
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
File: S5IeM_-6Ocahgd1C7jwK-gwiINA.mft (raw, json)
Hash identifier: u/Jgjj8jCnonWCz4NssqDTGK+n0XUcCbOaDWgKfyWOc=
Subject key identifier: 42:89:D9:3C:0E:ED:C0:3B:A8:62:79:0A:26:5A:7E:80:B8:6A:3F:51
Authority key identifier: 4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
Certificate issuer: /CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Certificate serial: 01A0DB7263F5BF1987C38021D01680BA72BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
Manifest number: 015B
Signing time: Sat 26 Sep 2026 02:01:41 +0000
Manifest this update: Sat 26 Sep 2026 02:01:41 +0000
Manifest next update: Sun 27 Sep 2026 02:01:41 +0000
Files and hashes: 1: S5IeM_-6Ocahgd1C7jwK-gwiINA.crl (hash: eNz+iA1YGeMbio+AE9ZQbqpDoXEMS1bLQrgj626ug8s=)
2: zf1amWZL0cYfq5OOLtTUd15GvWM.roa (hash: 7dLn8t0rA8E+ONSoVaPUp6Xkm/L/m2vJVtWRafaGu5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:63:f5:bf:19:87:c3:80:21:d0:16:80:ba:72:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Validity
Not Before: Sep 26 02:01:41 2026 GMT
Not After : Sep 27 02:01:41 2026 GMT
Subject: CN=4289d93c0eedc03ba862790a265a7e80b86a3f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:2e:d5:7a:43:1a:74:fc:66:1d:b9:71:ba:
60:38:4b:d6:f7:9f:d3:d1:db:2e:fc:b6:e0:8a:5c:
1f:5f:30:62:45:ac:2c:d7:9d:ec:ff:2e:a3:2c:60:
ce:aa:e5:e1:fd:b5:f9:00:55:70:6b:74:1f:95:4c:
2e:d6:1e:e5:cd:cf:4b:49:57:48:cf:e3:54:5d:6d:
e0:b2:61:74:a8:df:ad:52:9b:ef:63:d4:21:77:f1:
fb:cd:00:43:e0:33:03:0c:ae:b3:a9:91:e2:96:80:
7e:21:a3:3f:75:01:3d:8f:23:db:cb:2a:9d:47:b0:
d9:d5:09:74:ac:94:44:60:3e:16:c4:4a:06:81:9f:
cc:35:fd:69:a3:18:d0:16:42:f7:7d:21:00:56:6e:
d7:7d:21:b4:1c:a7:db:a3:f8:5a:1e:98:8b:51:05:
f0:34:1e:d8:3c:21:57:f4:39:1b:ba:cb:0a:c3:16:
f3:4e:0d:15:3c:d3:6b:a8:12:b5:16:16:06:11:9a:
09:89:53:9d:4d:90:be:5d:84:ee:d8:a1:4e:6f:49:
c3:c1:da:ad:4d:19:37:26:31:4c:78:9f:f5:60:70:
15:ad:72:51:aa:58:a0:f8:d3:35:5b:b2:63:5f:af:
1c:32:10:28:f2:5f:0e:92:0a:e6:2a:36:04:d5:91:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:89:D9:3C:0E:ED:C0:3B:A8:62:79:0A:26:5A:7E:80:B8:6A:3F:51
X509v3 Authority Key Identifier:
keyid:4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:94:3d:1f:38:1c:27:89:a2:b5:57:3d:6b:54:d3:bb:79:9b:
1b:c8:a1:ac:3e:34:1d:bf:12:b8:69:6f:b3:a9:45:f7:de:cf:
f4:58:4c:0a:3b:09:84:7b:c0:a7:d5:f2:53:1f:da:9d:5a:64:
b8:d9:dd:74:c2:97:d1:64:76:dc:b2:4d:fd:7f:ba:81:c3:0d:
66:af:f2:93:5c:be:eb:52:c6:66:f6:a8:e6:02:d7:46:d5:26:
e4:f2:ba:f0:00:f9:39:69:b5:f5:c8:13:e4:40:1e:83:42:df:
27:d0:3b:49:87:f8:34:04:d8:96:98:74:2d:12:3f:76:77:75:
ae:a9:a0:d4:40:28:c3:d8:53:b2:38:ae:26:6f:4f:14:01:1a:
90:49:5a:5d:9c:77:b9:2c:d0:62:c4:51:59:46:51:f3:07:81:
a1:93:96:15:bd:b7:4e:f4:ad:5e:62:44:37:e2:7d:90:e8:4a:
e2:b2:93:29:79:99:ea:d7:6a:b7:ab:ae:ca:c9:5c:c5:fd:a7:
08:6f:01:8e:7a:10:ca:26:86:4a:2a:6a:75:ac:85:6b:74:ba:
15:a8:56:68:91:01:ca:98:06:94:a9:c3:da:77:87:94:b3:fd:
08:72:a0:c4:d0:64:16:28:56:a1:c4:01:d1:83:97:8d:b7:ef:
dd:3b:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:18:07 2026 by rpki-client