Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: aPJfYU61qfAGuEEDF9s6ERnOyPhNm1OhWbW93TEsZnQ=
Subject key identifier: 59:3A:89:3A:5A:A2:BD:A3:C5:3F:F3:4C:F4:9C:DD:3D:BD:34:AD:79
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 01A17D7358B28B19D71A3A0100BDFF9AF1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 10CF
Signing time: Tue 27 Oct 2026 13:01:13 +0000
Manifest this update: Tue 27 Oct 2026 13:01:13 +0000
Manifest next update: Wed 28 Oct 2026 13:01:13 +0000
Files and hashes: 1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: QKWyJkOs9md2CQ1ZVIdLTtLgPuh5zoD7Lzj1mKIyH3k=)
4: c2NaEAlgVUYgoY72a0dwilashus.roa (hash: fAkWFixs8K72eGX6Cl0h1wXhSk4FbU9HoS7xaKjx650=)
5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:58:b2:8b:19:d7:1a:3a:01:00:bd:ff:9a:f1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Oct 27 13:01:13 2026 GMT
Not After : Oct 28 13:01:13 2026 GMT
Subject: CN=593a893a5aa2bda3c53ff34cf49cdd3dbd34ad79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:80:e8:ce:35:f5:6e:73:66:8d:14:96:8b:
95:f7:01:ed:35:68:95:a1:1f:90:1f:ea:a6:aa:d7:
fe:e3:a9:07:e7:da:dd:60:6b:a7:fe:7f:53:62:67:
6c:c6:74:93:f3:5c:54:38:84:a4:f1:d2:b7:42:a8:
22:05:36:7b:44:9d:4d:c0:69:07:b5:e2:ae:91:06:
9d:5f:e1:78:d0:8f:ab:c7:e5:29:e8:98:d9:a9:e3:
a2:b5:bd:01:51:e7:b2:5f:f5:0d:b8:de:70:c4:5c:
04:51:84:bc:19:6b:6a:83:f7:f1:9a:a7:ac:33:82:
57:36:63:b4:65:5d:58:07:fc:63:d2:af:18:6d:50:
1c:ae:b7:a8:e6:57:50:c3:eb:73:52:63:65:e2:44:
6e:37:49:5c:52:69:ed:30:66:e3:e0:36:13:ed:8d:
fd:72:38:1e:83:7a:fe:13:3c:8d:35:11:c1:cc:0e:
99:c7:ce:a9:60:b8:ff:11:7e:73:1f:3f:2b:db:0d:
9b:38:a3:19:00:bb:45:39:dd:e9:29:64:da:29:df:
0b:91:0a:3a:e9:78:fc:5b:2c:99:02:40:62:36:80:
7c:a6:6e:1b:df:a1:23:d2:7d:a7:38:e1:44:cf:cc:
fa:bc:27:b8:74:51:eb:3c:c6:91:83:a7:64:9c:22:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:89:3A:5A:A2:BD:A3:C5:3F:F3:4C:F4:9C:DD:3D:BD:34:AD:79
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7f:23:f5:93:67:41:e3:36:12:36:39:75:3c:21:28:1d:38:
29:77:cc:48:5e:f2:41:ff:d4:b2:02:73:6f:9c:71:ed:de:63:
83:31:1b:13:72:47:08:f7:20:70:91:96:4d:10:63:48:e6:83:
8d:9d:3f:d4:51:50:b3:1a:c5:9f:a8:a6:ae:49:ba:b3:56:20:
03:96:64:c2:b8:dd:c1:de:1e:f9:37:63:10:54:2c:fc:05:75:
56:de:b5:ef:25:40:e9:16:cf:d1:49:19:47:e0:7f:75:69:5e:
79:c3:09:3d:da:9c:39:77:97:7c:5c:ff:a8:47:3c:f4:c9:ad:
c6:e5:5d:de:0a:0b:b2:8b:b3:41:aa:81:a6:18:85:fc:64:36:
1f:c4:03:af:25:d3:f8:82:fb:7e:77:eb:3b:e9:69:dd:4f:cd:
c2:9f:68:cc:67:1c:45:13:fb:49:95:4c:09:3f:e5:1f:c6:32:
12:90:88:d0:51:f0:3a:64:63:6d:64:fa:e2:b4:d2:60:8d:07:
f2:90:77:67:63:67:64:3b:9c:63:b4:24:ad:94:2f:0a:55:91:
2d:79:68:9b:bd:34:22:0d:58:e2:45:7c:53:99:ce:24:e1:25:
cd:66:da:66:74:60:f7:2f:2f:43:88:f2:0a:26:6c:d2:4a:dc:
6a:06:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:15:55 2026 by rpki-client