Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: 4/CfoPcWV3aHefFIzV/w+u5Ay6OZahnNZ29PTDYqOjc=
Subject key identifier: 61:A8:10:DC:07:3D:24:CA:B0:22:DA:A9:B3:F0:15:88:E9:F9:89:6C
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 01A0CD1118ECF0EF803CD151E4AB9714F736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 07:00:44 +0000
Manifest this update: Wed 23 Sep 2026 07:00:44 +0000
Manifest next update: Thu 24 Sep 2026 07:00:44 +0000
Files and hashes: 1: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (hash: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E=)
2: S84INADK9hbzUCAynI1288S4OaU.crl (hash: tWjvh1rh9ZqE2IMogCa75R8HCzVVeGsOSX9GVmtbyfw=)
3: rCfZiz4VYjIBfKu68sLkrutitjY.asa (hash: Ybi387bthNpyIWhQISnJAR9yyGDzSsTDc5P3pmLLByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:18:ec:f0:ef:80:3c:d1:51:e4:ab:97:14:f7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Sep 23 07:00:44 2026 GMT
Not After : Sep 24 07:00:44 2026 GMT
Subject: CN=61a810dc073d24cab022daa9b3f01588e9f9896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:7d:03:74:e9:41:9f:5a:f8:26:0d:a1:27:
65:10:e3:90:f4:f7:09:57:0a:e2:c4:3d:a3:19:28:
b2:15:d6:de:c2:cb:e5:73:4b:0f:8d:81:84:94:81:
fb:e6:fd:c0:51:fe:60:3d:4c:e3:f6:44:b2:bc:2d:
aa:a0:44:70:32:88:4d:20:21:46:aa:c1:81:59:f0:
93:de:c4:0c:da:89:f2:6f:62:1f:08:88:1e:bc:90:
a8:3e:ab:a2:53:92:05:a6:00:97:84:34:f0:5e:d6:
a0:e5:92:55:6c:79:66:d2:69:16:95:41:a7:93:c2:
10:97:e1:05:c7:fe:2c:a0:eb:23:c9:33:e2:0c:69:
b1:80:73:1d:e3:eb:a4:87:f6:1d:93:0f:ce:fc:46:
be:fd:09:fc:0b:98:1f:4a:9d:06:e7:16:b0:b1:8e:
4f:b9:cc:90:d4:ec:b6:3c:66:b9:7a:10:a5:fb:61:
26:5f:56:37:e5:51:29:19:20:26:34:26:d7:d6:f7:
90:cb:dc:0c:6d:1c:29:85:65:a7:41:10:1e:1f:8e:
f8:bf:ca:a4:6d:90:f4:a4:ef:b5:38:ce:bd:ef:e0:
07:e8:84:cf:1d:f4:37:15:81:d5:29:69:d4:08:25:
05:84:38:9a:89:a3:c1:ed:b7:75:9c:c9:2c:3c:dd:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:10:DC:07:3D:24:CA:B0:22:DA:A9:B3:F0:15:88:E9:F9:89:6C
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:69:37:c7:34:2f:14:ba:cd:c9:ff:42:c0:47:1c:cc:14:
2a:36:93:a8:87:e0:43:bd:d9:43:ca:ad:3d:97:81:70:4f:e0:
fe:31:49:c0:20:0f:dd:10:86:0e:70:e6:40:3a:5b:05:7d:b7:
75:89:15:8f:5c:db:9e:ef:22:2a:65:8c:46:10:f6:3b:6a:80:
f2:88:96:2b:fc:ea:10:07:cf:b5:ca:a3:07:15:70:1e:3c:93:
4b:72:e2:e2:a4:1c:3c:bc:57:01:18:36:74:88:cd:b1:30:b6:
57:4b:1e:1c:4d:a7:41:bf:5f:37:60:d4:7d:27:c1:d9:c8:d9:
36:2e:2d:c0:57:53:ae:ff:89:97:49:45:f4:c4:7c:9a:d8:6e:
dd:27:c8:4c:bc:05:aa:cd:0f:84:1d:1c:cf:ab:34:21:33:37:
f2:8a:f0:85:ec:48:33:ad:d5:c3:a6:a2:ea:73:bc:f1:d6:09:
5c:9b:7d:bd:e5:21:1f:51:c2:60:39:47:6e:06:86:74:b1:f0:
17:22:25:31:c7:24:d6:99:28:46:69:d1:15:0e:2b:89:71:ad:
28:e4:23:c5:7f:33:ba:3c:6f:f9:14:f8:47:ef:3f:08:5b:70:
35:a9:24:64:d1:9b:53:20:b5:b9:61:48:47:7d:0a:4a:a4:71:
88:9e:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:04:53 2026 by rpki-client