Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
File: S0g59fGdvV8HCyEzK1HblgDs_x4.mft (raw, json)
Hash identifier: 0p0cUCS+vwFXgN3n3FuAjHFj9yeNTPjxlleMBd4f5wI=
Subject key identifier: 29:79:77:57:9E:24:7B:F7:56:33:FA:E3:A0:C0:2E:D5:F7:96:84:0D
Authority key identifier: 4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
Certificate issuer: /CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Certificate serial: 01A0D9BB5F9D3A97F8CAD5F0E64A69216CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:02:10 +0000
Manifest this update: Fri 25 Sep 2026 18:02:10 +0000
Manifest next update: Sat 26 Sep 2026 18:02:10 +0000
Files and hashes: 1: 03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa (hash: VqgoLuy2vs3Aqndad7HT8djT9h+8QRfwiwp+Z6UCQlM=)
2: S0g59fGdvV8HCyEzK1HblgDs_x4.crl (hash: qa4QeINcsJPWGtpJmLR1XeMUnXHsRg/LDmElSTykQT8=)
3: ZFi-VF-nsRadbtFze21Z8_HjAMk.roa (hash: Yk/ofossI179okCkrA1xAfMSkH76UYS/s2OiRTVcCg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:5f:9d:3a:97:f8:ca:d5:f0:e6:4a:69:21:6c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Validity
Not Before: Sep 25 18:02:10 2026 GMT
Not After : Sep 26 18:02:10 2026 GMT
Subject: CN=297977579e247bf75633fae3a0c02ed5f796840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:8c:83:88:fd:31:a3:b5:da:ed:0a:3d:14:
91:c4:7a:89:23:da:6f:e5:6e:ea:a3:24:eb:5e:2a:
a4:8a:a1:ae:0b:9b:4a:90:e9:b3:9b:0e:fa:a8:0f:
b0:54:4a:f1:88:04:be:1a:10:aa:40:fd:ea:f5:be:
fc:77:e3:5a:50:81:b8:c9:b8:a5:0a:27:ae:fc:cf:
85:09:fd:4a:42:4b:be:b0:09:2b:85:0f:4f:56:fc:
cd:22:cd:35:b8:12:15:d5:1f:bb:5f:95:ec:0a:48:
2c:dc:12:2b:f2:80:94:0b:42:f6:07:b4:e6:dc:a4:
b2:af:c2:7d:6a:3a:8b:fa:34:61:f0:e3:8f:4a:57:
c5:bf:6c:f1:81:e8:95:73:97:ff:73:e5:7a:d3:8d:
4a:62:9f:3f:5a:be:35:c8:b1:8e:8c:08:93:0d:85:
cf:ec:55:c8:9b:b1:24:21:94:f7:de:fe:bc:36:c4:
31:91:36:38:4e:a6:60:57:6f:5d:29:99:79:c9:ed:
c8:2a:43:54:b0:c4:86:55:87:47:e7:8e:08:2b:07:
6d:8b:f5:74:04:ef:56:10:46:ef:4f:93:42:e4:be:
ec:1f:28:27:7c:56:0f:b3:00:6d:b9:16:14:86:f2:
f1:df:43:29:2b:e3:cf:5c:5a:aa:03:0f:d8:4d:e7:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:79:77:57:9E:24:7B:F7:56:33:FA:E3:A0:C0:2E:D5:F7:96:84:0D
X509v3 Authority Key Identifier:
keyid:4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9b:58:37:33:2d:7c:67:50:16:85:01:8f:51:cc:01:06:c6:
2e:68:48:db:2e:a9:92:6a:fe:4c:c9:58:55:db:cf:ab:b5:93:
7e:9d:a6:2b:91:51:67:75:ff:90:b0:07:da:72:6f:fb:dc:25:
05:c8:5a:21:04:a8:1e:49:1e:24:25:c8:58:f8:18:b0:45:15:
9e:aa:ec:69:4f:98:60:8b:40:ee:09:03:48:b9:41:c9:16:b6:
c1:ed:57:22:ac:52:f9:33:f9:07:c7:bb:c6:23:5b:bb:10:a2:
10:1a:6b:2e:00:a2:4b:75:ae:fc:0a:c1:49:36:9e:47:80:5e:
44:20:07:60:ab:45:71:b5:0e:21:c3:3b:e3:04:b8:c7:a3:3b:
4d:56:34:65:39:0b:42:fe:51:cd:2e:51:68:d0:5c:cd:c7:58:
c6:01:54:26:09:2b:aa:d0:ce:cb:83:89:77:1a:df:2f:e2:e3:
f2:de:58:64:c3:63:fb:c3:98:08:dd:b3:aa:98:d4:9f:0a:3c:
f0:ac:ce:6c:b2:fd:a5:bf:72:48:78:70:79:31:5b:1f:8a:5c:
d0:1e:e2:79:09:23:9b:2e:67:c0:17:6b:09:8b:d3:80:a7:1b:
be:23:e3:ec:8f:e2:91:8b:c0:c4:56:16:5d:b7:24:51:a7:1a:
f0:64:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:10 2026 by rpki-client