Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: JWOh0ayyUsUrXQGEK3FdqlH9BY/aRsqVbDm5YL6ADn4=
Subject key identifier: 8D:61:91:59:B7:4F:4E:3E:89:A6:2E:FF:5D:EC:2C:08:42:28:C1:E3
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 019F924915D57553073AFB89898CB04271FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 18A6
Signing time: Fri 24 Jul 2026 04:01:30 +0000
Manifest this update: Fri 24 Jul 2026 04:01:30 +0000
Manifest next update: Sat 25 Jul 2026 04:01:30 +0000
Files and hashes: 1: A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa (hash: 9eSIPzP882gnq+toY+f9OquYBfy9B8LbOEOMMknDFO4=)
2: ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa (hash: judBBvzLbMYur3XpExAgR3vsTfmpZxb1unhrGpyJGfs=)
3: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: 0tIwOXpbEo7sAieIfJa3mwvcisgvw4zrzj5p+6aTPMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:15:d5:75:53:07:3a:fb:89:89:8c:b0:42:71:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Jul 24 04:01:30 2026 GMT
Not After : Jul 25 04:01:30 2026 GMT
Subject: CN=8d619159b74f4e3e89a62eff5dec2c084228c1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:df:e5:4f:bc:6e:70:3d:dc:d4:41:a9:13:
73:7f:2f:0c:a0:6c:ec:0b:ae:cc:a5:ea:ef:c6:cf:
ce:1c:39:b0:7b:5b:b7:72:aa:fd:ff:ac:33:1b:2d:
62:74:12:e9:86:1d:04:89:35:4d:9a:9d:44:e8:97:
4c:e9:7e:6d:e1:10:45:04:83:f6:29:7c:81:87:e6:
3a:a8:92:0a:c5:78:52:4b:ab:96:03:41:0b:65:26:
c5:cf:53:ad:98:91:0a:7f:0e:b1:97:5b:4e:68:6c:
fe:1c:3f:a1:f4:bc:6c:45:a6:4f:8f:0d:aa:e6:67:
63:cb:58:12:bf:78:9a:f5:91:5d:d0:d3:ec:92:ac:
da:7a:bf:11:93:9f:43:08:ed:f5:95:23:c2:ff:bf:
2e:a8:2c:ed:3d:6e:5f:6b:ca:1c:fa:69:9a:17:92:
0f:62:7c:d0:25:20:fc:2c:3a:9c:ac:bd:90:61:98:
26:4d:04:a3:35:69:c6:09:c4:24:15:d3:5c:24:1b:
ad:85:3d:eb:37:d5:65:7a:b4:b8:8d:72:d0:fb:42:
a4:cc:11:15:21:33:e9:14:fb:f1:b5:83:df:96:92:
95:50:8a:64:a5:0e:24:b3:c0:45:2a:53:8c:f1:76:
ec:99:fc:7d:02:01:b2:34:93:74:90:f2:94:13:d6:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:61:91:59:B7:4F:4E:3E:89:A6:2E:FF:5D:EC:2C:08:42:28:C1:E3
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:64:f3:c3:b3:91:c3:88:68:ed:94:86:11:8c:13:bb:71:31:
29:d1:39:08:61:bf:76:7e:68:73:c2:5c:28:f6:82:47:25:86:
35:aa:72:17:94:46:2f:b3:a9:88:a5:17:5a:97:16:1d:7b:14:
cf:79:84:39:b3:ca:7a:17:2d:ab:be:94:7f:71:dd:99:06:41:
fc:15:12:86:98:7d:c2:70:a6:a9:fd:01:29:d0:47:a3:7e:f7:
f9:12:5c:fc:da:6e:5d:f4:e2:d7:1e:ac:d8:5a:63:3b:35:c5:
01:5e:ec:c9:e4:4d:b6:e8:d0:6f:e9:da:8a:3e:4d:7f:24:77:
9d:86:62:3c:f0:59:fa:cd:75:26:68:2b:fb:f2:7b:b7:c2:ee:
27:28:e9:52:d5:8e:e7:ba:d2:46:5e:b9:91:cf:07:d4:5c:a2:
89:b4:bc:8f:d1:d1:4e:62:26:c2:56:a7:a5:b9:9e:2c:ba:99:
89:22:4e:66:e3:37:05:79:73:69:90:bb:d6:2a:2c:7f:9d:34:
e6:3d:5e:6d:5b:6e:ca:d4:99:fe:73:b2:07:c7:96:7b:e9:23:
ef:6f:dc:94:ae:f6:e7:62:8e:ee:62:49:c3:c9:81:e8:20:a7:
92:29:c6:46:44:5b:85:d4:cb:4e:f8:69:fe:62:7d:b0:0b:1c:
96:34:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:42:20 2026 by rpki-client