Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: m/IbX6p4U3X7FxKQuqg0N0Ds8esislryu7ER0o6Fujk=
Subject key identifier: F1:39:7B:78:E5:5A:A4:31:66:AF:87:5C:54:8C:AE:3B:89:CB:3D:CD
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 01A18006E3B29AB6806CA1042788A474AB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0BF3
Signing time: Wed 28 Oct 2026 01:01:37 +0000
Manifest this update: Wed 28 Oct 2026 01:01:37 +0000
Manifest next update: Thu 29 Oct 2026 01:01:37 +0000
Files and hashes: 1: 9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa (hash: HOLT/uX07DZotEdYvRZ0JcT8iyC7/R6c7JRLNLUWdZM=)
2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: 3YwEbdVIQ/pAGe/PNUYar8qYqrjWcQORikxoOvuZt2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:e3:b2:9a:b6:80:6c:a1:04:27:88:a4:74:ab:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Oct 28 01:01:37 2026 GMT
Not After : Oct 29 01:01:37 2026 GMT
Subject: CN=f1397b78e55aa43166af875c548cae3b89cb3dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:88:20:3e:9a:07:b3:77:bd:c5:df:a7:c1:
be:98:32:36:ba:d0:24:14:45:4a:6e:d7:2d:00:d5:
45:df:f8:51:d2:7e:09:66:cc:39:8e:2e:f8:9a:87:
99:8c:63:b7:2c:17:9d:f1:6f:31:2a:68:ab:bd:fb:
82:0b:95:a2:51:08:87:7f:6c:8e:6b:8e:e9:63:bc:
ea:28:e8:48:76:5c:b8:c0:59:75:ba:6a:ca:97:dd:
a2:44:f8:8c:b1:3d:e6:8f:2e:13:ae:ab:1f:c1:54:
cb:ca:25:fb:99:01:ae:f4:d2:64:b8:10:a1:a0:1a:
cd:f0:cf:a7:05:8b:f5:4e:68:8f:88:5b:cf:ef:d2:
f3:c5:cf:fa:de:2f:fd:c1:89:2b:d5:3a:fa:b3:5c:
0e:2b:0e:d0:2a:7d:ba:19:c4:2a:56:54:24:f2:0b:
79:72:c8:1e:f0:e9:9c:86:f5:ce:e8:a0:34:c9:d8:
ea:cc:92:2a:8e:93:99:db:d3:57:e5:93:9a:a2:b4:
f1:c2:3d:3f:a7:c4:d0:8f:22:ab:68:87:91:9b:b9:
68:54:02:41:71:77:b7:25:cc:3b:86:88:d9:61:39:
de:c0:d1:f6:32:db:88:1f:86:09:97:fa:7b:70:8a:
36:13:99:2b:19:18:aa:9c:29:78:3a:7b:a8:22:6a:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:39:7B:78:E5:5A:A4:31:66:AF:87:5C:54:8C:AE:3B:89:CB:3D:CD
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3e:5c:1d:12:5c:52:72:50:8b:9f:fa:26:e7:b1:57:f3:53:
75:cb:02:1a:3c:df:bc:20:ea:48:d6:6e:91:53:48:f4:0c:25:
5c:a7:49:5c:2f:b7:bb:d0:4e:82:d3:6b:08:f1:07:3c:7d:2d:
55:02:0b:e0:25:e5:04:f2:0a:61:11:0b:70:eb:13:08:06:ef:
5a:0d:2b:1a:5c:99:c7:20:76:87:92:02:f4:d2:29:ee:37:38:
8c:2e:97:3f:38:ea:7b:51:2e:1b:05:91:51:be:3f:1a:d3:22:
9d:ac:5d:62:dc:f7:4c:46:10:61:63:27:08:61:81:ba:3c:ad:
55:07:ca:34:21:47:6d:ed:00:df:cc:61:d8:d4:04:41:8c:22:
0d:3f:09:3f:59:ec:38:19:1c:7d:b2:33:08:f7:9c:c1:54:59:
a0:d3:53:40:5a:32:87:9b:66:17:ee:de:c5:a5:f8:3f:07:2b:
d9:a9:9d:77:89:5e:44:22:6e:cb:fc:4d:5d:4d:b2:88:71:42:
4b:bc:28:f9:87:6b:e6:1d:f9:bb:01:8a:bb:f9:01:66:cb:39:
be:af:2f:9e:17:ce:7c:0f:76:47:5f:64:b6:c5:a5:0c:11:d2:
df:c4:ae:dc:ce:73:e8:e7:c1:27:48:c1:37:b8:02:42:e5:14:
f3:79:29:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGABuOymraAbKEEJ4ikdKsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjRmOGMwZTFiMzlkOGE4ZWY4ZThjOGI1YTBmZmVlMmI1
M2I1ODcwHhcNMjYxMDI4MDEwMTM3WhcNMjYxMDI5MDEwMTM3WjAzMTEwLwYDVQQD
EyhmMTM5N2I3OGU1NWFhNDMxNjZhZjg3NWM1NDhjYWUzYjg5Y2IzZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirWIID6aB7N3vcXfp8G+mDI2utAk
FEVKbtctANVF3/hR0n4JZsw5ji74moeZjGO3LBed8W8xKmirvfuCC5WiUQiHf2yO
a47pY7zqKOhIdly4wFl1umrKl92iRPiMsT3mjy4TrqsfwVTLyiX7mQGu9NJkuBCh
oBrN8M+nBYv1TmiPiFvP79Lzxc/63i/9wYkr1Tr6s1wOKw7QKn26GcQqVlQk8gt5
csge8OmchvXO6KA0ydjqzJIqjpOZ29NX5ZOaorTxwj0/p8TQjyKraIeRm7loVAJB
cXe3Jcw7hojZYTnewNH2MtuIH4YJl/p7cIo2E5krGRiqnCl4OnuoImqO7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE5e3jlWqQxZq+HXFSMrjuJyz3NMB8GA1UdIwQY
MBaAFEtk+MDhs52KjvjoyLWg/+4rU7WHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUt
OTVkNWUxNmNkZGVmLzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jNDk3YmUtZjNiMS00YzliLTg1OWUtOTVkNWUxNmNkZGVm
LzEvUzJUNHdPR3puWXFPLU9qSXRhRF83aXRUdFljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZj5cHRJc
UnJQi5/6JuexV/NTdcsCGjzfvCDqSNZukVNI9AwlXKdJXC+3u9BOgtNrCPEHPH0t
VQIL4CXlBPIKYRELcOsTCAbvWg0rGlyZxyB2h5IC9NIp7jc4jC6XPzjqe1EuGwWR
Ub4/GtMinaxdYtz3TEYQYWMnCGGBujytVQfKNCFHbe0A38xh2NQEQYwiDT8JP1ns
OBkcfbIzCPecwVRZoNNTQFoyh5tmF+7exaX4Pwcr2amdd4leRCJuy/xNXU2yiHFC
S7wo+Ydr5h35uwGKu/kBZss5vq8vnhfOfA92R19ktsWlDBHS38Su3M5z6OfBJ0jB
N7gCQuUU83kp4g==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:20:44 2026 by rpki-client