Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
File: S0g59fGdvV8HCyEzK1HblgDs_x4.mft (raw, json)
Hash identifier: BKJqj47bcz8GVyNmIsGujHoAZ+L+az+K24+1d0G0ty8=
Subject key identifier: 71:C6:73:9A:18:1E:E6:52:E6:F3:FD:39:61:BC:E6:34:4F:D3:08:44
Authority key identifier: 4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
Certificate issuer: /CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Certificate serial: 019F8F7E2D51CC9754B40F486CBBC654F9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:38 +0000
Manifest this update: Thu 23 Jul 2026 15:00:38 +0000
Manifest next update: Fri 24 Jul 2026 15:00:38 +0000
Files and hashes: 1: 03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa (hash: VqgoLuy2vs3Aqndad7HT8djT9h+8QRfwiwp+Z6UCQlM=)
2: S0g59fGdvV8HCyEzK1HblgDs_x4.crl (hash: ype2mIL7rug2jTSQtBAnzECSOUksmTbHAdGHQG4bgWE=)
3: ZFi-VF-nsRadbtFze21Z8_HjAMk.roa (hash: Yk/ofossI179okCkrA1xAfMSkH76UYS/s2OiRTVcCg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:2d:51:cc:97:54:b4:0f:48:6c:bb:c6:54:f9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Validity
Not Before: Jul 23 15:00:38 2026 GMT
Not After : Jul 24 15:00:38 2026 GMT
Subject: CN=71c6739a181ee652e6f3fd3961bce6344fd30844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:f9:6b:3b:79:a9:fc:3a:9b:73:0c:2d:09:
7e:8c:9f:7a:2a:58:97:fc:36:58:7a:b6:ee:5f:14:
c4:36:96:44:17:8e:c6:05:7f:31:1a:50:68:85:ae:
46:50:f3:09:c1:c0:29:f9:cd:05:60:ad:5c:6e:6c:
d6:b8:6b:65:79:fa:46:77:7d:e3:2c:a8:f5:7c:4e:
0c:45:5c:d1:f6:8a:f9:7c:7d:1a:92:2a:ca:79:44:
43:ff:5b:d3:a8:65:c5:f8:32:f0:f2:a2:eb:10:0a:
47:0f:75:ee:7c:4b:b2:36:98:aa:a0:df:1c:f5:09:
86:83:29:ad:fc:b9:ef:39:a3:ec:32:77:a1:33:6e:
07:a7:cc:86:dd:13:9c:72:6e:29:a7:57:2f:5a:02:
fd:24:ae:a9:eb:e0:a8:85:10:42:b0:93:d8:46:cb:
09:7b:cd:55:b7:3f:00:e2:d3:ee:95:94:94:ff:a2:
0a:a4:eb:1f:35:14:e9:17:fb:57:b3:cd:04:dd:91:
e6:dc:25:4c:0f:d9:13:8c:44:f3:87:f9:84:7a:b2:
bb:40:cf:90:27:6c:09:96:74:c0:f8:a3:df:25:35:
54:01:cc:2b:d9:cd:15:a1:8e:7c:d7:d3:3e:43:9a:
63:cb:00:9e:f7:69:76:83:ed:e3:14:0d:c5:a9:05:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:73:9A:18:1E:E6:52:E6:F3:FD:39:61:BC:E6:34:4F:D3:08:44
X509v3 Authority Key Identifier:
keyid:4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f4:f1:f6:84:ca:2c:77:4f:4e:50:97:d5:7a:d9:3a:e9:d1:
15:8f:a7:95:18:16:10:99:95:4b:a7:2f:80:4f:f6:b6:b2:ff:
f0:88:ab:e4:7c:56:12:d8:a9:38:ea:e2:6b:89:0a:b5:70:f3:
e5:2d:3b:61:56:5d:f2:3c:64:bf:fb:5a:17:d1:83:34:c6:b4:
3b:39:c4:aa:81:b4:05:c1:e5:f7:76:ad:1e:9c:d6:7c:17:8f:
a2:19:8a:41:aa:7e:78:f6:0d:3a:69:c0:10:86:2a:15:44:99:
2b:f4:98:cc:07:3a:0e:fa:65:66:73:91:85:4e:9d:d4:b7:fe:
18:d7:3c:d6:38:b8:c8:22:5d:a2:cd:2a:09:ea:92:76:07:02:
a2:7f:d8:85:b2:e4:a4:f5:89:d3:55:51:9d:e9:62:0c:a5:bb:
dc:6d:06:c6:d6:bb:f4:f6:1f:79:f5:c1:1a:7f:01:5f:7c:9d:
8c:a7:a8:0d:49:35:82:85:b2:68:74:86:f6:de:ca:e4:d5:df:
e3:9f:a1:7e:92:30:f5:af:2e:bb:11:6c:e2:f4:90:b5:b8:df:
6c:71:1b:0a:16:88:f5:57:a0:90:a6:69:d1:04:f3:47:d7:a6:
a4:4e:01:b6:40:20:c7:2a:fb:66:8c:46:88:8e:12:fe:9d:2f:
9d:c2:8f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:00 2026 by rpki-client