Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier: 5xlmJL6YYFZaPAycjXzQJ5a6o+tTlqTSpWYCF4t19ZQ=
Subject key identifier: D4:46:FF:57:F1:2C:7E:2B:78:92:81:22:A5:DF:D1:B9:6E:34:51:71
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 01A0F5A0360FB3A95AB944814BDB8A44F76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number: 1A8A
Signing time: Thu 01 Oct 2026 04:01:52 +0000
Manifest this update: Thu 01 Oct 2026 04:01:52 +0000
Manifest next update: Fri 02 Oct 2026 04:01:52 +0000
Files and hashes: 1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
3: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
4: dw9DFWakqWyGOvPpVMr5LqWzzOU.roa (hash: vpyPXqpUatnsbNFIl69kvcHIfHdO0INTOAaGxcZLEhQ=)
5: kSkniVRVZqjXlp9BCZT6zQWlnDU.roa (hash: FfDKz/98X7m6YKQq0UNqzZ0ctHS3WQFyRiYlyLAtxCw=)
6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: fcpi7OvDriTdhq6HNIyvOxZa+XmdpF+0ICDbjNn/wv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:a0:36:0f:b3:a9:5a:b9:44:81:4b:db:8a:44:f7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Oct 1 04:01:52 2026 GMT
Not After : Oct 2 04:01:52 2026 GMT
Subject: CN=d446ff57f12c7e2b78928122a5dfd1b96e345171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:d0:41:1c:9a:19:97:42:f1:67:c2:e6:16:
80:b9:ee:f4:6b:2f:b2:11:ea:15:dc:13:83:65:08:
c8:e6:b1:0b:82:93:0b:d8:1d:e8:ad:5e:fb:a3:94:
5c:7e:f0:f5:71:a2:e9:d8:1a:2c:26:04:9d:ea:00:
60:a0:37:1e:40:32:69:a6:67:1c:80:f7:53:ea:f4:
15:e2:a3:21:60:13:71:c0:36:6b:e0:83:07:6c:81:
7f:cb:12:66:e4:12:16:96:94:43:ad:a8:7a:b6:18:
80:ed:a3:4f:b2:dc:51:cb:fc:aa:01:bd:ce:6d:b8:
be:6e:6f:0d:d1:4f:e7:f3:ac:73:fb:8c:58:25:3b:
65:20:ff:67:ad:fc:0d:7f:c9:f8:02:39:83:55:5f:
5a:86:92:76:8e:53:27:ce:16:2b:99:ec:ad:57:24:
d6:3c:56:4c:77:c9:e1:a6:e6:d7:f5:65:e9:c4:bd:
fb:dd:ee:31:94:13:31:41:01:fb:45:9c:9d:ed:96:
d8:30:ae:fb:b3:2e:38:30:86:15:58:81:bb:26:c2:
df:62:dd:58:d7:c0:da:3a:ac:85:e1:3d:05:2e:9c:
f9:96:16:04:97:f9:7e:fa:fa:7a:c9:2d:10:2e:79:
e9:5d:57:75:24:5a:57:22:df:b9:5d:92:5e:70:24:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:46:FF:57:F1:2C:7E:2B:78:92:81:22:A5:DF:D1:B9:6E:34:51:71
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5a:e5:2c:c3:8e:e3:50:75:92:ee:ee:4e:f1:a6:11:a8:21:
7a:bb:a1:e8:31:c9:5a:c6:7a:e7:ea:33:4c:95:ea:42:63:11:
8c:08:d4:27:cb:71:ea:65:15:9c:ae:30:8e:c2:22:01:6d:d4:
f0:e9:f1:b0:16:a5:34:95:5d:fb:03:fe:89:95:ef:6d:9c:91:
7a:94:a1:c1:45:8f:93:c3:a5:2e:58:8e:5e:41:47:f6:f3:d4:
32:c3:30:6e:de:b7:5c:00:ec:c2:14:90:ff:2f:1e:b1:25:3d:
9f:02:01:07:48:26:7d:72:3f:2c:56:fe:30:f1:20:6d:46:3a:
17:49:59:ed:9f:72:02:1e:be:7b:7a:db:da:5b:e5:f4:bd:82:
ca:2f:ab:d0:04:29:cd:73:e8:c6:d4:11:61:63:85:87:53:4c:
ed:75:87:d2:cb:df:0f:b1:65:cf:72:49:b3:b2:fb:2a:c9:d8:
0a:57:c7:21:48:c4:79:b8:e0:0d:78:fc:9a:33:96:c0:97:de:
9c:e4:8d:54:2a:da:b5:c0:f0:10:7d:21:e7:2c:1f:30:10:06:
85:f1:19:b2:4c:42:03:69:e1:05:53:ee:5d:12:69:e9:9d:b5:
e1:27:58:a0:fb:38:66:b8:28:79:cf:1c:c4:86:27:e8:e9:c9:
25:0f:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:26:53 2026 by rpki-client