Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
File: S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft (raw, json)
Hash identifier: OxPuVyIGE8d1cdAYG49zVei8T6xUszbeiLMCpKBhFQk=
Subject key identifier: D4:9C:AA:74:F3:C4:0F:5E:A8:70:27:75:DB:17:43:B6:6F:00:B0:2F
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 01A134B55A68E680FCBFB246F2CC8C417F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
Manifest number: 1AA4
Signing time: Tue 13 Oct 2026 10:01:02 +0000
Manifest this update: Tue 13 Oct 2026 10:01:02 +0000
Manifest next update: Wed 14 Oct 2026 10:01:02 +0000
Files and hashes: 1: 2_wCqEw8GddDou0kZW8e_OaYD-Y.roa (hash: jjHwHZbG+GUWLcD8cL/6tiQl9nk7+E15Y7xl904tgmA=)
2: FZP0qnMU98q0kSnM0Y7a2dQIups.roa (hash: F2I7NyVWwkoVb+PwDC36i4TLCjQA6IVa44WyV4KoqdE=)
3: S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl (hash: YHbCck5K9F9ln4DMhKK0ACHUJ0/lr5ExOl2KK1RVg3c=)
4: a-x6eM06-S3ToMMPNzVnCccJ_0A.roa (hash: llcid5NErLNnpgu+7VTqgT/2o1JfflGSyuP3ZqonSuk=)
5: fwJb8-jhU9FPP5mFjgyO3uAZ7W0.roa (hash: HXqX6pFclK626D8/+3kEYMPmqF/qpQmRvVZYEHowAb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:5a:68:e6:80:fc:bf:b2:46:f2:cc:8c:41:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: Oct 13 10:01:02 2026 GMT
Not After : Oct 14 10:01:02 2026 GMT
Subject: CN=d49caa74f3c40f5ea8702775db1743b66f00b02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:b4:55:bd:93:0a:f0:29:b5:7c:ee:d5:f8:
aa:33:0e:df:04:05:60:98:aa:79:1c:8f:92:af:33:
b2:da:fa:83:8c:bd:8e:c6:de:28:3f:15:f3:01:5b:
7b:81:40:3b:e0:e8:4e:05:80:86:77:80:1b:4c:35:
db:7e:e1:48:78:81:e6:7a:d2:1e:9e:b5:07:fd:ac:
8f:07:46:8a:5e:3e:d9:a6:c9:50:24:f6:2c:66:ac:
76:8e:0b:99:c0:f0:c2:55:ea:67:e1:57:47:89:ea:
ca:82:0b:18:93:e5:3e:2d:3e:a3:5d:ba:98:da:2a:
37:78:e3:db:9c:c7:5b:46:c4:7c:f7:3f:f7:20:44:
df:d9:ae:ba:e2:35:5e:a1:7b:dc:b4:32:09:fd:3b:
39:60:53:b9:57:af:c2:08:97:c6:97:39:fa:ad:a9:
fa:60:b9:ee:74:51:78:df:14:1c:8c:6e:df:2a:64:
ab:06:fa:bf:b3:ee:ee:30:42:7c:49:5a:99:00:6b:
bc:fa:80:fa:f5:fd:9e:51:19:ad:70:ad:2b:76:d7:
cf:51:01:9e:1d:24:8d:26:a3:5c:19:34:9f:38:bc:
a3:a7:6f:3f:fe:9e:de:02:14:0f:5c:fe:62:3f:e9:
27:17:22:c8:ab:54:a6:44:4f:7a:5d:b2:b8:fe:56:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:AA:74:F3:C4:0F:5E:A8:70:27:75:DB:17:43:B6:6F:00:B0:2F
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:61:5f:fe:0d:42:a1:fa:a5:0b:87:b5:16:63:1c:9c:7e:46:
60:83:30:d1:37:43:82:da:52:11:47:99:3a:92:ae:f0:01:c4:
c7:93:37:85:a5:1e:63:41:9d:81:4d:66:ec:36:5b:54:1d:57:
ad:c0:09:1c:d3:fd:7c:6f:bc:0b:7b:34:db:41:08:05:65:18:
b8:72:98:c0:a6:af:e8:49:5c:10:5d:0d:5a:d5:2a:21:72:03:
0b:40:0a:e3:68:2c:57:a3:7c:15:3d:8c:27:c6:83:cd:62:7f:
5e:e2:b8:4b:93:33:a0:ed:03:ac:3e:ae:0a:5b:fd:5d:f3:38:
ba:2c:c2:21:76:a0:ab:58:3e:a2:d5:74:02:fd:56:2f:c1:e5:
48:09:86:a6:52:ed:1c:fc:6b:27:84:2a:37:2d:67:fc:e9:fb:
e1:3d:dd:1f:c6:e7:bc:79:a7:78:f7:41:8b:16:44:49:f3:1d:
b0:ab:ca:6d:94:db:ff:8c:e3:fe:0c:78:bb:bb:5e:44:14:20:
9a:17:9d:2b:3b:a8:2e:45:7f:fc:ea:67:49:3f:ff:e2:88:68:
f5:2f:63:e1:44:6c:50:0c:55:4f:e0:64:29:a1:44:db:a3:ac:
64:fa:16:c0:5a:83:5b:c7:a8:23:4f:a4:b5:d1:67:73:b0:b7:
9d:57:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:26:30 2026 by rpki-client