Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File: SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier: YOpEvZuCyRLVoNP5VEstz1APgfrOHds4r+WNsO09x/Q=
Subject key identifier: BD:C1:4E:A4:C8:CD:B5:E6:E5:48:E4:A0:E7:33:C1:6D:EA:65:59:A0
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial: 01A0F231164C38C7F2D07C620BE97F68BE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 12:01:38 +0000
Manifest this update: Wed 30 Sep 2026 12:01:38 +0000
Manifest next update: Thu 01 Oct 2026 12:01:38 +0000
Files and hashes: 1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: U8vB4Z84B3DVAYgdSzQk7/2+ckr6umPTLvWBPB9uzzk=)
2: W4KHw-He6kWePo83bS5E3YXxts0.roa (hash: HnOkT9H7Ca2rZOkZ/pXWIqV8bBgY7J8LEGyl2k3M+hY=)
3: _a5oTu8gmKTkulokRAA15ZrEXNM.roa (hash: m1okP9QJB17W56hE2P8J+CdYw56KQB54uec3dsvEZRc=)
4: xZnQUNKtjz0xBu4GBzb-zu_Y-aY.roa (hash: +vp8PoavLw4YQsjZPIBnjlGldFa1m0sRHbYb6KV//EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:31:16:4c:38:c7:f2:d0:7c:62:0b:e9:7f:68:be:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Validity
Not Before: Sep 30 12:01:38 2026 GMT
Not After : Oct 1 12:01:38 2026 GMT
Subject: CN=bdc14ea4c8cdb5e6e548e4a0e733c16dea6559a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:25:bb:aa:c2:25:3a:6f:77:ca:c8:14:e2:
fd:3c:b5:73:f8:e3:cb:36:9d:10:f7:99:53:94:a2:
1d:c5:41:d1:69:b5:1b:80:d8:52:91:e1:e2:60:67:
92:ef:42:c8:fc:10:12:72:60:f6:16:65:70:78:e9:
24:b8:89:42:4a:7c:08:5f:da:84:9e:f6:e7:47:5b:
21:79:05:16:b5:2b:e9:f8:f5:0e:bb:a8:ca:28:23:
f1:f0:3b:82:07:63:d8:07:4c:65:cd:b7:5e:ca:9d:
5b:fd:47:1a:e6:f5:3a:3f:81:2d:96:a7:92:b1:b9:
e6:10:d8:a2:23:df:05:a9:46:9b:94:67:1d:b3:3c:
aa:ec:e6:13:05:4a:74:9f:ff:eb:94:c6:54:53:2f:
08:aa:05:8c:c7:12:d7:85:71:19:55:43:0e:ee:ff:
61:39:06:89:93:06:26:3e:a5:07:d3:39:ac:89:80:
ea:5b:7b:b7:ff:c2:a8:b9:2c:12:c7:06:00:6e:da:
b7:32:39:cb:7e:59:90:be:13:ec:76:58:66:50:a1:
7e:2a:96:21:e6:9b:2d:c0:8c:e2:bf:9e:ba:6a:9b:
23:73:4d:f2:8f:14:65:2f:98:3d:1c:29:c2:32:21:
17:6b:2d:bb:05:8e:ad:46:67:f5:1d:52:c5:2e:46:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:4E:A4:C8:CD:B5:E6:E5:48:E4:A0:E7:33:C1:6D:EA:65:59:A0
X509v3 Authority Key Identifier:
keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:01:ea:13:ec:a9:ba:e3:95:f6:4c:a5:0f:eb:44:f6:e0:6e:
9e:06:c3:73:11:24:d9:78:7e:70:b8:dc:b4:99:53:c8:03:87:
44:b9:e3:91:1b:de:d4:12:dc:a6:d2:6c:14:f6:eb:5b:99:1d:
75:c2:93:f2:3a:4e:d8:85:fe:86:c5:3a:15:12:9a:59:96:ca:
93:40:69:22:c8:78:16:dc:5e:af:8b:57:da:2f:ed:29:4e:cf:
03:d6:40:da:22:56:f7:df:23:85:07:fa:9a:7a:f0:2e:0b:f4:
04:61:15:0e:ff:af:5b:1c:2f:f9:72:65:e4:e7:1e:44:8b:86:
f3:73:c1:9e:c5:07:19:44:66:50:57:3f:31:7c:21:a1:8d:ab:
96:7a:f6:3d:c5:9f:16:b5:d1:ac:47:5e:cf:03:49:fd:02:49:
cd:19:28:c6:c5:25:35:21:cf:76:6c:90:f2:b3:09:d5:9b:02:
14:e9:ae:f7:8a:60:6b:1a:a3:8b:a0:72:d5:89:e0:7a:a8:4a:
2c:e0:35:f6:6e:28:91:44:63:0d:9b:38:68:40:f6:3c:e6:89:
0b:26:e7:cd:bc:55:39:d3:2c:64:35:42:ea:d0:99:40:a1:6c:
82:16:e1:55:0c:96:02:30:49:cb:fe:08:2b:90:fd:90:94:d4:
2e:a4:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:09:44 2026 by rpki-client