Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: SOOVsIozbMcrz6opglpNsl0rLf3Zknu9IZmJFsv0ijQ=
Subject key identifier: FD:F8:3B:82:36:BD:70:AD:48:75:BA:B0:66:EB:25:AF:A7:81:A7:31
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 019E1F7E95D12AA591DF6843FC7CCEBE865D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 04:00:49 +0000
Manifest this update: Wed 13 May 2026 04:00:49 +0000
Manifest next update: Thu 14 May 2026 04:00:49 +0000
Files and hashes: 1: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (hash: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E=)
2: S84INADK9hbzUCAynI1288S4OaU.crl (hash: NVoNqoU3SXkJCA6+qseL/Y0BQ9IaIM9fAvwcPChNzwg=)
3: rCfZiz4VYjIBfKu68sLkrutitjY.asa (hash: Ybi387bthNpyIWhQISnJAR9yyGDzSsTDc5P3pmLLByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:95:d1:2a:a5:91:df:68:43:fc:7c:ce:be:86:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: May 13 04:00:49 2026 GMT
Not After : May 14 04:00:49 2026 GMT
Subject: CN=fdf83b8236bd70ad4875bab066eb25afa781a731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:11:05:57:f2:2e:24:8b:fb:5a:89:52:65:
58:4f:ab:5c:53:03:5c:29:e6:a8:ba:6b:ea:28:ab:
3d:e8:4a:75:ec:0e:b3:f4:ec:bd:28:21:26:df:e5:
17:59:f6:cb:1b:4b:2c:3c:bb:0b:72:54:ea:f0:3d:
80:40:55:31:98:7d:dc:6d:99:a1:67:18:80:36:6a:
46:a8:e7:c0:e8:c2:77:d9:a7:d7:e0:9a:74:77:9c:
9a:7b:2f:98:a1:e9:29:80:a5:04:15:bb:10:1c:4d:
62:23:fe:25:83:37:db:09:6e:fe:5d:16:51:fc:4f:
b5:18:b1:ca:f6:b6:ca:bc:43:03:03:55:b2:a9:11:
4d:ac:6e:61:f5:e0:5c:1c:59:ed:b2:61:bf:88:c0:
0e:18:cd:85:f0:ab:38:08:a0:05:1a:8a:b3:c7:24:
04:69:23:d3:63:60:8b:30:c4:93:de:3d:c0:dd:36:
b9:a8:34:14:e6:31:8b:58:6f:96:b3:7f:44:c6:85:
16:1c:0a:ef:d0:01:9c:34:32:18:e8:7c:4d:52:f3:
4c:d7:d1:3f:cf:5f:01:79:4c:ac:69:71:04:ae:13:
07:39:a8:20:05:92:b3:46:05:00:25:3e:64:55:af:
65:de:af:38:6e:5f:ca:83:47:3a:95:12:fc:2c:3b:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F8:3B:82:36:BD:70:AD:48:75:BA:B0:66:EB:25:AF:A7:81:A7:31
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:29:a9:b5:20:74:70:ff:6a:65:fe:57:56:cc:46:be:e6:de:
5b:56:dc:6d:9b:23:77:b7:2d:70:16:06:c9:de:71:79:38:7b:
37:1f:42:1a:ed:06:60:be:b6:7a:15:e3:a6:d5:d3:7a:d9:90:
1f:a9:f5:f1:94:e1:ae:18:04:b5:ea:a8:04:7d:c9:18:7e:3a:
d7:b6:37:a4:0c:81:c6:83:c8:8e:d3:fa:22:c3:ae:1a:61:ce:
19:20:ce:e7:9e:f7:3a:db:c5:1f:1c:6f:15:00:42:38:f8:43:
43:c7:db:3b:da:d7:0e:16:0f:88:e2:a5:c1:ca:b3:5f:d5:7c:
2b:f1:93:41:cc:81:ee:bd:ca:21:10:97:d4:34:cf:e9:48:65:
de:ce:92:36:56:54:62:92:67:7d:be:b5:44:a9:13:71:58:c6:
56:51:1e:ad:cf:80:26:c7:b4:09:51:76:14:0e:ab:7d:41:2f:
f6:f1:48:05:ed:92:2b:91:ed:dd:48:05:48:49:bf:cd:cf:72:
6f:7a:f8:66:ed:c0:47:d5:85:af:ed:b5:29:4b:b8:0c:dc:2f:
f1:4d:c3:7f:f1:a2:74:df:ee:28:e0:d8:9f:3e:1d:46:b0:d9:
a5:19:13:45:b9:ee:a3:35:66:90:1b:32:c8:0e:29:d5:47:6b:
f3:52:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:32:03 2026 by rpki-client