:1e:64:7b:6c:
0f:7e:90:42:81:d5:3a:8a:7c:cf:14:76:91:0c:e3:a5:63:da:
b6:bc:91:7c:2a:df:d2:51:8f:20:81:71:ff:9f:5c:78:29:4f:
7f:18:7d:f8:dd:3e:5b:53:79:96:d0:4f:31:09:20:b9:a2:f8:
73:9a:4f:e7:7a:02:e6:e9:cd:8b:8b:23:ef:ab:48:b6:df:41:
69:d5:99:ff:21:69:24:dd:06:5a:9c:d2:ee:80:94:e2:f0:9f:
83:68:16:eb:cb:41:9c:6c:4d:12:ab:20:a1:32:a5:f3:d4:fd:
a7:5d:c3:28:07:d0:f1:77:22:43:53:b0:48:05:0b:6c:24:7a:
9c:45:f4:be:d0:20:ee:c9:53:61:98:65:8e:20:3f:af:39:2b:
67:c7:68:b5:84:4a:e2:38:52:40:20:a0:f5:82:af:fb:b1:e0:
40:d2:68:ff:ca:a9:7e:4e:73:4e:99:a9:95:b7:d0:5d:03:44:
c1:14:66:3c:d1:9f:52:80:a7:0d:3b:1f:d2:8c:07:b7:9e:e6:
36:00:3e:df:41:fc:f7:5e:50:65:4a:d9:82:ef:69:29:66:e6:
e2:26:cf:aa:c3:e3:6c:51:76:55:69:66:63:eb:fb:eb:e0:ab:
35:a0:ec:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+uLXdQUavIuKLlM7BAuGRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTlhZmQyMWNiOGZiZTZiODUwODAwY2Q0YjQ5ZjI1NjJj
OTJiYTAwHhcNMjYwNzI5MTQwMDQyWhcNMjYwNzMwMTQwMDQyWjAzMTEwLwYDVQQD
EygzMmI4MDY1Mzg2YjM0ZjE2YzVjNDhmN2E1N2JlZWY4N2M1YzVjZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJTM4gbi3A55qSF203zoMRXY2zS
lec0n/mjPVVMWDjBTr4f+myiVOyLd08I68VG+W+AmXpBRVjLrNjI11WQ6ag2rqI/
awDhUnqmhPrt9zmj3kng2eKDxd03u9c0pV32XybfqHn04TX1IM7Kuv2x9AOXaH23
fVLs3nEPh67qih+fakanMT33wNPg9BxxaOpglGG2zWeA0fC4rU2Dg8EO9aR1YXSn
aAsExH/b+uBX2+2KLNyrIJm1Ni4uOeZ58d5FwkbBVvBp/Zs9jTBch6VSocxbvksm
/Gh2apiE/tOzTWXLB4hgMmVa0Iws08G8Xe3W4wmbZdHFcZS8rQqX0c8KJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK4BlOGs08WxcSPele+74fFxc+FMB8GA1UdIwQY
MBaAFEupr9IcuPvmuFCADNS0nyViySugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmIt
ZjY5NjIyNDI1NjUxLzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmItZjY5NjIyNDI1NjUx
LzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNreNf/i
ger1AUrG4cUeZHtsD36QQoHVOop8zxR2kQzjpWPatryRfCrf0lGPIIFx/59ceClP
fxh9+N0+W1N5ltBPMQkguaL4c5pP53oC5unNi4sj76tItt9BadWZ/yFpJN0GWpzS
7oCU4vCfg2gW68tBnGxNEqsgoTKl89T9p13DKAfQ8XciQ1OwSAULbCR6nEX0vtAg
7slTYZhljiA/rzkrZ8dotYRK4jhSQCCg9YKv+7HgQNJo/8qpfk5zTpmplbfQXQNE
wRRmPNGfUoCnDTsf0owHt57mNgA+30H8915QZUrZgu9pKWbm4ibPqsPjbFF2VWlm
Y+v76+CrNaDs7g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:11 2026 by rpki-client