Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: 6K2LJp3T6Bu88onTDY96st7WsenYe0F/4sd/STPVIhY=
Subject key identifier: 63:13:21:B1:6E:8D:24:CC:EB:1E:36:29:44:BE:BF:8D:CE:C8:C2:20
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 01A12C1FE6A0DFC46ABAC6FCC7B865D9997F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 18:00:50 +0000
Manifest this update: Sun 11 Oct 2026 18:00:50 +0000
Manifest next update: Mon 12 Oct 2026 18:00:50 +0000
Files and hashes: 1: 0Zc__kN3HwhsJoBnO7wdin2RQss.roa (hash: CXzPpL1BSz7J6w6QJARe0QxvknuDCjM8a8ZeWT+w+XI=)
2: 8NpquuKtmcdUrFKy47Sj9fT29Os.roa (hash: JUFOjZ1XBHrYKPUOA3cAyXpp/9fbGuZHL5PKFslhQ7k=)
3: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: pZ4DZibDxiiBZECiYLaUbcSf2/yrja/mXsSuenoY6+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:e6:a0:df:c4:6a:ba:c6:fc:c7:b8:65:d9:99:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Oct 11 18:00:50 2026 GMT
Not After : Oct 12 18:00:50 2026 GMT
Subject: CN=631321b16e8d24cceb1e362944bebf8dcec8c220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:03:98:bd:bc:91:24:cf:e9:2c:eb:d4:06:
e3:4f:b8:5b:7d:fa:94:05:7e:38:f7:e3:e0:eb:80:
51:4c:a8:03:6a:7e:41:b1:9b:07:81:7c:b1:39:ae:
59:b1:83:ca:31:25:02:5e:09:79:e7:d1:73:e6:74:
5b:e7:df:56:89:26:03:1c:df:c3:48:bf:29:ab:bc:
c0:2e:28:72:8e:8a:6a:19:68:f4:8d:1b:fe:7e:79:
ce:b9:c1:d3:54:d6:bc:6f:ff:de:3b:1f:fa:e0:18:
00:0c:a3:17:b8:16:1c:4b:46:4d:d8:3d:50:75:72:
1d:88:ad:2c:74:6c:00:c5:5b:a1:a7:93:7b:0b:df:
06:84:fe:b8:f8:96:52:2f:2f:ca:99:2c:cc:bb:d5:
1a:24:59:bd:60:11:6f:a4:29:3b:78:b2:0f:a8:ab:
96:69:cb:66:95:49:fa:d9:5b:ad:ac:64:0a:c6:37:
4a:ef:31:ff:6e:6a:b1:53:ec:3d:c5:1f:33:9d:67:
36:2b:67:9a:ef:f5:7a:62:5c:55:e3:ff:a3:18:4b:
5a:08:c1:5e:4a:47:3f:4f:35:0a:c7:d9:89:e0:e6:
22:c3:c7:fe:b5:a6:a7:6c:b8:4c:c6:01:b0:6b:42:
52:68:d2:e5:c4:1c:5a:cf:7a:79:39:e7:65:89:51:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:13:21:B1:6E:8D:24:CC:EB:1E:36:29:44:BE:BF:8D:CE:C8:C2:20
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:25:7d:3e:45:0a:09:1e:70:f3:f1:2e:ce:49:fb:fd:af:8c:
33:23:8d:28:dd:ad:53:0b:e5:0a:74:fa:d2:a3:df:57:ca:5f:
b6:08:f2:ce:b3:28:8e:51:33:a0:58:29:ef:56:04:25:78:49:
33:46:12:52:2b:48:fd:a9:3e:b9:1e:9f:37:0d:53:2e:f5:0f:
56:39:86:77:51:12:f4:98:dd:fb:8f:64:89:29:14:a4:27:6a:
5e:d8:cd:68:99:1b:8b:78:ee:ae:47:c0:b4:5a:9c:69:f5:d5:
36:d9:9e:06:0f:e4:b1:60:d1:eb:76:40:e6:c2:fa:7e:c2:aa:
cb:e6:e0:fe:48:bc:51:02:49:8d:19:be:cc:05:63:11:67:18:
34:81:6d:7c:93:81:f2:11:5e:46:9b:12:f9:18:41:05:50:05:
74:36:52:25:38:0a:84:1b:e5:16:31:b7:be:9c:d3:bb:27:6b:
2a:6a:cf:bf:2c:da:22:2d:0f:61:56:81:c8:2b:60:31:97:a4:
4a:56:03:d4:f7:a5:69:75:3e:6e:65:55:01:f7:c7:b9:4d:20:
6f:5f:d4:27:eb:a4:1c:bf:22:c3:65:e7:05:82:12:77:dd:ba:
0f:36:f8:3b:90:67:02:83:5e:8e:47:40:54:e7:34:93:a7:ae:
1a:b6:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:49:11 2026 by rpki-client