Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: krDARCrPAC/oFHDFG2SXUk1Ql2eo94mpfZWV5rhYF2Q=
Subject key identifier: B8:C6:AC:67:CE:81:1D:E7:23:F0:02:DA:CB:69:69:3D:18:3B:DF:44
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 01A10994493700E8C6128504BBCEA0095F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 1A8C
Signing time: Mon 05 Oct 2026 01:01:15 +0000
Manifest this update: Mon 05 Oct 2026 01:01:15 +0000
Manifest next update: Tue 06 Oct 2026 01:01:15 +0000
Files and hashes: 1: 1j-cndh73up45TjcJHDMi8wQ8Xc.roa (hash: KpN3w6f7/yCpGmCh1vdlXsD6GVlxoKm9AQfV9ZcUMXk=)
2: 44Nps6a4A0iJ-S5FNbgCYPVDl-g.roa (hash: +egeaF2cFoduaGGr7Icg4ElpBQ+dGnmrC99v7y4WFaA=)
3: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: c1ldk8fC3aKjsa+B4Fdcok0jqC6nA/feiCZUfi0uj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:94:49:37:00:e8:c6:12:85:04:bb:ce:a0:09:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Oct 5 01:01:15 2026 GMT
Not After : Oct 6 01:01:15 2026 GMT
Subject: CN=b8c6ac67ce811de723f002dacb69693d183bdf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:91:50:5c:9f:c3:c7:2b:67:16:72:da:21:
09:cf:38:92:9a:67:5b:bf:7a:7e:3c:6b:03:b4:b0:
84:99:18:e6:87:10:af:02:9a:64:8e:db:78:46:38:
80:e8:d8:ce:f0:95:94:d4:e6:ce:71:39:ed:94:b6:
0a:5b:dd:cd:92:1d:32:8a:18:d0:64:aa:ee:f3:f4:
69:0c:b1:b3:2d:04:f1:9b:6b:02:2e:6d:54:08:18:
23:c8:ff:db:99:8a:5f:b5:3c:d4:06:09:8e:70:d0:
30:cd:3c:62:09:76:c0:11:13:82:9f:27:19:c2:9e:
9e:91:dd:fe:0a:11:41:55:26:07:55:f1:9a:71:f8:
92:20:db:e7:85:e3:5c:00:2b:d0:1b:0a:54:98:16:
ac:de:35:0e:91:5c:d4:d6:1b:d5:53:51:58:4e:78:
e8:9f:fa:41:53:a6:d3:23:e5:13:fd:9a:0b:8c:32:
a9:e7:69:3e:b0:7a:c7:ed:18:45:53:a8:bf:76:2e:
db:c1:9c:74:c9:6d:7c:6f:56:8d:7f:fd:6c:da:61:
ba:82:8e:cd:e0:19:0b:63:8d:af:de:9e:ba:d1:44:
7f:d2:0b:03:0b:64:44:ea:e9:44:99:2c:69:4d:b6:
d3:fa:b1:c8:1c:61:c8:9c:57:94:17:69:5e:ec:39:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:AC:67:CE:81:1D:E7:23:F0:02:DA:CB:69:69:3D:18:3B:DF:44
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:59:db:2a:d4:5a:8a:5f:9c:3b:d7:30:52:58:41:27:9c:93:
85:be:03:09:d1:d0:28:0d:df:64:24:05:63:9f:dc:41:0c:69:
65:3b:35:7a:4b:a2:f8:eb:c5:03:a2:63:92:d9:60:fc:09:68:
51:ff:ec:fc:c4:4c:f1:7f:63:fd:c7:88:4d:da:d8:5a:a2:88:
29:71:95:d6:82:d9:1c:8e:00:2b:ad:c9:88:af:87:5b:b7:2f:
52:91:63:01:9b:25:14:a5:a2:f4:7f:7e:e7:11:2d:41:be:78:
ed:cb:4c:64:c3:3b:80:a6:f2:d9:15:53:14:06:71:b9:2c:56:
26:50:5e:27:dc:1e:62:36:6b:23:11:2e:eb:31:86:b7:13:92:
03:07:9a:69:26:85:fc:12:1a:f0:27:30:4e:56:c5:d9:e3:89:
2c:fe:2b:e1:aa:ab:d8:dd:5f:e1:01:76:ab:aa:d2:d3:2e:54:
ad:2c:f5:ae:0b:55:8f:4d:69:89:d9:d0:d9:1b:a0:74:eb:a3:
0c:ca:38:58:d8:f3:68:67:0f:35:4c:9c:88:fb:67:0d:b3:fd:
71:c7:26:ec:f6:75:9a:fe:8a:f2:b2:a4:47:22:61:52:f9:c2:
f6:3f:c5:3f:7a:ae:cf:b8:13:e9:d0:3d:d9:32:03:62:9d:aa:
50:74:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:33:53 2026 by rpki-client