Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: 8fAv0w8dWjIK6pyleQj3rOBDcv1czs65QC9ORfst4gM=
Subject key identifier: 59:8D:B6:D7:B7:AE:03:3A:3B:00:E1:DB:43:CA:EC:98:2D:80:80:28
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019CABA25CC5D7B75D79424E77ECBA707793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0C2A
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: RMI7+KbLqWtOivGYkHAmn10HHXahnB4RghC/YE9ESHs=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5c:c5:d7:b7:5d:79:42:4e:77:ec:ba:70:77:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=598db6d7b7ae033a3b00e1db43caec982d808028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:af:09:13:60:9f:d0:fe:20:8e:30:5e:4b:
47:a1:7d:cd:4f:4f:a4:54:db:63:ec:49:a7:6c:9f:
90:45:d4:92:94:6b:db:d5:c2:ec:fe:23:de:74:19:
3a:fa:17:de:4f:7c:ed:22:48:1d:b9:dc:6b:bf:bd:
3c:a1:00:c9:3c:1e:3e:17:ac:14:38:04:46:5f:47:
32:be:2f:02:d1:2e:a9:a9:db:b5:72:4d:12:97:75:
1b:4d:04:3b:dc:86:82:16:fe:7d:b4:3e:e6:fb:a2:
11:af:42:7f:73:5b:fb:91:92:1f:a8:50:60:90:14:
a6:2f:41:0a:86:e4:1b:d7:9d:d6:65:9e:f5:83:dd:
b4:8f:dd:68:84:45:38:48:7e:1e:0b:16:13:f2:95:
3e:b4:de:f7:56:e5:dc:60:a0:2a:8d:7e:1a:bf:93:
ff:b1:e1:05:10:3e:11:57:92:d4:16:b0:b6:49:13:
18:86:37:3b:bb:26:25:93:5c:53:e6:cd:fa:91:1e:
70:1f:b4:ba:17:d9:db:06:47:b8:ab:d5:c9:41:4f:
32:a1:3c:eb:ef:c6:d7:ba:af:16:25:91:fb:be:b4:
5e:5c:c0:e1:13:a7:cc:6a:a6:72:21:8b:7b:ce:3c:
2f:3a:41:06:d3:c0:7f:d7:9c:bb:3b:21:1f:90:57:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:B6:D7:B7:AE:03:3A:3B:00:E1:DB:43:CA:EC:98:2D:80:80:28
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a6:92:ef:58:49:ef:b2:a2:2e:a8:b6:d1:bc:70:78:05:6c:
43:4f:4c:54:68:e6:59:c0:4d:cf:7a:e8:ed:0e:c3:5a:37:49:
a6:e7:55:62:e5:65:89:dc:4e:73:7e:a7:67:f5:7b:1f:cf:6b:
90:c9:b9:b3:a0:29:3e:33:2d:27:c7:b6:10:17:91:e9:24:90:
89:5b:34:f8:b8:7f:02:33:d3:34:6a:b4:77:fc:bb:5c:5a:bc:
07:9d:87:20:f6:42:16:26:52:9d:6c:7d:7d:6d:1b:40:88:37:
6d:f3:a7:47:b1:61:b3:11:cd:50:a8:7b:3e:08:92:f4:70:58:
a3:5a:ec:03:50:5f:c6:40:f3:4d:0e:f7:5d:35:9d:d1:92:bd:
42:5c:e8:8c:4f:8b:f2:62:f1:cc:3e:79:00:83:b9:be:54:7a:
19:24:a7:9e:8b:50:c3:32:41:f2:79:84:78:96:1d:e2:4d:e6:
b3:04:c5:96:76:2d:78:e3:55:9e:20:73:09:f5:e9:58:c7:a4:
14:90:aa:d3:90:df:82:fa:d3:67:3c:2a:99:57:45:1f:16:3c:
27:91:44:c4:3a:16:98:dc:f7:42:22:5c:98:36:c8:5d:5e:54:
d8:a2:2b:0f:3e:45:03:d5:59:3e:a3:eb:d1:d2:86:33:83:bd:
57:a8:22:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:52 2026 by rpki-client