Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
File: S_5nhudBGv_P9M5otbcGmCrbshY.mft (raw, json)
Hash identifier: p3pxFGU0XjQ3DiR8KcN/pilxIzLJQb6NDbdPfhW/ckY=
Subject key identifier: B7:95:CD:95:67:9A:D5:71:3C:31:19:D3:D9:AB:D3:BE:B4:9A:79:84
Authority key identifier: 4B:FE:67:86:E7:41:1A:FF:CF:F4:CE:68:B5:B7:06:98:2A:DB:B2:16
Certificate issuer: /CN=4bfe6786e7411affcff4ce68b5b706982adbb216
Certificate serial: 01A06EDEBD4ABA7830D47489F83078988486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
Manifest number: D0
Signing time: Sat 05 Sep 2026 00:01:26 +0000
Manifest this update: Sat 05 Sep 2026 00:01:26 +0000
Manifest next update: Sun 06 Sep 2026 00:01:26 +0000
Files and hashes: 1: 172J7Q8mZsr0VC6StV7ph30UAog.roa (hash: JJms2nQRkX9Y3NBzgyt6sK+QPIVuTMzGhhx4yrWYyvo=)
2: S_5nhudBGv_P9M5otbcGmCrbshY.crl (hash: xSIU58gVFSH9Wcy9fZA0OiWzlmNKqcXKhnt8ijCHGN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:bd:4a:ba:78:30:d4:74:89:f8:30:78:98:84:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfe6786e7411affcff4ce68b5b706982adbb216
Validity
Not Before: Sep 5 00:01:26 2026 GMT
Not After : Sep 6 00:01:26 2026 GMT
Subject: CN=b795cd95679ad5713c3119d3d9abd3beb49a7984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:05:8f:9a:d3:6d:45:74:88:4c:a0:5c:ae:
70:d0:33:4e:03:89:13:5b:93:1e:a4:14:d5:ad:52:
85:1d:c1:36:2b:dd:89:21:d7:5e:83:12:7e:21:4e:
77:45:b2:dd:d0:99:aa:a3:68:9f:5b:32:49:0b:e3:
a1:a8:b1:7d:f9:5f:d2:4b:a2:55:0d:3e:c1:86:e7:
de:2c:00:03:54:fc:fa:5f:f2:72:38:f7:68:1c:c9:
b3:43:1f:84:4d:81:26:65:3a:a3:c5:cc:b2:f9:0e:
7a:58:2d:87:c8:d7:db:fc:5b:8a:b1:2a:b5:c6:6a:
6c:f3:8d:2f:77:d3:d3:78:70:0e:03:11:38:ac:3b:
e1:10:17:e4:c2:1e:19:ae:53:b7:d9:04:fe:01:63:
d8:ce:28:25:37:e5:a2:63:fa:9a:a2:46:33:b3:cb:
c0:69:43:76:93:bd:0b:61:b0:d1:a3:68:db:05:b0:
f7:68:8d:d0:e7:a9:01:3f:9a:11:09:5f:ee:7a:be:
23:70:f7:ae:63:90:1f:7a:c5:5b:b5:05:b2:2a:2c:
79:91:36:8a:85:a6:de:c9:a3:52:24:d4:65:08:2f:
99:a2:2e:c5:37:cd:d1:02:ec:a9:72:26:f6:33:dd:
67:f9:b1:96:ac:14:bc:db:2d:a4:15:64:3b:1c:a7:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:CD:95:67:9A:D5:71:3C:31:19:D3:D9:AB:D3:BE:B4:9A:79:84
X509v3 Authority Key Identifier:
keyid:4B:FE:67:86:E7:41:1A:FF:CF:F4:CE:68:B5:B7:06:98:2A:DB:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:aa:b0:55:93:e5:2e:90:ff:d6:6b:e6:a0:eb:1c:c8:9e:9c:
94:cb:70:ea:3d:24:d3:b4:26:c1:3d:70:ce:fb:0d:d4:7d:1c:
11:c3:d8:08:81:e8:5d:6f:5b:6e:30:d0:27:09:7a:7a:9b:1e:
ce:fa:9c:ab:b5:b7:a3:9e:a1:de:52:68:c0:64:8c:8b:6f:35:
cd:8c:fa:e9:25:93:7c:f5:f1:fa:0b:bf:ee:b8:ea:4c:ef:5f:
0b:35:44:eb:b4:10:c7:1c:f6:f2:ca:19:1b:95:74:04:86:35:
ab:1c:53:64:c6:5f:5d:9e:f3:74:48:91:ab:f5:6b:5f:24:3e:
a4:0d:a8:d3:90:71:8e:cb:0b:7d:12:0f:be:74:d3:4a:4e:12:
65:43:c3:58:0f:69:89:92:ef:e8:46:0b:f8:43:51:9b:6a:81:
dd:d5:ab:0a:69:5d:fa:de:5f:81:88:c5:ee:81:a3:7a:c7:58:
cb:53:ce:96:e9:14:8b:24:b5:28:fe:72:b8:68:99:e1:1b:d3:
1a:ca:61:c5:8d:e0:ee:5c:83:c9:ae:9d:2a:ee:84:fd:7a:df:
a4:c0:82:70:11:53:96:44:0c:94:f6:d7:52:36:1a:b7:b8:17:
04:86:ea:95:8e:4a:a1:c7:00:f7:01:5a:2e:f0:03:7c:7d:21:
ce:32:b6:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3r1Kungw1HSJ+DB4mISGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZmU2Nzg2ZTc0MTFhZmZjZmY0Y2U2OGI1YjcwNjk4MmFk
YmIyMTYwHhcNMjYwOTA1MDAwMTI2WhcNMjYwOTA2MDAwMTI2WjAzMTEwLwYDVQQD
EyhiNzk1Y2Q5NTY3OWFkNTcxM2MzMTE5ZDNkOWFiZDNiZWI0OWE3OTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3AFj5rTbUV0iEygXK5w0DNOA4kT
W5MepBTVrVKFHcE2K92JIddegxJ+IU53RbLd0Jmqo2ifWzJJC+OhqLF9+V/SS6JV
DT7BhufeLAADVPz6X/JyOPdoHMmzQx+ETYEmZTqjxcyy+Q56WC2HyNfb/FuKsSq1
xmps840vd9PTeHAOAxE4rDvhEBfkwh4ZrlO32QT+AWPYziglN+WiY/qaokYzs8vA
aUN2k70LYbDRo2jbBbD3aI3Q56kBP5oRCV/uer4jcPeuY5AfesVbtQWyKix5kTaK
habeyaNSJNRlCC+Zoi7FN83RAuypcib2M91n+bGWrBS82y2kFWQ7HKeNiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeVzZVnmtVxPDEZ09mr0760mnmEMB8GA1UdIwQY
MBaAFEv+Z4bnQRr/z/TOaLW3Bpgq27IWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU181bmh1ZEJHdl9QOU01b3RiY0dtQ3Jic2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9kZmJiYjUtNjM0Yy00ZTQ2LWEwNjkt
Y2IxZmQxMjExYjAxLzEvU181bmh1ZEJHdl9QOU01b3RiY0dtQ3Jic2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9kZmJiYjUtNjM0Yy00ZTQ2LWEwNjktY2IxZmQxMjExYjAx
LzEvU181bmh1ZEJHdl9QOU01b3RiY0dtQ3Jic2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqqwVZPl
LpD/1mvmoOscyJ6clMtw6j0k07QmwT1wzvsN1H0cEcPYCIHoXW9bbjDQJwl6epse
zvqcq7W3o56h3lJowGSMi281zYz66SWTfPXx+gu/7rjqTO9fCzVE67QQxxz28soZ
G5V0BIY1qxxTZMZfXZ7zdEiRq/VrXyQ+pA2o05BxjssLfRIPvnTTSk4SZUPDWA9p
iZLv6EYL+ENRm2qB3dWrCmld+t5fgYjF7oGjesdYy1POlukUiyS1KP5yuGiZ4RvT
GsphxY3g7lyDya6dKu6E/XrfpMCCcBFTlkQMlPbXUjYat7gXBIbqlY5KoccA9wFa
LvADfH0hzjK2BQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:10:38 2026 by rpki-client