Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
File: S5IeM_-6Ocahgd1C7jwK-gwiINA.mft (raw, json)
Hash identifier: GBo5ud4EiKAvLVuUIA6x//VVFSszK0Vuv0mVgqD6+R8=
Subject key identifier: D7:9E:CB:70:17:48:A2:69:FD:1F:25:42:0B:DC:08:58:2D:65:EF:50
Authority key identifier: 4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
Certificate issuer: /CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Certificate serial: 019FA9AC396A788E10C390064B9F35ADB1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
Manifest number: BC
Signing time: Tue 28 Jul 2026 17:01:04 +0000
Manifest this update: Tue 28 Jul 2026 17:01:04 +0000
Manifest next update: Wed 29 Jul 2026 17:01:04 +0000
Files and hashes: 1: S5IeM_-6Ocahgd1C7jwK-gwiINA.crl (hash: HecWGUgYZXqCxO19NbwyWddE9hxGBy5ir2q/31SfAbo=)
2: sHAYZJ5lJLM8IXOteqwaPFIPiSM.roa (hash: oLMgyUyVCQ4o7PAuIgRalvXm2LEU3nLFcx6OUNcMV8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:39:6a:78:8e:10:c3:90:06:4b:9f:35:ad:b1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Validity
Not Before: Jul 28 17:01:04 2026 GMT
Not After : Jul 29 17:01:04 2026 GMT
Subject: CN=d79ecb701748a269fd1f25420bdc08582d65ef50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:1b:47:e8:14:84:11:f4:c2:ac:be:20:e1:
22:3f:02:77:0a:20:f4:c3:93:79:d7:44:6b:86:91:
7f:89:62:b5:a2:c4:7b:ca:1e:44:f1:46:79:8a:23:
87:73:ec:fa:4a:1b:82:25:90:95:8d:88:ce:aa:11:
72:f0:8a:06:cf:43:b3:3a:32:6c:34:3f:9c:89:b6:
b7:ba:69:2e:a0:12:8a:fc:95:f3:a8:9e:36:3d:40:
75:55:ba:63:58:ce:52:43:88:2d:b9:e0:4a:a1:e5:
86:35:a5:a1:4e:d6:9d:f3:41:22:a5:6f:6d:6c:dd:
f2:c3:c1:16:68:54:88:09:43:62:d3:8a:04:c0:02:
42:9d:63:04:97:a6:83:57:a3:d5:de:3f:69:29:56:
a4:a4:90:fa:7a:14:c6:13:1e:cf:57:04:04:fb:a6:
cf:3f:72:76:df:6d:b6:12:f0:8c:69:9f:08:6b:10:
dd:69:33:00:4b:46:b5:98:37:ad:bf:49:01:b3:a6:
1e:bd:6d:67:b6:ec:df:0c:42:c7:91:44:80:f3:70:
8e:d7:3b:13:da:a9:56:72:c7:ab:20:b1:9e:af:3e:
82:1d:32:73:99:60:34:e9:b7:21:9f:08:04:a5:36:
71:e0:c5:cc:a4:d4:67:b7:70:67:6d:9a:67:96:ea:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:CB:70:17:48:A2:69:FD:1F:25:42:0B:DC:08:58:2D:65:EF:50
X509v3 Authority Key Identifier:
keyid:4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:76:45:2f:cf:36:a0:3c:94:1a:0e:0c:57:87:ba:6d:cf:ce:
61:ca:d0:3e:03:9a:d6:d0:b1:67:26:e6:18:8d:fc:8d:70:c7:
b3:89:63:ac:c8:47:33:51:14:2b:11:5a:27:91:59:b1:43:06:
b0:3d:f7:27:49:61:d6:f6:55:6e:03:94:01:99:46:9b:27:e5:
f1:bb:cb:91:1e:ee:07:8f:f4:26:bd:a9:d3:28:c5:d6:d2:20:
bc:c2:5f:af:15:cf:33:fc:ad:7f:91:a5:61:a5:27:25:3c:0b:
6f:ca:71:89:79:b9:14:56:5c:c6:69:76:da:b0:a8:92:8f:5d:
49:2c:e2:79:4d:5d:cc:80:aa:3c:d8:08:8d:61:6d:52:c8:33:
e5:fe:32:a7:fc:d6:f5:3a:25:9a:ad:ed:be:6d:c8:e3:56:fd:
6d:ec:19:f1:ae:2b:ce:83:a1:6b:20:25:16:98:b1:b2:3a:c8:
8d:4e:b6:f3:1b:11:47:ce:29:34:46:ea:d6:12:7c:b6:e1:6e:
0e:ea:b0:fb:f5:f5:f2:0b:0c:29:29:2c:20:8f:c9:4c:48:8b:
f2:c9:a8:bd:dc:5a:88:20:22:e1:7f:14:66:b2:e2:09:b5:1e:
6c:26:34:b9:56:d1:fd:f0:47:78:d4:72:ca:fc:fb:1d:f6:d8:
c8:b3:e7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:22:22 2026 by rpki-client