Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft
File: S6fJoMZPbB33LdgBBdDmNvPDoC0.mft (raw, json)
Hash identifier: WKFrlupuDvef9KkjO23Zmc+ZBXDtEw2+FB1TWRCfGAc=
Subject key identifier: 7F:F6:6E:AE:11:50:D7:4F:D5:4C:49:56:33:9C:34:DE:9C:B4:58:90
Authority key identifier: 4B:A7:C9:A0:C6:4F:6C:1D:F7:2D:D8:01:05:D0:E6:36:F3:C3:A0:2D
Certificate issuer: /CN=4ba7c9a0c64f6c1df72dd80105d0e636f3c3a02d
Certificate serial: 01A0E92E25BC6490721548BC31C6639FC283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6fJoMZPbB33LdgBBdDmNvPDoC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft
Manifest number: 45
Signing time: Mon 28 Sep 2026 18:01:50 +0000
Manifest this update: Mon 28 Sep 2026 18:01:50 +0000
Manifest next update: Tue 29 Sep 2026 18:01:50 +0000
Files and hashes: 1: 2ocJnrKYRe3zKZci6rQMXjSGrqI.roa (hash: 9Ph1zNpQRXznlTIJmQawq72adyHVEEo9MJswFzGJ9NM=)
2: S6fJoMZPbB33LdgBBdDmNvPDoC0.crl (hash: v4pjlu57+sS2xiL2nISsOIr5HMFgB0U1aGDSkq5LreM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6fJoMZPbB33LdgBBdDmNvPDoC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:25:bc:64:90:72:15:48:bc:31:c6:63:9f:c2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba7c9a0c64f6c1df72dd80105d0e636f3c3a02d
Validity
Not Before: Sep 28 18:01:50 2026 GMT
Not After : Sep 29 18:01:50 2026 GMT
Subject: CN=7ff66eae1150d74fd54c4956339c34de9cb45890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:2a:5c:1a:d6:3c:0b:80:fb:8e:af:af:ff:
2c:32:e1:13:b7:60:9f:54:96:38:9b:f3:c2:a6:23:
33:38:8b:0f:5f:4d:d8:ba:18:09:6b:c1:70:6b:17:
2d:49:ef:e5:97:49:62:ba:ad:80:89:7b:3f:02:4d:
a8:0c:93:02:1f:1c:9e:db:1a:ff:ad:7a:ec:68:ca:
41:a9:55:75:07:8b:65:3a:65:a7:84:10:07:e6:5b:
26:40:76:78:0a:df:24:43:06:f9:3c:1a:83:c1:64:
30:1c:a0:72:ac:a8:bf:7f:92:f9:58:a2:32:18:11:
59:f7:d2:6c:e5:0e:62:5a:43:79:83:57:8b:b3:24:
25:b2:10:95:f6:d8:93:21:f4:5b:77:a4:ae:d2:b4:
be:5f:64:31:19:67:0a:df:97:8c:5f:98:aa:a8:da:
33:d2:1b:ed:0b:fc:91:70:9e:6e:3a:02:79:e9:fa:
e6:d2:9a:2b:8d:9d:5f:96:77:38:ae:6d:f1:d4:55:
d3:16:a3:dc:22:28:67:94:d5:46:8e:99:2d:e8:2f:
78:ed:1d:03:b3:c1:64:70:cd:27:12:6c:ed:bd:70:
98:38:d2:53:ae:4e:c7:f8:49:7e:32:c4:fb:e8:8f:
00:ff:ad:7a:90:c5:e2:08:9e:e7:18:52:77:a4:d1:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F6:6E:AE:11:50:D7:4F:D5:4C:49:56:33:9C:34:DE:9C:B4:58:90
X509v3 Authority Key Identifier:
keyid:4B:A7:C9:A0:C6:4F:6C:1D:F7:2D:D8:01:05:D0:E6:36:F3:C3:A0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6fJoMZPbB33LdgBBdDmNvPDoC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/374f78-8a0c-46d7-ac30-3904be6cb575/1/S6fJoMZPbB33LdgBBdDmNvPDoC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:32:89:1e:89:83:40:ad:e1:ee:de:c5:74:1c:20:bf:1c:46:
c0:1d:86:f2:11:67:3c:1b:d3:fa:a2:21:f6:c9:20:d1:37:31:
e6:47:78:26:fd:ac:4f:fe:4f:5f:ec:86:bc:a2:8e:91:25:36:
37:8c:57:6d:d5:2c:b0:14:f0:2d:f4:0b:60:45:08:c2:50:4d:
a7:7d:be:bd:09:62:a3:51:44:33:95:cf:54:54:73:a0:1b:21:
82:97:04:ee:81:62:a2:bb:f6:85:e9:3a:0c:1e:8c:1d:1e:5c:
e0:b3:fa:4e:d9:26:40:f9:a6:df:87:98:66:e0:6b:42:66:1b:
28:58:8d:c2:39:dc:11:08:a7:69:dc:d3:2a:72:64:3c:ca:db:
c6:2f:1e:55:57:a8:65:08:73:05:e3:04:53:69:83:df:e6:05:
b2:ef:60:e6:93:e4:97:2a:c4:b2:07:2e:e5:b4:c0:4f:77:78:
d3:25:b5:8e:fa:42:42:32:7c:b8:16:52:32:7a:9e:8a:b2:24:
d5:6e:aa:69:b8:f9:74:98:08:97:5b:7a:f6:09:f0:f8:6d:57:
d3:76:84:ed:4b:39:fb:22:af:18:3a:a3:56:26:50:5b:53:d4:
22:8a:5a:87:79:b1:c9:46:08:17:bd:98:78:96:15:c8:8d:35:
88:40:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:41:23 2026 by rpki-client