Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File: S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier: Plw6w+e8NKl+1sMxWqB2F9z1MzAQ0pdoyQ3Y99WRAis=
Subject key identifier: 81:EF:E8:DB:16:FF:7F:4F:B7:F4:05:8E:39:87:B8:47:A7:DC:09:68
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial: 01A08AFAA9C3F340343EE5387BD64E7C0136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number: 10DC
Signing time: Thu 10 Sep 2026 11:01:18 +0000
Manifest this update: Thu 10 Sep 2026 11:01:18 +0000
Manifest next update: Fri 11 Sep 2026 11:01:18 +0000
Files and hashes: 1: FSFyylYZoJ__LJ0VFZP-2aItmuE.roa (hash: 4TUbcjRKjpEozpWO2rDakc6T9yJDVcy+nvZz/pOEz9A=)
2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: x1HZeGzzgTeCR51WynXFHBaKJELeIiiFilc/DFV2Qzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:a9:c3:f3:40:34:3e:e5:38:7b:d6:4e:7c:01:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Validity
Not Before: Sep 10 11:01:18 2026 GMT
Not After : Sep 11 11:01:18 2026 GMT
Subject: CN=81efe8db16ff7f4fb7f4058e3987b847a7dc0968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:91:5a:dc:99:5b:8e:f1:41:76:c3:42:51:
30:ae:f0:76:08:40:b0:b7:50:22:64:34:bd:25:d5:
48:df:6d:08:34:4f:f0:54:b6:7e:b4:95:32:40:65:
cf:55:bf:3f:12:bb:22:e4:d4:3d:a2:b1:36:ae:aa:
8f:34:51:f7:87:8e:cc:99:d9:c3:ca:ac:8f:e1:73:
c9:98:9a:f0:ed:fb:4f:ca:ff:c5:2b:9e:83:fa:98:
0a:b8:68:ca:8c:91:36:6a:ef:c6:62:51:bf:64:43:
50:1b:8e:04:0f:3d:f7:06:64:3c:b2:1e:9e:61:9e:
d8:51:87:dd:25:87:8b:0e:5f:56:11:1d:d7:09:c1:
7f:98:14:40:e9:56:87:4c:35:71:22:70:8f:e2:14:
6e:18:9c:cf:4d:bb:99:f3:33:16:6f:52:f8:e5:77:
eb:f5:fc:bf:88:a3:4b:16:de:30:c6:6a:a3:9d:89:
45:98:9a:15:f2:e9:42:8c:6e:55:a2:59:f3:dc:dd:
66:3e:6b:21:23:a1:aa:b2:d9:65:30:5e:37:65:f2:
c5:3c:ab:5c:c0:38:f5:b9:0c:d1:15:9f:a3:b9:99:
b9:62:79:3b:88:ef:db:3d:e3:e9:8d:34:7f:dd:06:
2a:3c:8b:56:e6:ea:a7:c5:5c:19:82:fb:ba:5b:68:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EF:E8:DB:16:FF:7F:4F:B7:F4:05:8E:39:87:B8:47:A7:DC:09:68
X509v3 Authority Key Identifier:
keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6e:d8:f3:f8:86:e4:ef:82:c4:ef:7a:3d:81:38:a0:af:d2:
38:b6:dd:e2:a3:69:2f:cd:1c:5c:b9:c1:9c:1f:e0:e4:4d:e8:
78:30:4f:24:e8:84:90:77:ee:cf:48:b0:7f:4c:88:bf:03:82:
42:63:48:c8:5f:03:20:38:f9:8a:ed:8b:85:aa:59:a2:db:57:
64:43:c5:06:72:eb:77:b8:f7:4a:49:06:e5:0b:f2:a5:05:38:
f5:77:47:eb:84:46:46:53:1e:54:73:2b:88:89:bc:f0:d7:82:
44:16:9b:04:a3:2a:cf:cd:6b:d3:10:dc:02:e9:61:11:f3:01:
c9:e7:d9:e9:09:8c:c7:a4:fd:c6:25:5e:98:cb:25:3a:a8:63:
d8:ad:be:c8:75:d5:5c:47:7e:a3:70:a1:76:ed:5e:ea:0d:89:
14:a6:95:05:da:03:66:de:ca:c0:3f:02:37:9d:91:e5:3f:00:
16:c0:92:28:a8:bb:47:e7:6f:f3:87:46:bb:8b:ea:7b:7c:71:
70:69:0d:44:28:dd:5a:50:4d:da:29:6a:23:bb:7a:be:2c:52:
84:9d:9f:33:99:f2:65:66:15:7f:ee:8a:95:62:cd:0a:52:8a:
17:93:41:45:10:05:f0:77:06:b5:bc:4c:a6:ad:16:6e:71:11:
d3:0f:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:16 2026 by rpki-client