Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: rFMkxarih4tUyXoMyUwWHL+hSNN+NkpGMHvn07A/Zms=
Subject key identifier: 5F:88:04:62:A0:D4:B6:65:9D:4B:35:90:04:04:A5:55:4A:B5:77:95
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 01A10E153EA054D1E0101277DBBACF667106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0BB8
Signing time: Mon 05 Oct 2026 22:00:35 +0000
Manifest this update: Mon 05 Oct 2026 22:00:35 +0000
Manifest next update: Tue 06 Oct 2026 22:00:35 +0000
Files and hashes: 1: 9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa (hash: HOLT/uX07DZotEdYvRZ0JcT8iyC7/R6c7JRLNLUWdZM=)
2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: VQk87n2DgAsbIInnartA3owsfveZu7ctWI5snBy7oT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:15:3e:a0:54:d1:e0:10:12:77:db:ba:cf:66:71:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Oct 5 22:00:35 2026 GMT
Not After : Oct 6 22:00:35 2026 GMT
Subject: CN=5f880462a0d4b6659d4b35900404a5554ab57795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:9a:f0:1f:38:68:88:46:d7:22:3d:a9:c2:
04:6e:a6:fd:fc:83:2f:de:f5:1e:2d:41:97:32:e4:
ff:af:f0:e5:3a:c8:12:75:4c:fc:60:27:fa:84:30:
6a:83:0e:5b:bd:ab:56:e5:21:c8:b0:fc:35:f5:8c:
8d:07:27:15:15:5b:d6:e5:32:c8:d4:f0:33:a4:39:
99:d4:32:26:d3:42:76:b9:c0:93:6f:f9:65:c4:8b:
29:4e:b3:95:a2:c9:6c:32:41:36:7e:44:8d:37:fd:
26:26:54:a3:8d:fc:8d:b8:b7:ec:b8:8e:db:c0:47:
79:c1:6a:4c:65:a1:67:a1:9d:6b:16:65:ec:8e:97:
bd:9e:de:7a:5f:2e:e5:3d:c3:1d:d5:b6:ef:2f:ee:
ef:3f:4e:eb:db:fa:c7:53:4b:26:8b:2f:95:b3:23:
ea:f5:80:56:b8:94:2b:e5:59:7a:04:bd:b0:c8:d0:
c7:c6:77:92:6b:9e:e3:b0:85:55:e2:50:6b:8d:ea:
70:5b:e4:3e:61:a6:4f:cc:e0:ab:d1:c5:42:68:e0:
22:7c:dc:3a:08:6b:45:8f:96:61:ad:c6:26:a7:c4:
3c:09:2c:43:9a:0e:5c:64:dd:bf:28:0e:0d:1c:25:
8d:4e:a0:57:ff:d4:72:29:11:09:1e:65:48:77:d1:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:88:04:62:A0:D4:B6:65:9D:4B:35:90:04:04:A5:55:4A:B5:77:95
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2d:5e:54:b9:2f:52:50:c1:e6:17:bd:5f:44:77:19:b2:d8:
d7:b5:a6:06:65:fe:70:36:47:ab:42:56:f1:62:7c:68:2a:06:
cc:be:2b:22:76:2a:0e:12:bf:77:f7:84:7a:b6:5a:06:b6:b4:
3e:0f:58:37:ae:84:91:02:9b:76:b5:bd:c4:32:bc:a6:31:0f:
ff:f2:6b:9f:b5:77:40:f4:42:c1:d8:d1:39:00:0f:d3:d1:a1:
40:8f:5e:f3:09:7a:b7:a4:69:96:ef:a1:0d:74:26:25:b3:dc:
df:14:b7:ef:dc:13:50:49:44:09:bf:da:2b:3f:4b:2c:4a:3c:
54:51:7a:41:ac:ee:85:55:5d:bb:e3:b6:c7:ba:bc:c2:e3:0c:
dd:7a:20:47:4a:24:cc:19:1d:95:a0:be:30:7c:79:20:17:cf:
02:41:10:37:75:02:a9:be:3e:a9:f0:62:f9:e5:ae:21:1f:3c:
9a:5e:93:ce:df:c3:05:d5:49:93:2c:0d:a3:1b:c3:b1:85:0f:
62:49:ff:04:cf:e8:2b:2d:b1:d2:9d:fa:7a:0f:e7:ca:be:3b:
6a:01:e6:6d:c4:5d:8a:43:15:4a:fe:8d:e0:d8:95:03:eb:dc:
d9:05:01:82:6d:46:bf:a7:ab:fe:83:83:c9:fd:a3:2a:3f:8d:
48:26:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:53:18 2026 by rpki-client