Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: 894wis2/m3fb7i48k47zaKa+xVswTb98CCZl7faB8HI=
Subject key identifier: 96:DB:C7:21:70:BC:AE:75:22:1C:8C:A3:99:F1:8A:3E:93:F6:85:AB
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019FAC08E062E07C06808589D36396F543C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 19FF
Signing time: Wed 29 Jul 2026 04:01:30 +0000
Manifest this update: Wed 29 Jul 2026 04:01:30 +0000
Manifest next update: Thu 30 Jul 2026 04:01:30 +0000
Files and hashes: 1: R4nwBrKG7x9uOWCG8K_so7mVRUo.roa (hash: R6vN21QkHPK5A6K5j3qcFOHwB6bVk1zcZeUr2+mwrXk=)
2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: aLhatYXB6MOHqd6PoeTLj1XLJZAd1xov7i1CKUkZDCY=)
3: cN9-QkcDeRmmddqpx80fjE4LD7s.roa (hash: O0DZXiBII2s8che4/ZMrj0hj9juscGV08AllWCCgxdM=)
4: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=)
5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:e0:62:e0:7c:06:80:85:89:d3:63:96:f5:43:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Jul 29 04:01:30 2026 GMT
Not After : Jul 30 04:01:30 2026 GMT
Subject: CN=96dbc72170bcae75221c8ca399f18a3e93f685ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:21:5f:ea:94:96:62:f2:2a:22:4a:7f:21:
e0:d4:91:c2:54:f4:0e:66:69:4d:f1:fd:03:53:73:
3d:e1:8d:ed:81:a4:9b:b5:10:80:a6:66:33:98:e4:
18:83:50:5b:5f:29:f5:1a:92:a4:be:52:fa:69:1b:
6d:8b:1e:a0:07:7e:0f:42:33:b4:4b:b8:c1:16:1f:
77:59:fc:e5:74:fe:69:a0:fe:22:c1:7b:55:4b:67:
e6:91:8f:42:ca:97:97:30:fd:1f:fd:32:3e:6d:e1:
48:a8:f6:21:b6:8e:01:28:c8:e2:5e:d1:9f:d8:4c:
b6:bf:a8:8b:d2:37:a1:e0:ed:46:7e:e2:8d:8f:68:
90:3a:34:b3:c6:fb:f2:8d:b4:4d:01:7b:30:eb:f4:
35:30:8b:ca:e2:10:a6:66:71:3b:f4:8d:e1:94:88:
7e:c2:84:fe:96:12:23:d7:1c:1d:83:0e:25:99:ee:
03:ce:c6:05:77:48:6b:5e:34:7c:a4:48:4c:46:df:
49:ef:74:a9:d1:43:fc:85:59:ff:57:1a:47:03:8a:
3a:e9:76:d8:47:4a:ef:67:87:bb:b8:fd:c4:32:d7:
bc:d9:cd:61:84:9a:e9:b1:b5:db:da:5a:3a:83:a6:
56:16:cc:cd:7a:00:51:06:d7:c0:55:8f:48:bc:d8:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:C7:21:70:BC:AE:75:22:1C:8C:A3:99:F1:8A:3E:93:F6:85:AB
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ff:bf:6b:02:1f:fc:d8:cd:14:51:97:be:57:d1:85:83:f2:
a5:0c:bd:39:d2:55:1b:97:61:60:b0:56:fa:4e:72:44:9b:66:
7f:7c:fa:23:a4:4b:70:79:0a:31:31:d2:ce:d6:9c:42:5d:89:
dc:79:75:6b:8b:16:71:6b:fb:3e:62:a7:aa:a7:c0:6f:62:0d:
27:b1:73:06:cd:87:2e:e6:8c:17:ab:a2:8a:69:93:e3:bf:6c:
58:5a:a9:76:9e:e5:b3:af:50:d2:76:b0:5e:d9:0d:c0:b4:6d:
72:23:c7:1b:f2:0f:b9:36:90:2f:58:a3:fc:9f:28:36:7f:cb:
4d:3d:b3:ed:46:3b:7e:0f:d7:14:ec:59:e3:98:cf:d2:d2:4a:
2d:89:8d:1e:c5:f6:e5:22:45:c2:e1:86:6b:ae:42:ba:ee:ca:
90:77:53:03:63:b5:15:aa:46:ca:37:fd:e3:64:d8:f5:c3:80:
36:15:85:e2:36:09:68:0e:a5:52:46:f2:53:f2:e6:f5:3b:db:
b4:4f:6c:27:ba:08:13:f4:d8:88:a7:ff:34:f2:d1:da:03:91:
59:fa:37:5d:c7:dd:46:a7:f8:51:0c:63:9e:44:2c:88:54:01:
3f:a4:1a:b6:97:33:d9:78:4c:31:0f:2f:32:c7:51:b3:2f:57:
06:88:63:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:33 2026 by rpki-client