Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: wXNAUhU3/WVx/Hx5Bi1klk7zQJuWWnjUIQZO4obuWxE=
Subject key identifier: DA:B8:3C:DA:A8:D3:F8:D2:40:0F:16:9E:D4:08:C6:DF:F4:B6:97:35
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 019F905997238A57B4BD1A0F3E79459378F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 19:00:17 +0000
Manifest this update: Thu 23 Jul 2026 19:00:17 +0000
Manifest next update: Fri 24 Jul 2026 19:00:17 +0000
Files and hashes: 1: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (hash: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E=)
2: S84INADK9hbzUCAynI1288S4OaU.crl (hash: Tk43NSGaogSvRcjLlc8SewI4HRWs4l6msxvqlFUB6iI=)
3: rCfZiz4VYjIBfKu68sLkrutitjY.asa (hash: Ybi387bthNpyIWhQISnJAR9yyGDzSsTDc5P3pmLLByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:97:23:8a:57:b4:bd:1a:0f:3e:79:45:93:78:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Jul 23 19:00:17 2026 GMT
Not After : Jul 24 19:00:17 2026 GMT
Subject: CN=dab83cdaa8d3f8d2400f169ed408c6dff4b69735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:8e:7a:fb:99:00:bb:c9:d2:c3:c0:ca:c6:
86:26:d0:0f:4f:d9:b6:ed:3b:a9:be:4f:f7:1e:ff:
c1:38:38:8d:f0:79:d1:fd:1a:ef:a1:00:64:28:6c:
bc:54:ba:96:bb:25:b7:1a:6b:04:9e:5d:c7:5f:b0:
d8:24:e4:35:f4:bf:96:f7:be:58:bf:ed:89:a6:64:
db:20:4f:a0:9b:00:04:07:d9:cd:a6:ab:21:27:9a:
88:a0:89:20:c6:ab:2c:74:5e:93:04:b3:da:d0:93:
3b:97:04:2e:98:94:67:2e:ae:68:13:10:cb:74:a3:
ea:2b:41:c2:5a:5c:5b:a4:2d:1d:4f:8e:6b:df:88:
e4:05:d7:d8:07:92:8f:fe:2e:3e:2b:5f:d0:57:aa:
ee:1a:c0:29:40:e1:bb:a4:34:38:3c:5e:7d:11:be:
1a:83:6f:e8:38:f9:5d:a3:0e:b5:cd:7e:fd:dd:e6:
dc:c9:7a:be:40:73:90:7c:c5:75:8c:9d:84:35:c8:
b8:76:d7:bb:3e:4f:dd:c0:a2:ee:82:36:ca:dc:0d:
64:73:fe:6c:63:7b:5f:42:d9:5f:77:47:f0:fb:29:
33:50:b0:5d:32:38:b0:04:e5:0c:97:01:88:09:dd:
91:77:e3:1b:a8:39:a8:86:a6:2f:7b:22:43:d8:51:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B8:3C:DA:A8:D3:F8:D2:40:0F:16:9E:D4:08:C6:DF:F4:B6:97:35
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:a4:e1:f9:ac:44:66:b9:87:cb:c0:94:f2:fb:17:41:d2:
08:d4:9d:cc:bb:9c:5a:cb:01:e0:65:47:e6:5e:c0:76:9c:be:
4c:33:f1:8d:53:1d:f2:0f:4c:ba:67:7c:cc:e3:6b:71:3a:53:
f2:27:c9:19:a2:7e:b9:a2:6a:f1:30:32:79:48:cd:39:85:06:
68:f2:2b:df:81:bd:cd:c8:a5:ce:a8:3a:d2:73:3b:ce:31:e7:
d5:96:20:5a:b5:35:c8:37:ab:46:7c:ef:fd:e1:6a:9b:4b:3b:
15:e5:2e:b5:6b:96:a5:ba:58:90:b3:48:fd:e9:b5:c4:8a:4c:
43:0f:fb:8d:c3:3c:5c:cb:c4:fb:f8:b1:3a:68:a8:fa:f6:c1:
82:bf:46:a1:4f:4c:bb:ad:83:a7:43:e3:ec:5b:df:eb:b9:85:
61:a6:c8:d5:24:de:a9:ea:72:c9:f5:d1:00:ee:c3:ee:61:93:
12:27:32:1a:8f:92:25:c2:dc:bb:d7:25:27:5a:6a:75:ae:c1:
96:ae:3b:05:b9:f4:e6:02:37:43:62:de:a2:1f:82:6f:93:ab:
41:38:a7:c4:26:80:6b:7e:cf:a1:8b:c8:4c:d4:b8:d6:59:64:
0a:8e:2a:4f:6e:c1:d4:cd:b5:fb:ca:76:82:b0:0c:b4:2a:d9:
2b:13:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:04 2026 by rpki-client