Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: nAAuHjymuDKcbMkP6e9xJ6y2Ctz+U4bKRC92HunPZkw=
Subject key identifier: DC:5D:B6:65:2A:00:8F:6C:D5:54:5D:2B:EE:0A:32:0B:F9:37:D5:39
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019FA260659E69E10CE420858785FFEE13DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0FD9
Signing time: Mon 27 Jul 2026 07:00:53 +0000
Manifest this update: Mon 27 Jul 2026 07:00:53 +0000
Manifest next update: Tue 28 Jul 2026 07:00:53 +0000
Files and hashes: 1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: BZqmq10eSWVReEZ4+4SkQ7/qq3mHKihrwPFxphf69iU=)
4: c2NaEAlgVUYgoY72a0dwilashus.roa (hash: fAkWFixs8K72eGX6Cl0h1wXhSk4FbU9HoS7xaKjx650=)
5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:65:9e:69:e1:0c:e4:20:85:87:85:ff:ee:13:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jul 27 07:00:53 2026 GMT
Not After : Jul 28 07:00:53 2026 GMT
Subject: CN=dc5db6652a008f6cd5545d2bee0a320bf937d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:2e:04:e0:f8:0d:67:23:40:fc:47:23:5d:
50:21:7b:72:24:ba:22:a1:b2:ce:88:cc:d2:c9:05:
24:37:aa:87:69:c4:f0:53:90:d1:25:69:1c:5d:31:
cd:7e:e0:9f:d1:66:3f:25:6b:c2:a1:a7:be:53:23:
28:29:dc:dd:34:6c:4d:88:c7:83:14:04:a5:0c:ef:
29:ce:03:67:bf:ce:88:76:db:f9:3b:79:8c:53:35:
d6:ef:12:47:d8:bb:00:46:ac:88:64:eb:c6:f8:a2:
39:e4:f0:36:64:d3:b3:0d:6c:38:0c:49:19:78:a3:
f7:5a:f4:0a:36:b5:98:f9:1b:f7:e3:07:aa:d1:f7:
c7:b5:07:d0:a9:13:e7:95:0c:4e:07:cd:54:6e:8c:
e9:1e:ee:4e:08:93:70:ca:62:e7:81:1d:f5:8c:56:
8a:7b:dc:be:e6:4f:0f:1a:00:12:6e:2d:b6:22:84:
4a:c6:f5:5c:d8:83:f1:f2:ab:76:d6:77:f0:9f:46:
cb:d0:ca:54:f8:ec:52:ff:6a:f0:f1:b7:5d:e3:40:
1c:bc:14:d6:aa:3a:75:bd:1c:5d:9e:1d:e5:ad:76:
6f:c3:dd:38:76:16:ad:9e:4d:6d:d8:90:ff:cd:4e:
ee:24:5c:bc:3c:cc:91:81:27:e3:f7:54:90:91:1a:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:B6:65:2A:00:8F:6C:D5:54:5D:2B:EE:0A:32:0B:F9:37:D5:39
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ee:ee:90:97:5b:c2:f5:25:ed:68:eb:51:49:7d:a0:63:68:
6c:b5:c2:f2:3f:57:6d:19:80:32:e0:44:ee:e3:35:41:64:b7:
e3:29:10:a5:cf:05:f2:a8:3b:89:e4:b6:b9:70:ba:a5:b4:74:
b2:0d:99:80:8b:c7:0e:e0:9b:9a:65:7b:9b:91:ff:07:aa:e6:
ac:e9:87:ee:57:3a:6f:7e:f9:5d:3d:9b:12:e1:9b:ef:8f:15:
54:74:8e:46:b7:1c:cb:d8:2b:51:9b:08:fe:9b:00:58:13:66:
13:67:f5:de:bb:b7:7e:81:41:77:ca:f2:3c:46:33:87:25:19:
02:c5:f8:3a:18:4e:30:39:34:e5:2b:c4:de:81:77:fd:b8:6f:
0a:9d:26:a6:c5:4a:22:3f:ec:d9:fa:b8:a2:e5:38:b4:41:d3:
b3:af:f0:76:0d:84:a6:7f:d8:b2:3c:8d:a3:ba:20:3d:d2:60:
64:f9:23:a6:9a:01:f6:1f:be:e2:1e:e1:f7:21:ac:84:b1:d4:
6c:39:be:59:5b:75:16:25:10:bf:98:66:cb:fa:9f:63:3b:34:
67:c5:d4:00:b3:69:bf:63:5a:8e:a7:0c:0f:59:56:f3:d0:69:
6d:22:79:fd:1e:6b:9f:d5:1b:21:11:08:d3:58:95:71:6b:48:
f8:8b:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:22:33 2026 by rpki-client