Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: BQhcuf8+HW3U2Uc8BtrUMFGkKi8FTy1bJyj5rqHqzCw=
Subject key identifier: CA:9D:39:0F:B5:DF:7B:69:82:72:76:E3:18:C9:71:35:07:38:49:BC
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 019F9391A8B06ABA0DBF04332E5A38C8284E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0AF4
Signing time: Fri 24 Jul 2026 10:00:24 +0000
Manifest this update: Fri 24 Jul 2026 10:00:24 +0000
Manifest next update: Sat 25 Jul 2026 10:00:24 +0000
Files and hashes: 1: 9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa (hash: HOLT/uX07DZotEdYvRZ0JcT8iyC7/R6c7JRLNLUWdZM=)
2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: R9+VeXPDGIEAl28J972oEKIiYfcaaG+8E3J5Pma3rm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:a8:b0:6a:ba:0d:bf:04:33:2e:5a:38:c8:28:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Jul 24 10:00:24 2026 GMT
Not After : Jul 25 10:00:24 2026 GMT
Subject: CN=ca9d390fb5df7b69827276e318c97135073849bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:73:ca:cc:eb:f7:fa:67:8c:d4:17:1f:54:
d6:12:c3:be:d5:39:cb:27:1b:b8:b2:bc:c2:d4:0a:
e2:4f:33:28:ed:3d:ec:7a:51:44:7c:4a:6b:71:c1:
c3:d5:66:68:1f:d4:c4:96:91:50:ba:6f:a2:42:f2:
82:56:6b:33:b2:dd:b3:a4:a7:d2:57:fb:cf:d4:d6:
37:aa:37:5f:8c:b9:3a:32:f5:d1:0d:2d:a9:66:a3:
fe:1d:4b:5b:c3:ed:83:11:1a:f2:8a:3b:c1:98:a8:
3d:b7:b0:77:b7:4d:17:b0:3c:6b:a6:0e:bb:7d:53:
42:c7:48:56:be:50:c9:12:32:92:36:1e:a2:94:53:
d4:62:c0:86:d2:38:23:b0:17:95:61:d8:9f:0e:f7:
ac:a6:05:19:77:45:44:5d:a0:e7:be:8a:a1:4e:97:
1b:07:2c:be:a8:90:45:60:51:21:94:af:7a:33:01:
0a:0e:d6:ea:c2:80:6d:b4:d2:f0:29:a9:bf:9b:88:
23:e2:83:3b:be:8b:f1:76:98:49:42:76:d0:02:98:
8c:b4:82:f4:c6:33:a6:bc:c7:da:39:84:24:a0:4e:
eb:bc:29:f1:a1:10:33:cd:0e:33:8c:35:fd:5e:98:
fb:61:e6:29:66:50:92:27:2c:46:32:3c:27:79:82:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:39:0F:B5:DF:7B:69:82:72:76:E3:18:C9:71:35:07:38:49:BC
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:14:5d:11:14:7f:aa:00:ea:35:ad:0f:c9:60:cd:d6:9d:9d:
3a:68:cf:3a:0b:3a:ff:14:9a:44:38:4c:9c:c5:5a:c4:d2:d0:
c4:89:bb:41:8f:19:82:a8:ae:fa:31:f3:13:68:ba:5f:5d:a0:
a1:95:86:c2:15:6e:06:14:66:34:62:7f:57:f5:1d:9c:cf:94:
1b:82:4f:e0:9c:89:c8:ac:a7:39:f6:de:9a:0f:08:ee:cf:a6:
c8:a1:f8:dd:b4:19:ff:7b:bc:9c:71:b6:e0:08:58:cf:aa:37:
92:67:34:47:d3:23:0d:35:d5:ae:7f:1a:98:6e:44:2c:67:0c:
00:13:78:7a:20:ff:7b:e1:5b:3b:4c:cf:bb:a3:0e:e0:38:6d:
9f:84:b4:fb:97:6e:d2:80:bf:3d:4c:a0:96:40:d9:0f:c6:8e:
45:62:b8:0b:92:59:36:e7:6f:ae:ff:06:67:31:c8:5e:bb:b4:
cb:7b:24:ae:c7:6f:ea:39:fe:ae:78:46:77:2b:47:01:62:98:
fc:db:80:28:56:2e:84:7c:e3:90:c7:bd:d6:d1:74:07:36:09:
f4:a9:4c:b9:4e:ea:68:6c:99:9e:d8:26:55:24:98:21:05:b0:
03:a7:87:78:8f:77:30:cf:ef:f9:4c:28:e9:fc:13:36:79:48:
23:e9:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:40 2026 by rpki-client