Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: McGG23YQTchVp2CRYYestLnPtE24/NPJ4LEitSq7r90=
Subject key identifier: F2:DC:4F:4A:F4:5A:22:A7:FB:8D:58:7B:7A:98:1C:67:39:3F:8B:28
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019F932426D6F70FE0C5F3DCD907C46E2800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0DAB
Signing time: Fri 24 Jul 2026 08:00:47 +0000
Manifest this update: Fri 24 Jul 2026 08:00:47 +0000
Manifest next update: Sat 25 Jul 2026 08:00:47 +0000
Files and hashes: 1: 5DtKerOBtfpfYOLEXubpG6W_SrU.roa (hash: qu9ii9KnB0QsSr1IjTrdruO6S3eEOG6tH8HaN9Q7Pi0=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: yahzAxGolwQkPpWf7jqtJtyJmeyC3R8vSDCnXfUu3ro=)
3: g94vFJQj_wihdo8vb0U6HQIQH3Q.roa (hash: wAHSfEQtSL/APgTEQcPsEziCXOyez3WGITB1UxS9X+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:26:d6:f7:0f:e0:c5:f3:dc:d9:07:c4:6e:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Jul 24 08:00:47 2026 GMT
Not After : Jul 25 08:00:47 2026 GMT
Subject: CN=f2dc4f4af45a22a7fb8d587b7a981c67393f8b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:1c:44:45:6c:72:a4:69:08:24:60:6c:4d:
16:4d:16:e8:7e:a6:06:fd:b5:14:1a:c4:3c:6f:84:
a0:0a:a8:7c:29:f9:bb:87:e0:68:14:c8:27:69:7e:
7e:6a:69:90:c0:23:0f:e0:8a:e9:f1:26:ef:dd:ef:
44:48:23:0f:6e:d6:eb:5b:0e:da:32:57:c7:46:49:
28:c4:b6:91:5f:da:17:d7:d7:6e:66:69:10:c7:56:
5e:c4:b7:0f:a2:b5:51:ca:ab:a2:a6:36:65:8b:fe:
00:4c:d6:22:d5:fa:91:3b:20:f6:9a:06:0f:c2:82:
7b:b9:a3:89:04:e3:40:fd:a9:b8:94:81:e4:a6:28:
6f:f1:39:1b:49:b1:eb:5a:62:89:ec:ef:1b:94:28:
94:5a:9f:f9:3e:31:65:73:a9:e3:67:1d:6b:c6:b4:
35:3e:a0:52:bd:e9:7e:7d:44:e2:2c:d7:88:f1:94:
16:25:32:3a:1f:bb:2b:af:15:0b:c4:e7:46:c5:81:
cb:b9:14:5a:eb:af:8f:94:e9:e3:2d:98:67:ce:be:
2c:5c:17:72:f8:33:f3:d0:27:f6:1d:84:52:15:c4:
96:12:ec:7a:28:99:15:9c:09:99:97:01:2b:a8:05:
ad:dd:37:26:bd:9b:d9:ab:e1:74:f7:db:78:45:e3:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DC:4F:4A:F4:5A:22:A7:FB:8D:58:7B:7A:98:1C:67:39:3F:8B:28
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:45:2a:62:f8:30:68:e2:25:44:e0:1e:b2:c8:d2:6a:2b:fb:
fc:56:ab:c4:69:ac:89:63:1c:75:6e:2b:0f:d1:b0:18:8b:7d:
a3:98:1c:4d:1a:e9:95:a2:56:80:c8:9d:0e:24:0a:3d:f3:df:
0d:8b:ed:05:92:54:e1:ad:52:9f:51:72:31:fb:a4:26:e4:b7:
e6:f1:fb:54:7f:c1:98:e2:3a:cf:ea:60:37:bf:a5:f1:42:f2:
b0:2c:01:0d:32:45:26:7e:e7:14:74:7f:b6:e2:be:2a:83:81:
d7:03:7a:92:6a:1d:4b:b7:58:03:6c:df:83:eb:41:c4:15:4e:
c6:41:d3:6a:c8:87:81:58:11:12:09:c8:11:da:be:72:8d:94:
d9:f7:d5:23:4a:50:16:85:15:ff:7e:f0:c0:65:36:06:57:96:
2b:60:76:6b:5e:32:ce:de:27:27:cf:2e:c5:2f:c5:32:64:2e:
61:22:b1:d0:97:de:3d:c9:da:58:30:f4:25:f4:4b:78:2b:7d:
1e:50:c4:cd:e7:74:91:4c:77:29:87:fa:8f:64:28:89:d5:f6:
cc:52:1d:8e:50:a8:85:fe:f1:9b:11:13:0d:67:2a:b6:ff:6d:
a1:69:58:0f:11:70:c7:aa:c4:ad:09:6f:76:40:52:a2:14:a6:
e5:5f:36:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJCbW9w/gxfPc2QfEbigAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTlhZmQyMWNiOGZiZTZiODUwODAwY2Q0YjQ5ZjI1NjJj
OTJiYTAwHhcNMjYwNzI0MDgwMDQ3WhcNMjYwNzI1MDgwMDQ3WjAzMTEwLwYDVQQD
EyhmMmRjNGY0YWY0NWEyMmE3ZmI4ZDU4N2I3YTk4MWM2NzM5M2Y4YjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZMcREVscqRpCCRgbE0WTRbofqYG
/bUUGsQ8b4SgCqh8Kfm7h+BoFMgnaX5+ammQwCMP4Irp8Sbv3e9ESCMPbtbrWw7a
MlfHRkkoxLaRX9oX19duZmkQx1ZexLcPorVRyquipjZli/4ATNYi1fqROyD2mgYP
woJ7uaOJBONA/am4lIHkpihv8TkbSbHrWmKJ7O8blCiUWp/5PjFlc6njZx1rxrQ1
PqBSvel+fUTiLNeI8ZQWJTI6H7srrxULxOdGxYHLuRRa66+PlOnjLZhnzr4sXBdy
+DPz0Cf2HYRSFcSWEux6KJkVnAmZlwErqAWt3TcmvZvZq+F099t4RePEcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLcT0r0WiKn+41Ye3qYHGc5P4soMB8GA1UdIwQY
MBaAFEupr9IcuPvmuFCADNS0nyViySugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmIt
ZjY5NjIyNDI1NjUxLzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmItZjY5NjIyNDI1NjUx
LzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEUqYvgw
aOIlROAessjSaiv7/FarxGmsiWMcdW4rD9GwGIt9o5gcTRrplaJWgMidDiQKPfPf
DYvtBZJU4a1Sn1FyMfukJuS35vH7VH/BmOI6z+pgN7+l8ULysCwBDTJFJn7nFHR/
tuK+KoOB1wN6kmodS7dYA2zfg+tBxBVOxkHTasiHgVgREgnIEdq+co2U2ffVI0pQ
FoUV/37wwGU2BleWK2B2a14yzt4nJ88uxS/FMmQuYSKx0JfePcnaWDD0JfRLeCt9
HlDEzed0kUx3KYf6j2QoidX2zFIdjlCohf7xmxETDWcqtv9toWlYDxFwx6rErQlv
dkBSohSm5V821A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:17 2026 by rpki-client