Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: BthoZA+DxnuKyhOMP20vz+PeevWJLIR0yvWjfxCsV4A=
Subject key identifier: F2:B0:B8:0C:92:0D:D1:45:E7:C3:7B:DB:83:71:13:B0:AE:BA:85:58
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 01A0C821950660482A6A25DC9FD979A4CD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0E4B
Signing time: Tue 22 Sep 2026 08:00:39 +0000
Manifest this update: Tue 22 Sep 2026 08:00:39 +0000
Manifest next update: Wed 23 Sep 2026 08:00:39 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: yydp+RvNPl9DbpH0d3Xqj1QSMhay69d5MLZZa32s3Yk=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:95:06:60:48:2a:6a:25:dc:9f:d9:79:a4:cd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Sep 22 08:00:39 2026 GMT
Not After : Sep 23 08:00:39 2026 GMT
Subject: CN=f2b0b80c920dd145e7c37bdb837113b0aeba8558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:6b:95:34:f4:d8:47:ff:2f:2a:9a:f0:c6:
1b:b8:6a:20:6f:3e:14:4f:27:fc:8d:bf:7f:cc:a4:
8a:be:e2:ac:7e:a4:ff:6d:a5:d6:b9:5d:c8:d8:5f:
63:61:a9:bd:06:f8:1c:54:05:89:a9:6a:47:db:5d:
a0:ba:94:72:87:34:95:a1:68:72:97:22:80:b5:39:
01:63:f3:6d:f9:e9:33:52:e4:46:69:53:a5:89:60:
ee:36:56:0e:79:63:d9:10:14:0b:e3:cb:e3:de:f3:
9b:de:16:8d:50:83:93:25:9e:86:c5:aa:a1:63:43:
ed:27:75:49:bc:17:45:33:bb:89:ab:05:b6:11:ad:
47:e7:1d:b2:bb:96:45:8f:f1:fc:c6:13:80:63:33:
99:34:5f:cd:2f:7d:6c:43:43:9d:3c:d1:51:49:9d:
e2:cf:72:2b:46:de:71:e6:78:42:9e:f1:91:6b:aa:
61:6c:87:23:d6:22:27:0f:3d:1b:29:3f:b1:7f:6b:
a4:20:b3:e0:b3:61:28:56:45:c6:05:c0:98:0d:fa:
50:07:6f:26:37:c2:6c:0e:c9:10:a6:d2:8e:75:94:
f2:71:a3:dd:8f:d1:39:33:52:a6:72:13:30:ce:80:
46:b1:43:83:9b:bb:a0:c1:20:fa:fe:4b:7f:bc:8f:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:B8:0C:92:0D:D1:45:E7:C3:7B:DB:83:71:13:B0:AE:BA:85:58
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ba:cb:98:71:4a:6c:8e:f1:a8:60:aa:42:e1:0e:88:5f:dd:
ab:8f:1b:d9:db:e9:a8:f1:31:fc:f3:93:28:73:bd:e1:68:54:
fa:3c:1b:8a:d2:54:f6:c6:75:5f:8b:63:b9:07:39:a7:64:db:
7e:83:a2:74:0a:91:fa:d7:30:f7:91:c6:81:92:65:59:6c:74:
60:09:99:1a:c0:5d:00:4b:5a:db:8d:a8:7b:4d:ac:2e:04:43:
b2:71:3f:88:ee:05:40:88:6d:7e:16:cd:df:26:e4:38:b0:a8:
0b:aa:2a:ad:ce:12:4a:01:47:8b:ec:ec:f7:8f:ab:d6:fb:b3:
9c:1f:be:29:c5:ed:c2:04:a6:36:de:78:26:9d:cb:59:eb:e9:
0d:89:93:51:9c:58:84:42:4d:35:7d:d6:b7:1a:60:61:af:87:
1c:ca:a7:43:d2:f1:49:bb:89:70:c6:aa:0a:65:67:07:ee:53:
38:c1:ed:a0:e1:89:ca:90:20:81:85:ea:8f:fe:33:76:72:86:
bd:2c:24:c1:ae:55:d4:1f:cf:9f:4b:cd:7e:b3:ad:47:40:11:
50:e7:38:b5:bc:e7:57:44:1f:3f:fe:7c:de:af:85:01:04:98:
c2:7a:64:ec:ab:ad:c8:eb:7e:cf:97:d7:1e:8e:ce:6a:a4:fb:
eb:4d:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:27:27 2026 by rpki-client