Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: 48KVzzOzIyuyVp64lHmU5enkgzIaS3M5HZa7ERlQSTg=
Subject key identifier: 9E:47:88:B2:A2:49:DD:7F:C7:9A:28:AD:44:E3:F4:63:18:2F:49:FF
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 01A0E9D2735D521685A8C6944A48C4126543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 1A9B
Signing time: Mon 28 Sep 2026 21:01:18 +0000
Manifest this update: Mon 28 Sep 2026 21:01:18 +0000
Manifest next update: Tue 29 Sep 2026 21:01:18 +0000
Files and hashes: 1: 3Vx1cnLpiAfNCzWy0I3_nXPcC9M.roa (hash: p+noQvGX+yQD2XLqg2x5Tru3ct/yVQ6G5E/ulPipjjA=)
2: H-3bQ-7Lc-BNSgANmO6MHSsPLSs.roa (hash: F2USW61FAReCMbWyEgVR2l80hK+ZfBgaE66ET3G7sBk=)
3: PQkXJQC844XrblWqXSwmAqWUi64.roa (hash: 2cLFr6U2XYR9sr+N19r2/hYJ/Yi/7BSVRT7pLcifiQg=)
4: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: F/xeCOngXaQNjLPsxen58oJ5SMtWnmcf9HjlDX6DItc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:73:5d:52:16:85:a8:c6:94:4a:48:c4:12:65:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Sep 28 21:01:18 2026 GMT
Not After : Sep 29 21:01:18 2026 GMT
Subject: CN=9e4788b2a249dd7fc79a28ad44e3f463182f49ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:19:39:24:03:19:d5:a4:49:ba:9a:af:7f:
57:ce:2e:24:1e:ef:cd:f1:47:ac:72:93:74:55:3c:
7b:67:f9:1f:c2:9e:d8:b2:c5:61:66:5b:52:20:8d:
27:a2:e7:d4:50:55:7a:a9:d6:12:55:0b:e8:08:98:
22:cc:8a:01:7f:47:45:c8:6e:42:8a:aa:e9:b5:7c:
a2:76:9f:81:0b:e5:42:b7:09:ef:da:23:13:f0:bc:
bf:17:1d:ef:fa:44:f0:af:84:67:17:da:6a:07:4d:
f4:8b:29:d4:c9:91:8f:12:3a:fc:f5:d6:7d:48:d9:
c5:3b:4d:ca:7d:4d:51:22:4a:39:be:ae:5c:ba:c9:
ad:3b:18:a8:95:0d:cd:c0:e1:b6:f0:56:11:03:01:
e8:fc:bb:4f:38:1e:8b:f1:aa:82:d4:07:48:5a:80:
b9:ca:46:ce:e6:45:61:5e:f0:2c:bd:46:e6:92:f3:
cf:30:9d:b4:2d:87:a0:c2:a4:85:dc:64:5e:2f:93:
08:0e:66:3b:4d:57:3b:0c:76:e7:ce:7d:a0:96:4b:
52:ec:b4:1f:a7:9a:75:e1:05:2c:ad:6f:5b:04:93:
ed:49:5f:54:31:71:ae:41:5e:af:d4:87:44:e3:7a:
95:ff:b3:fe:4a:c0:ec:c6:81:79:4b:2c:d3:b2:86:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:88:B2:A2:49:DD:7F:C7:9A:28:AD:44:E3:F4:63:18:2F:49:FF
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e8:47:c4:2e:13:f5:df:fc:d7:4b:60:6f:c3:41:f1:1a:3c:
d7:df:3f:7d:70:6e:c8:6a:64:6d:19:fc:f5:a5:3d:bd:9b:52:
02:38:5c:34:f3:ab:64:22:bb:de:e6:56:d4:97:c0:2b:02:a8:
bd:6f:67:53:35:b1:35:01:03:e2:a6:11:11:56:4a:7d:cf:fc:
12:62:cc:ab:db:f7:41:a9:9d:49:bd:f6:99:42:76:57:ae:f7:
e5:10:f5:51:41:84:0c:ee:a8:7e:e4:83:4d:2f:22:7a:68:32:
37:de:43:3c:75:37:e3:38:08:aa:c3:63:1a:62:06:94:c7:58:
ad:d3:80:42:73:c6:a2:0d:d5:63:67:b4:2a:9e:40:2b:c5:4b:
84:20:a3:ca:3c:66:eb:d5:7e:2f:f3:cd:68:4c:94:71:54:9e:
86:87:7f:77:a2:49:6c:12:a7:bc:bf:34:cb:02:52:32:40:a1:
35:53:f1:c6:e0:dc:c7:42:31:03:8f:0e:e9:f0:d8:bd:03:96:
8c:f4:0f:7a:d0:1d:58:a3:be:3a:b7:a2:63:77:91:5e:61:5e:
80:eb:53:0c:33:7a:39:7e:1c:1f:17:7b:d6:b4:31:47:e0:81:
20:58:78:47:d9:9a:92:f3:b4:1f:92:f5:89:27:3e:4b:19:ac:
ad:95:df:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDp0nNdUhaFqMaUSkjEEmVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5
MzI5ZjgwHhcNMjYwOTI4MjEwMTE4WhcNMjYwOTI5MjEwMTE4WjAzMTEwLwYDVQQD
Eyg5ZTQ3ODhiMmEyNDlkZDdmYzc5YTI4YWQ0NGUzZjQ2MzE4MmY0OWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTIZOSQDGdWkSbqar39Xzi4kHu/N
8UescpN0VTx7Z/kfwp7YssVhZltSII0noufUUFV6qdYSVQvoCJgizIoBf0dFyG5C
iqrptXyidp+BC+VCtwnv2iMT8Ly/Fx3v+kTwr4RnF9pqB030iynUyZGPEjr89dZ9
SNnFO03KfU1RIko5vq5cusmtOxiolQ3NwOG28FYRAwHo/LtPOB6L8aqC1AdIWoC5
ykbO5kVhXvAsvUbmkvPPMJ20LYegwqSF3GReL5MIDmY7TVc7DHbnzn2glktS7LQf
p5p14QUsrW9bBJPtSV9UMXGuQV6v1IdE43qV/7P+SsDsxoF5SyzTsoZrlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5HiLKiSd1/x5oorUTj9GMYL0n/MB8GA1UdIwQY
MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt
NjRhNmEwNWI5OTA1LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1
LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHehHxC4T
9d/810tgb8NB8Ro8198/fXBuyGpkbRn89aU9vZtSAjhcNPOrZCK73uZW1JfAKwKo
vW9nUzWxNQED4qYREVZKfc/8EmLMq9v3QamdSb32mUJ2V6735RD1UUGEDO6ofuSD
TS8iemgyN95DPHU34zgIqsNjGmIGlMdYrdOAQnPGog3VY2e0Kp5AK8VLhCCjyjxm
69V+L/PNaEyUcVSehod/d6JJbBKnvL80ywJSMkChNVPxxuDcx0IxA48O6fDYvQOW
jPQPetAdWKO+OreiY3eRXmFegOtTDDN6OX4cHxd71rQxR+CBIFh4R9makvO0H5L1
iSc+SxmsrZXfog==
-----END CERTIFICATE-----
Generated at Tue Sep 29 06:46:22 2026 by rpki-client