Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File: S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier: WSRW0OSrq/NFmOF2R6J5vjubnvyIk9uabjiQmtXiSeU=
Subject key identifier: E9:BF:BC:DE:58:7F:96:65:EB:9C:C8:A4:27:E1:01:97:42:EB:57:A2
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial: 01A17C60B25C3D68AA767500B31DE2E799FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number: 1159
Signing time: Tue 27 Oct 2026 08:01:14 +0000
Manifest this update: Tue 27 Oct 2026 08:01:14 +0000
Manifest next update: Wed 28 Oct 2026 08:01:14 +0000
Files and hashes: 1: FSFyylYZoJ__LJ0VFZP-2aItmuE.roa (hash: 4TUbcjRKjpEozpWO2rDakc6T9yJDVcy+nvZz/pOEz9A=)
2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: ErmU1lNned54GLEkGPissosLQmhNwM88Y7W4LYjlQLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:b2:5c:3d:68:aa:76:75:00:b3:1d:e2:e7:99:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Validity
Not Before: Oct 27 08:01:14 2026 GMT
Not After : Oct 28 08:01:14 2026 GMT
Subject: CN=e9bfbcde587f9665eb9cc8a427e1019742eb57a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:4a:ae:f9:09:d2:65:45:44:a1:cc:f2:3f:
9f:de:5f:74:e4:ab:e6:e1:0c:1a:02:3b:67:87:36:
36:db:a5:71:3b:ab:d4:b1:e4:85:c2:a3:c9:90:73:
8f:92:6a:9f:94:00:b6:0f:23:2e:b8:8d:18:cb:53:
40:44:b5:3c:7c:80:2a:0a:8f:c6:e5:a8:72:e5:5c:
63:13:61:1f:d4:23:4a:52:78:45:76:64:20:e0:45:
62:87:60:a4:9a:e0:d5:61:71:a1:c4:e3:14:a1:e0:
8c:7f:70:2b:bb:ae:ce:2a:ed:c3:1d:54:1e:9b:10:
d4:47:1c:3b:e4:5d:fe:d9:74:3b:ef:e8:ac:fd:02:
60:f2:69:87:f0:5b:e4:77:db:1f:4d:75:27:fe:d7:
42:35:e2:0f:52:53:be:5c:f4:f9:c8:91:a6:ac:0a:
bb:34:a0:5a:a3:d3:bd:d6:3e:58:78:d5:5e:64:ff:
b3:d2:b0:8f:5b:ad:f1:e0:c4:7d:f7:66:0e:c2:7c:
a4:51:09:a0:eb:f8:e2:de:b4:27:62:4c:66:24:98:
a6:83:6b:29:7e:28:72:bf:ba:bf:d4:77:2d:58:ee:
9b:aa:c2:0b:f4:43:ff:9b:67:ec:08:54:72:0c:be:
a9:f3:58:f9:fa:6a:8d:4c:18:dc:d7:2d:7e:44:61:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BF:BC:DE:58:7F:96:65:EB:9C:C8:A4:27:E1:01:97:42:EB:57:A2
X509v3 Authority Key Identifier:
keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:07:11:46:3b:2c:56:8c:a0:5f:35:aa:aa:ff:33:43:38:86:
97:a3:13:ce:6a:10:15:d9:12:da:6b:07:1d:81:72:9f:83:ac:
6a:32:37:19:dc:98:1d:ef:1b:83:90:0c:66:3d:05:a7:43:15:
7a:1d:5d:c6:1f:8e:1f:e0:ac:57:60:4a:ea:e9:f0:7c:7f:70:
63:ed:06:83:2e:62:11:ae:8e:ee:5c:81:4b:ff:f0:cc:ee:e4:
92:70:71:47:94:e6:35:55:47:19:f8:d8:2c:b0:46:b4:26:c1:
b8:d0:48:e8:0d:a3:96:38:51:60:1e:8a:6f:e7:23:a4:5c:06:
b1:2e:32:54:ac:eb:3d:ed:c4:15:65:44:82:1c:ca:86:4b:50:
10:32:3c:91:a6:11:df:3f:73:fd:25:31:c0:83:3c:4e:96:40:
e7:88:eb:41:4d:07:9b:fb:24:c1:e9:d2:a6:13:de:dc:db:42:
6b:cf:3b:71:bf:11:13:d7:0d:6d:4b:49:1c:64:a6:bc:11:9b:
0d:21:46:6f:5f:18:d0:f7:d1:eb:82:70:14:10:78:94:0b:46:
14:27:aa:95:64:a6:4d:2a:84:88:90:86:07:b4:57:7a:59:d2:
6d:30:10:47:fb:73:fa:5c:96:fa:cc:50:fe:c8:e6:89:d6:bb:
cb:3f:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:46:05 2026 by rpki-client