Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
File: S_5nhudBGv_P9M5otbcGmCrbshY.mft (raw, json)
Hash identifier: aSW8OkYcHw7QBCSLZ1oKta/GjlwpDiiSLId152utL9Y=
Subject key identifier: 85:8C:78:57:8F:92:A7:00:F9:B7:0D:08:D6:A3:80:F0:F1:DA:F8:FD
Authority key identifier: 4B:FE:67:86:E7:41:1A:FF:CF:F4:CE:68:B5:B7:06:98:2A:DB:B2:16
Certificate issuer: /CN=4bfe6786e7411affcff4ce68b5b706982adbb216
Certificate serial: 01A0FBD84C534A48CD3A5A46DD12D3CC4514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
Manifest number: 0119
Signing time: Fri 02 Oct 2026 09:00:51 +0000
Manifest this update: Fri 02 Oct 2026 09:00:51 +0000
Manifest next update: Sat 03 Oct 2026 09:00:51 +0000
Files and hashes: 1: 172J7Q8mZsr0VC6StV7ph30UAog.roa (hash: JJms2nQRkX9Y3NBzgyt6sK+QPIVuTMzGhhx4yrWYyvo=)
2: S_5nhudBGv_P9M5otbcGmCrbshY.crl (hash: Qk2WRmVJyaw5neh360ReGXH/N19NarbNpIRnOrm1cvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:d8:4c:53:4a:48:cd:3a:5a:46:dd:12:d3:cc:45:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfe6786e7411affcff4ce68b5b706982adbb216
Validity
Not Before: Oct 2 09:00:51 2026 GMT
Not After : Oct 3 09:00:51 2026 GMT
Subject: CN=858c78578f92a700f9b70d08d6a380f0f1daf8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:5e:4c:2f:4d:aa:e4:b0:2d:81:0f:cd:ac:
17:78:02:af:a5:0e:b6:57:e5:64:b8:d2:4f:84:82:
19:be:91:9f:35:74:3b:b1:c1:16:ed:aa:3a:70:e6:
95:de:c6:97:79:4e:70:45:4a:80:75:53:c2:3c:6f:
8e:d3:36:28:c0:ae:e4:42:51:d4:03:d4:d8:ac:6c:
4c:6a:d1:fc:7a:a6:01:c3:d7:12:44:0f:57:91:00:
79:48:9f:56:eb:64:49:9c:04:87:d8:6d:f2:89:2e:
ab:4f:48:a2:e9:1c:26:32:a1:e2:2c:a6:06:29:78:
18:43:cf:10:bd:d3:8f:2f:b3:79:df:e2:74:01:92:
b8:5d:25:39:5b:33:0f:0c:ec:f1:b9:33:b7:03:81:
e3:7f:2d:21:49:1a:bc:6f:b4:c7:3b:fd:46:f3:97:
1a:c6:1c:3d:46:08:d1:82:db:4a:56:bd:84:6d:b6:
4a:11:d3:61:1e:05:8e:73:19:3a:b6:2b:c6:e2:02:
ff:8b:d6:21:f7:6d:50:1b:2c:dc:44:43:ff:1b:55:
e9:82:33:11:6b:3e:3b:51:fb:6f:51:1f:27:eb:e7:
60:db:18:47:b3:46:ba:1e:ce:7d:0d:86:32:09:8f:
f4:a4:6c:48:68:e5:8d:1a:5e:71:2d:d2:72:04:87:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:78:57:8F:92:A7:00:F9:B7:0D:08:D6:A3:80:F0:F1:DA:F8:FD
X509v3 Authority Key Identifier:
keyid:4B:FE:67:86:E7:41:1A:FF:CF:F4:CE:68:B5:B7:06:98:2A:DB:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1f:82:6d:ec:92:f0:94:71:77:59:1d:d2:da:75:89:70:22:
34:74:50:08:8c:a1:a9:49:02:3d:1e:96:eb:c6:3b:62:70:e6:
a3:b5:ad:0b:a5:35:60:be:84:a8:03:23:45:5d:eb:ab:17:7c:
ac:73:b2:c8:20:8d:e2:04:a5:f2:43:2e:92:85:82:c6:34:7f:
b9:b5:86:91:65:a1:6b:80:4d:83:9d:f1:b1:54:0a:58:a3:30:
cc:d5:d5:b6:7a:dd:2b:35:a4:73:3e:9a:8a:1d:50:e6:1c:9e:
b0:00:7e:a2:14:35:2e:90:34:4b:21:2c:a7:55:86:65:b8:59:
fb:aa:01:22:b6:1c:f1:e9:31:85:04:c7:dd:f3:6c:fc:69:fc:
49:75:f1:d1:d6:a3:85:54:a6:a5:2d:0e:53:a1:c7:2a:3a:34:
ae:81:39:73:91:76:71:59:78:00:05:6a:99:d3:7b:1a:6b:01:
59:0e:24:92:68:2d:ad:49:a7:ab:86:e9:70:23:e2:31:aa:1d:
af:67:95:98:e9:6d:31:6d:20:f7:c8:36:59:96:58:13:d3:8b:
2b:df:c4:69:ae:9a:56:c7:25:96:be:2f:4b:91:ef:21:63:d0:
b8:39:a7:69:63:6f:f7:9b:67:72:23:0f:b8:c9:90:e7:39:d9:
c8:5c:c7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:55:29 2026 by rpki-client