Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: 1l52+GPsYrZ/uHNVMwjJwn8egntY5XxO9lPJ8FSlJYg=
Subject key identifier: 08:F0:48:88:D4:D6:2D:43:EB:6E:09:93:B8:B4:6B:A1:32:8A:6F:EA
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019F92ECF7AB25A3EB7B93C512426D566BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0FD1
Signing time: Fri 24 Jul 2026 07:00:31 +0000
Manifest this update: Fri 24 Jul 2026 07:00:31 +0000
Manifest next update: Sat 25 Jul 2026 07:00:31 +0000
Files and hashes: 1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: /+wJx4UTGeGYjPqg5/hT3Oaq1QjroamZTZuVT4CLqlc=)
4: c2NaEAlgVUYgoY72a0dwilashus.roa (hash: fAkWFixs8K72eGX6Cl0h1wXhSk4FbU9HoS7xaKjx650=)
5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:f7:ab:25:a3:eb:7b:93:c5:12:42:6d:56:6b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jul 24 07:00:31 2026 GMT
Not After : Jul 25 07:00:31 2026 GMT
Subject: CN=08f04888d4d62d43eb6e0993b8b46ba1328a6fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:1e:eb:a8:3c:d0:d6:29:9c:0c:9d:e5:bd:
cf:bd:e6:49:ab:ee:d0:6d:52:d4:a8:94:02:e2:d1:
ba:e6:43:b2:32:a5:9c:bd:12:99:f5:72:29:a8:29:
71:c4:86:e8:a8:c2:28:0e:a0:74:8c:e4:ff:c8:99:
5f:1c:22:35:02:e5:65:4d:29:ef:e5:6c:b0:1b:36:
87:8d:14:34:65:d3:5d:f8:bc:11:66:b5:c8:63:50:
10:9f:17:7b:17:4f:ad:92:af:bd:3d:ec:8a:26:cb:
fe:1a:dc:0b:73:f7:bb:8b:e8:3e:9a:c0:34:84:a3:
e7:4e:46:da:eb:1b:fb:81:5a:91:4a:7e:3a:98:24:
ba:4f:ab:46:4e:93:52:08:ca:39:cc:ca:3f:d4:26:
a6:9c:4d:49:28:05:0a:01:a9:24:d7:b9:b0:2d:2e:
e0:88:ce:54:19:8f:4f:8e:8b:4a:a2:d4:87:dd:4e:
45:05:c8:5f:3e:19:db:83:c6:71:d7:79:eb:ab:d4:
cb:64:0d:5d:6c:02:d6:e7:aa:d5:7a:92:90:fc:a6:
56:6a:fb:b8:7c:f8:06:f1:5a:8c:cf:d3:d7:bf:38:
25:83:50:d9:15:14:03:f4:ab:8f:6a:69:22:0f:b8:
ba:18:29:9a:5e:26:6a:80:e8:01:53:de:f0:7d:48:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F0:48:88:D4:D6:2D:43:EB:6E:09:93:B8:B4:6B:A1:32:8A:6F:EA
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6c:d2:f6:8d:1c:54:b0:fe:ca:2a:de:9d:19:2f:d4:1a:b3:
33:a7:ef:a4:95:b5:d8:7c:88:20:6c:37:31:1d:01:fe:0c:37:
fb:c5:0f:17:41:0c:4b:40:39:81:54:28:41:be:9e:bc:9c:79:
e0:49:0c:8b:5b:01:ed:30:c9:16:2c:64:b3:29:0a:7c:4f:46:
91:7b:5c:62:c8:de:5a:17:4b:d8:70:e7:4c:d7:85:19:09:17:
a2:03:d5:77:9f:b7:d6:47:d1:47:b5:e1:7a:79:62:08:f9:7b:
57:57:4b:61:9b:3a:19:12:45:24:0a:27:02:77:eb:a3:52:21:
c2:7f:96:75:e3:fa:81:a9:8a:7f:73:ba:98:2c:e9:04:93:6a:
9c:ca:28:4f:ba:ac:f6:4f:ee:fe:5c:67:2e:28:19:92:00:16:
cd:4b:2d:2a:a5:55:f0:00:c3:ed:2c:91:ac:99:d5:24:7c:f9:
47:ba:dc:a4:be:b2:60:4d:fa:27:d3:96:2c:71:80:8a:77:ce:
f5:de:7c:11:ce:68:ed:0c:cf:6d:ee:bd:17:a7:00:3a:25:41:
9f:58:5e:7b:5c:14:7b:5d:2e:88:5e:a5:16:2f:f1:96:a7:65:
ba:61:5f:f7:a7:c0:b7:38:72:b4:1b:6e:e5:06:a7:29:55:48:
f1:a9:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:56:06 2026 by rpki-client