Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: 4FcQS2YlUd6LSK76iR7XTgyzF2rtykBqJ6AQvnZ7qxM=
Subject key identifier: FF:84:DA:44:8D:53:2E:43:F8:7E:40:F5:E1:75:26:6C:90:CA:68:20
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 01A0CCDA02D28AF25D646F40D29218DFFBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 06:00:34 +0000
Manifest this update: Wed 23 Sep 2026 06:00:34 +0000
Manifest next update: Thu 24 Sep 2026 06:00:34 +0000
Files and hashes: 1: AmojMy3O0TzhYdnqQ_foiNeMfu0.roa (hash: NeSi6ZBMXloVln9cQN9LXVSt3sMQcF7jHdMdqk0HF3M=)
2: QxwdEpVgo81_-mwIpi91_VPBVXk.roa (hash: W+b58r8ZTGE9pnt5zsRnperhoba0alTWik9Mki5Rn8o=)
3: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: YEpoZKeT49lBZfsqEyuOw1IcTlwDKYSQ7PnNXVdDXTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:02:d2:8a:f2:5d:64:6f:40:d2:92:18:df:fb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Sep 23 06:00:34 2026 GMT
Not After : Sep 24 06:00:34 2026 GMT
Subject: CN=ff84da448d532e43f87e40f5e175266c90ca6820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:6d:5b:f9:61:00:9a:c8:d1:6e:74:66:dd:
47:3c:e5:d9:62:8c:24:80:bb:8d:1b:bc:a4:59:32:
9d:03:74:75:4b:ef:7e:75:e7:e9:20:63:23:98:30:
b0:47:0b:03:77:29:48:7a:1e:ee:1b:f1:7b:f0:0f:
d3:26:21:7c:8b:e1:b0:ff:8f:32:d8:bf:b6:6d:8c:
b2:81:5c:7b:8a:22:5b:79:42:36:4c:ee:0e:03:c2:
a8:7f:13:0a:5c:63:8e:3f:d3:67:8e:28:5d:7a:57:
90:e5:86:26:91:ac:0a:a3:ec:6e:6d:b6:81:31:cd:
45:0d:0d:0e:78:67:26:c3:59:c5:31:ff:e5:ef:68:
ea:35:27:71:dd:c8:1d:3d:8c:55:e9:89:48:2a:60:
ac:8d:93:b7:1f:a1:b6:95:4c:f6:d7:7b:07:79:45:
51:e1:2f:37:dd:85:c3:2f:e9:5a:54:7d:bd:24:05:
61:79:cb:3c:4b:f8:bd:84:b8:e3:a9:24:0a:4a:35:
4e:dc:e8:ea:f6:2c:e9:59:3a:c1:21:41:30:6c:bc:
75:c5:ea:24:b0:15:41:7b:81:b9:8f:34:c2:dd:c1:
38:ac:1b:a1:d5:27:15:6e:6f:39:e9:2e:d5:bf:cb:
87:52:9d:c5:c5:15:74:71:d7:32:2a:80:52:69:cf:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:84:DA:44:8D:53:2E:43:F8:7E:40:F5:E1:75:26:6C:90:CA:68:20
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:53:fa:d7:28:04:b0:43:59:32:55:82:d3:44:17:8d:63:49:
4d:e8:07:57:eb:f4:e9:4d:e8:ef:c4:51:6c:fc:7d:55:7d:67:
74:57:e8:9e:31:57:d6:0e:d5:f9:d9:44:5f:72:1f:43:90:f7:
67:15:b9:15:94:97:69:84:08:46:41:a0:0e:c2:95:09:65:8a:
35:aa:c4:c2:54:4c:3e:70:ed:59:9e:55:d1:4a:7a:d1:43:86:
17:af:bd:b1:5f:b1:1b:62:8b:cf:35:4a:f4:e2:8c:a2:76:d9:
73:9c:b8:a6:31:3c:0a:70:7d:04:6d:01:45:3a:4e:fd:55:0a:
0e:ba:b8:89:08:66:5f:5f:1c:fa:21:76:07:52:ae:9b:0d:11:
64:81:ac:00:99:10:58:55:97:73:0e:f7:c1:73:90:3c:eb:98:
6b:07:79:b1:3c:8e:c7:8f:a7:78:8a:50:15:21:71:0c:65:54:
25:f3:0c:2e:87:3b:5d:97:66:57:35:95:9e:1d:27:b7:63:86:
c9:c8:11:7a:d3:54:af:87:f7:b1:67:6e:a6:4a:51:ad:bc:91:
51:67:d6:a6:3a:b8:4f:7e:c9:0c:c9:7f:29:0b:43:b6:ac:b9:
4d:b7:50:a3:bc:05:f4:b0:28:ab:00:b4:1c:d6:55:cf:61:fa:
f2:02:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:13:04 2026 by rpki-client