Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: KZS3NUOYoUUJwlVijVZcytivbPSeL83Yoxjtb0OzN7k=
Subject key identifier: 2D:A6:EF:46:A2:8A:67:D9:2B:D4:33:3D:FF:1F:D8:7F:D8:66:F4:07
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 01A0DB71B2BF541A6ABF2A7CD0CE8900E7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0E55
Signing time: Sat 26 Sep 2026 02:00:56 +0000
Manifest this update: Sat 26 Sep 2026 02:00:56 +0000
Manifest next update: Sun 27 Sep 2026 02:00:56 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: AsIy2GObRTxnUsMZwxH4xd+Ne32CwVStT3iwEuULZDk=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:b2:bf:54:1a:6a:bf:2a:7c:d0:ce:89:00:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Sep 26 02:00:56 2026 GMT
Not After : Sep 27 02:00:56 2026 GMT
Subject: CN=2da6ef46a28a67d92bd4333dff1fd87fd866f407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:ce:80:0c:3e:e9:1a:a9:01:c6:cb:8d:c0:
87:94:d9:cf:fe:58:06:3b:73:f8:4f:8b:94:4f:7e:
c9:a6:48:66:21:82:57:92:6a:e9:ff:40:7b:5d:8e:
7d:0f:98:ec:28:bf:69:1e:57:c5:55:01:c8:08:6b:
77:ac:a4:68:b9:57:ab:72:61:f4:b1:29:ac:79:78:
06:40:6b:2a:6a:96:7b:dd:85:08:b1:f4:9f:4c:23:
c0:44:79:27:63:c7:1b:3b:bb:b2:e1:2d:d5:b0:6a:
d3:12:ce:66:11:3e:f6:62:9d:47:3f:c3:0a:79:47:
5a:aa:32:79:82:de:f2:45:6d:10:85:78:d1:cc:11:
85:53:0f:fb:a3:c8:98:c2:f6:0e:41:a9:f4:30:80:
30:ee:b9:c6:70:90:b8:d1:63:80:e2:3b:81:93:5c:
8f:9c:01:2d:5d:3c:d1:89:90:1e:99:4a:f1:d0:5f:
50:db:37:00:c2:e3:93:5d:ee:2c:82:2e:0c:99:62:
8f:55:0b:68:fa:98:ab:c3:b8:e2:8c:82:8c:e8:4d:
10:5b:3a:fa:a9:56:fa:55:dd:17:eb:3a:be:d6:8b:
31:d8:9c:83:60:f4:69:06:fc:55:11:4b:77:b5:51:
5b:f2:a2:a5:f1:4a:0c:c9:03:30:5b:4d:92:76:5c:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:EF:46:A2:8A:67:D9:2B:D4:33:3D:FF:1F:D8:7F:D8:66:F4:07
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fb:20:81:a4:2b:44:3e:f1:55:bb:ba:a8:4e:94:33:7b:d7:
1c:f7:ee:0d:19:89:f2:9d:0d:f2:75:45:b9:41:4b:bb:b3:a8:
80:e7:72:4b:52:c3:5a:b1:dc:48:46:7e:f8:63:8a:b3:27:e1:
f7:2c:a7:d0:bf:85:59:90:6b:96:f7:62:60:b3:81:12:8a:cf:
8a:dd:62:70:16:0a:78:96:e1:9d:52:c9:ce:b3:23:66:d9:2a:
e5:0c:f8:f7:51:0e:7c:41:f8:ea:6c:5b:5b:a5:07:49:a0:ed:
73:d2:c5:55:2b:d2:b3:a3:3b:89:07:78:0d:a3:6c:e0:19:8e:
2c:49:77:8f:3b:d8:0d:04:68:98:14:2b:84:4e:ff:bb:d6:6f:
17:08:28:22:bf:91:7b:f0:1a:b8:2c:62:6a:eb:fb:f7:f3:14:
a2:47:26:ef:88:fd:4b:8c:dc:21:66:19:88:2b:6b:91:a0:1a:
8a:83:e5:a8:3f:9d:4e:47:cf:15:22:e0:96:b5:e0:3b:88:27:
9f:35:0b:50:c1:26:30:14:6c:b1:4f:bd:16:14:6c:fc:1f:20:
df:82:5d:a0:16:99:63:7e:72:ae:33:19:8e:80:10:a9:d0:40:
de:68:73:10:92:cb:9a:28:6f:b8:e8:b3:1d:ed:7b:1c:6f:ac:
45:7e:5b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:53:20 2026 by rpki-client