Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: 6e6muRLxYPIg7LaoxHwzGOyEdJJtVyjDyHdtA7fD7v0=
Subject key identifier: 34:42:1F:8E:1F:FF:37:7F:5A:FC:14:7A:E9:F8:02:6D:71:E5:EC:4A
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 01A0CA0F920A2141DE2DBDA4FF215C441CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0E4C
Signing time: Tue 22 Sep 2026 17:00:13 +0000
Manifest this update: Tue 22 Sep 2026 17:00:13 +0000
Manifest next update: Wed 23 Sep 2026 17:00:13 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: k68wAEqh2OC7pvWmMrwn1hH60LQU1BcfEXRN7D13VV4=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:92:0a:21:41:de:2d:bd:a4:ff:21:5c:44:1c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Sep 22 17:00:13 2026 GMT
Not After : Sep 23 17:00:13 2026 GMT
Subject: CN=34421f8e1fff377f5afc147ae9f8026d71e5ec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:20:41:b2:73:5d:78:50:b8:d4:4a:a0:cf:
5d:fc:85:46:96:f9:19:20:74:17:07:5c:22:eb:28:
a6:1e:67:46:ff:63:98:1e:b1:b8:7d:58:29:fe:7c:
2a:cb:a0:cc:cd:01:2d:52:14:a4:d9:91:65:55:54:
e6:c6:6f:dc:b8:a5:ca:e0:2c:9e:a6:e8:0a:de:0b:
29:88:12:71:c2:67:a3:f1:b0:e6:26:d1:f2:b1:16:
6b:a1:fe:a2:e2:3a:fc:a3:b0:dc:28:31:9f:17:30:
d8:23:02:bd:60:55:bb:8f:44:38:da:6e:1e:7b:45:
35:04:ec:db:95:17:c6:c2:54:48:87:0e:1c:13:16:
b5:bc:a4:02:ee:7a:92:3e:b2:84:a3:21:70:74:d6:
8c:36:3e:c7:d8:a7:f1:29:eb:b9:5e:b2:24:24:fb:
95:e5:49:50:88:70:54:9c:af:eb:41:67:5b:81:fc:
e0:46:60:17:71:c4:e3:6d:51:46:3c:cc:40:b0:af:
70:ed:ed:45:e2:74:e7:ec:ee:f2:f1:9c:4d:41:92:
67:0c:d7:af:d1:09:a6:8b:14:6b:eb:13:22:f4:51:
57:50:1a:c3:70:15:44:c6:85:af:bc:54:45:6e:7e:
4a:8f:7a:d3:d4:0d:72:71:c0:f6:b2:4c:c5:7c:b6:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:1F:8E:1F:FF:37:7F:5A:FC:14:7A:E9:F8:02:6D:71:E5:EC:4A
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f4:bc:03:a6:8a:95:b5:35:44:8c:f6:2b:c0:cd:31:5f:f4:
d3:9b:78:7c:d6:cd:3c:4e:f4:84:98:3b:a4:9e:be:51:61:45:
36:00:cf:72:52:7b:d8:e2:2d:5a:7b:ef:9b:2d:3c:7c:f7:a4:
0c:b7:90:84:7f:48:d4:4d:a3:9d:be:91:b8:36:4d:8e:5d:15:
18:08:f5:3d:c9:ce:f5:5c:95:09:be:57:f6:6b:64:76:09:22:
3f:78:30:28:91:b4:ef:1a:38:99:9e:7e:16:d1:5c:5a:e1:4e:
26:94:7f:fc:4d:0e:48:e8:3d:ec:6c:cc:f8:62:35:b6:15:01:
78:b4:8a:5e:06:31:a7:5a:ea:75:28:6f:e7:1b:7d:58:b4:59:
17:02:58:fc:44:c6:15:18:c7:a9:68:c4:e0:39:90:55:e9:96:
89:52:f0:69:04:d1:ca:8d:ab:5a:53:81:33:21:79:33:27:12:
de:03:5d:7b:89:a8:d9:e5:76:70:42:ef:3d:ce:10:45:7f:7f:
5c:22:c5:1b:38:41:30:97:24:3e:d9:b8:aa:4e:ed:3f:b4:af:
c0:e0:76:a9:a8:7e:9d:db:1c:c0:aa:46:b0:0c:6a:0f:d1:39:
8e:ec:8c:37:6a:99:bb:95:60:16:79:37:21:7f:e2:ba:5d:1d:
c6:e1:76:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKD5IKIUHeLb2k/yFcRBykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTlhZmQyMWNiOGZiZTZiODUwODAwY2Q0YjQ5ZjI1NjJj
OTJiYTAwHhcNMjYwOTIyMTcwMDEzWhcNMjYwOTIzMTcwMDEzWjAzMTEwLwYDVQQD
EygzNDQyMWY4ZTFmZmYzNzdmNWFmYzE0N2FlOWY4MDI2ZDcxZTVlYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjEgQbJzXXhQuNRKoM9d/IVGlvkZ
IHQXB1wi6yimHmdG/2OYHrG4fVgp/nwqy6DMzQEtUhSk2ZFlVVTmxm/cuKXK4Cye
pugK3gspiBJxwmej8bDmJtHysRZrof6i4jr8o7DcKDGfFzDYIwK9YFW7j0Q42m4e
e0U1BOzblRfGwlRIhw4cExa1vKQC7nqSPrKEoyFwdNaMNj7H2KfxKeu5XrIkJPuV
5UlQiHBUnK/rQWdbgfzgRmAXccTjbVFGPMxAsK9w7e1F4nTn7O7y8ZxNQZJnDNev
0QmmixRr6xMi9FFXUBrDcBVExoWvvFRFbn5Kj3rT1A1yccD2skzFfLYgfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRCH44f/zd/WvwUeun4Am1x5exKMB8GA1UdIwQY
MBaAFEupr9IcuPvmuFCADNS0nyViySugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmIt
ZjY5NjIyNDI1NjUxLzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmItZjY5NjIyNDI1NjUx
LzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/S8A6aK
lbU1RIz2K8DNMV/005t4fNbNPE70hJg7pJ6+UWFFNgDPclJ72OItWnvvmy08fPek
DLeQhH9I1E2jnb6RuDZNjl0VGAj1PcnO9VyVCb5X9mtkdgkiP3gwKJG07xo4mZ5+
FtFcWuFOJpR//E0OSOg97GzM+GI1thUBeLSKXgYxp1rqdShv5xt9WLRZFwJY/ETG
FRjHqWjE4DmQVemWiVLwaQTRyo2rWlOBMyF5MycS3gNde4mo2eV2cELvPc4QRX9/
XCLFGzhBMJckPtm4qk7tP7SvwOB2qah+ndscwKpGsAxqD9E5juyMN2qZu5VgFnk3
IX/iul0dxuF2cQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:18:53 2026 by rpki-client