Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
File: S0g59fGdvV8HCyEzK1HblgDs_x4.mft (raw, json)
Hash identifier: HHfV8MJHd5nhM8c385zr5Y/AvlqWymui/QJ+uf/ShiU=
Subject key identifier: 53:E6:53:63:15:12:6C:88:4A:C7:A3:24:11:28:CA:A8:13:47:A9:0D
Authority key identifier: 4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
Certificate issuer: /CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Certificate serial: 01A1DE70D20DA3303DE6CAA169DB4654EDEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:38 +0000
Manifest this update: Sun 15 Nov 2026 09:01:38 +0000
Manifest next update: Mon 16 Nov 2026 09:01:38 +0000
Files and hashes: 1: 03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa (hash: VqgoLuy2vs3Aqndad7HT8djT9h+8QRfwiwp+Z6UCQlM=)
2: S0g59fGdvV8HCyEzK1HblgDs_x4.crl (hash: d+rLSLvK1G0ps5FimMLA9UQ4jPnI+VS0ZiiQc4SiLk0=)
3: ZFi-VF-nsRadbtFze21Z8_HjAMk.roa (hash: Yk/ofossI179okCkrA1xAfMSkH76UYS/s2OiRTVcCg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:d2:0d:a3:30:3d:e6:ca:a1:69:db:46:54:ed:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Validity
Not Before: Nov 15 09:01:38 2026 GMT
Not After : Nov 16 09:01:38 2026 GMT
Subject: CN=53e6536315126c884ac7a3241128caa81347a90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:eb:66:ea:89:5c:ca:c3:75:53:02:ce:0c:
74:c4:13:ac:50:d1:37:ef:22:1a:8d:3d:09:42:d0:
43:40:7a:20:f9:3e:f8:32:9e:10:a8:30:ff:d0:ad:
24:3a:53:67:5b:f4:d7:e1:18:76:73:a3:c5:78:05:
07:72:37:48:f1:e9:f0:66:89:6c:f7:81:02:7a:b2:
ba:5a:8a:9e:88:48:88:6b:13:b2:7b:7a:f9:c6:bc:
e2:1f:79:30:d6:ae:52:cf:bb:69:17:48:26:02:6b:
95:b7:dc:84:52:af:b8:c7:5c:e6:8b:b3:13:04:ad:
4f:f9:b6:d8:b7:6d:b9:23:ca:46:18:40:38:2a:68:
23:00:e7:5e:f6:79:f2:c0:b1:fa:3a:7f:51:69:23:
72:82:ca:d6:1e:02:bb:54:9a:c6:5e:cf:d4:97:8d:
6b:6d:db:68:dc:01:28:dd:de:d7:bb:a5:bb:0c:fd:
89:00:f7:cf:93:4b:f8:7a:53:83:1c:28:18:bd:1d:
70:8b:97:2a:2c:49:30:b6:e1:74:11:33:8e:b6:2d:
37:12:2b:1d:2f:fd:6c:bc:9a:da:a4:35:14:b0:92:
88:1f:70:37:80:43:3e:ae:0f:51:a4:c1:3d:bf:e2:
bd:a5:1d:3c:c3:43:7f:90:0c:a9:86:30:e2:c3:74:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:53:63:15:12:6C:88:4A:C7:A3:24:11:28:CA:A8:13:47:A9:0D
X509v3 Authority Key Identifier:
keyid:4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:a3:6b:e1:aa:67:81:a3:f4:16:02:63:f6:10:1a:42:68:
bc:7f:5d:74:1a:ed:09:48:33:f6:a8:85:a5:47:d1:ff:8e:7b:
31:e5:d2:96:51:6d:bb:67:38:94:b1:b8:b5:c8:da:19:05:fb:
64:31:8e:e0:b4:9f:1e:67:ed:bd:a8:1d:f8:26:87:f5:01:6a:
22:3a:9d:af:54:c5:6e:1b:05:6e:98:18:59:8f:72:18:f3:7d:
a9:96:3f:71:64:9b:76:e0:1d:aa:26:5e:b5:b9:29:11:7c:a3:
54:fc:2a:6e:58:9d:ec:99:28:cc:ab:9a:6a:40:a6:b4:10:97:
59:93:c9:95:42:3e:74:f6:63:86:ae:fd:b1:ba:c5:3f:b0:cf:
2c:e0:d2:45:67:99:91:c9:be:2c:d1:2e:cf:cb:da:15:a9:2d:
d4:38:de:1a:30:87:b5:16:3d:4e:76:6a:04:ee:04:a0:d4:9a:
49:17:31:19:1b:dd:70:e7:5d:14:dc:85:84:a7:a1:d5:c3:12:
2d:c9:cd:2b:0b:0d:d4:44:a1:ea:95:98:94:59:a7:72:c1:ae:
12:7b:0b:20:e9:d2:e4:d1:cc:12:f1:14:32:84:32:a4:9e:a5:
6d:88:70:f9:43:a8:93:12:d4:f7:d6:78:e6:6e:76:7d:e2:7a:
6f:a2:2d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecNINozA95sqhadtGVO3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNDgzOWY1ZjE5ZGJkNWYwNzBiMjEzMzJiNTFkYjk2MDBl
Y2ZmMWUwHhcNMjYxMTE1MDkwMTM4WhcNMjYxMTE2MDkwMTM4WjAzMTEwLwYDVQQD
Eyg1M2U2NTM2MzE1MTI2Yzg4NGFjN2EzMjQxMTI4Y2FhODEzNDdhOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3DrZuqJXMrDdVMCzgx0xBOsUNE3
7yIajT0JQtBDQHog+T74Mp4QqDD/0K0kOlNnW/TX4Rh2c6PFeAUHcjdI8enwZols
94ECerK6WoqeiEiIaxOye3r5xrziH3kw1q5Sz7tpF0gmAmuVt9yEUq+4x1zmi7MT
BK1P+bbYt225I8pGGEA4KmgjAOde9nnywLH6On9RaSNygsrWHgK7VJrGXs/Ul41r
bdto3AEo3d7Xu6W7DP2JAPfPk0v4elODHCgYvR1wi5cqLEkwtuF0ETOOti03Eisd
L/1svJrapDUUsJKIH3A3gEM+rg9RpME9v+K9pR08w0N/kAyphjDiw3SSOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPmU2MVEmyISsejJBEoyqgTR6kNMB8GA1UdIwQY
MBaAFEtIOfXxnb1fBwshMytR25YA7P8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzBnNTlmR2R2VjhIQ3lFeksxSGJsZ0RzX3g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDIt
Mzg4ZDhhZDJhNWJiLzEvUzBnNTlmR2R2VjhIQ3lFeksxSGJsZ0RzX3g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDItMzg4ZDhhZDJhNWJi
LzEvUzBnNTlmR2R2VjhIQ3lFeksxSGJsZ0RzX3g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAuja+Gq
Z4Gj9BYCY/YQGkJovH9ddBrtCUgz9qiFpUfR/457MeXSllFtu2c4lLG4tcjaGQX7
ZDGO4LSfHmftvagd+CaH9QFqIjqdr1TFbhsFbpgYWY9yGPN9qZY/cWSbduAdqiZe
tbkpEXyjVPwqblid7JkozKuaakCmtBCXWZPJlUI+dPZjhq79sbrFP7DPLODSRWeZ
kcm+LNEuz8vaFakt1DjeGjCHtRY9TnZqBO4EoNSaSRcxGRvdcOddFNyFhKeh1cMS
LcnNKwsN1ESh6pWYlFmncsGuEnsLIOnS5NHMEvEUMoQypJ6lbYhw+UOokxLU99Z4
5m52feJ6b6ItuA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:50:03 2026 by rpki-client