Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: muhFEcrpbg2Ol5fs0g6FNowdRczkw7kX0I6lyu3sBt8=
Subject key identifier: 67:1F:F3:EB:6A:63:D2:DD:A1:5D:2B:58:FB:AE:F7:87:5F:8E:58:D4
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 01A104DBD4E1BB4B6B668134CF29D575E702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 1AA9
Signing time: Sun 04 Oct 2026 03:01:17 +0000
Manifest this update: Sun 04 Oct 2026 03:01:17 +0000
Manifest next update: Mon 05 Oct 2026 03:01:17 +0000
Files and hashes: 1: 3Vx1cnLpiAfNCzWy0I3_nXPcC9M.roa (hash: p+noQvGX+yQD2XLqg2x5Tru3ct/yVQ6G5E/ulPipjjA=)
2: H-3bQ-7Lc-BNSgANmO6MHSsPLSs.roa (hash: F2USW61FAReCMbWyEgVR2l80hK+ZfBgaE66ET3G7sBk=)
3: PQkXJQC844XrblWqXSwmAqWUi64.roa (hash: 2cLFr6U2XYR9sr+N19r2/hYJ/Yi/7BSVRT7pLcifiQg=)
4: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: k90ALIhioWHTEqWsyBNzd8ex9J2DimWNri940zdd3ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:db:d4:e1:bb:4b:6b:66:81:34:cf:29:d5:75:e7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Oct 4 03:01:17 2026 GMT
Not After : Oct 5 03:01:17 2026 GMT
Subject: CN=671ff3eb6a63d2dda15d2b58fbaef7875f8e58d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:fe:14:af:b2:d3:14:56:21:b0:ac:d1:6e:
29:5d:b3:52:02:dd:d1:64:05:3e:90:b0:86:dd:e5:
5f:35:73:44:4a:ed:8c:02:eb:99:05:50:19:3b:78:
08:fd:7a:20:95:59:da:7b:ae:3f:3d:d8:9d:30:ba:
ad:69:95:44:bd:cf:15:36:f8:34:f9:70:d5:67:32:
db:bd:f8:e9:d2:7d:ed:bb:5b:84:d4:c5:ca:d5:c8:
77:fc:97:1e:b7:c8:f5:21:96:00:ce:68:a7:87:38:
1b:20:58:cd:38:95:c7:51:7b:36:d4:08:34:ab:48:
a2:48:8e:56:5e:ef:ae:5b:d1:7b:8d:c7:18:a0:fe:
12:8c:4e:02:7a:d0:5a:33:d9:20:d7:14:70:fc:76:
3a:79:65:23:22:38:7b:90:67:28:7a:59:5f:bc:2c:
a0:e0:93:10:50:ed:0d:73:29:f9:c2:05:9c:3f:7b:
5b:ac:1e:96:90:c3:bf:72:52:70:e2:55:15:2a:3a:
6b:29:e0:a5:f0:b9:ce:54:29:5e:35:fb:4a:36:3b:
c6:5a:40:09:ee:7f:69:e0:a5:41:26:c3:72:0b:70:
b3:47:e4:c7:6c:55:d1:6d:df:8d:e7:6c:20:52:ce:
0d:be:63:ad:fc:8f:0e:43:fa:96:43:4d:c2:55:ad:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1F:F3:EB:6A:63:D2:DD:A1:5D:2B:58:FB:AE:F7:87:5F:8E:58:D4
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:90:b1:f3:61:eb:00:01:e9:22:d5:72:5a:72:04:d1:94:d6:
2c:85:b4:51:0e:61:55:6d:12:ea:5d:a1:bb:11:29:89:db:6e:
d6:4b:18:3d:74:13:6d:80:f3:f9:9b:61:d7:8b:9d:a9:d4:85:
75:57:21:34:80:71:8e:ec:1c:e8:cc:20:32:b8:12:7a:f7:a9:
e0:07:4b:bf:cb:ba:9d:2e:52:9a:0e:8a:64:06:69:e2:e6:94:
d9:46:3c:a1:86:6e:f1:a6:34:45:c0:63:33:8d:49:33:84:57:
4a:ad:40:62:06:fd:7e:7d:60:82:a8:d0:29:8a:6a:71:e2:c2:
c6:da:ce:b2:d2:98:95:c4:fc:c2:64:3d:ee:b9:ff:82:77:dd:
6e:7c:58:b3:76:24:a1:88:7c:04:5f:88:03:ee:69:49:0b:55:
93:eb:ba:75:aa:5f:b8:c9:74:84:50:8a:48:3f:9a:79:51:d6:
8c:b6:59:75:f6:2e:fa:e6:ce:4d:27:f0:68:98:f8:e3:3b:ff:
6c:88:a0:25:92:57:62:a0:ae:8a:03:17:82:b4:c0:07:6f:eb:
20:20:a6:d6:67:dd:87:57:e8:86:4e:bd:c7:82:e8:9a:24:27:
02:fc:91:9a:0f:81:d7:ce:96:db:5b:98:6a:0d:71:2a:92:ca:
23:26:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:38:53 2026 by rpki-client