Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: oaMweTjIzb1kZERC2MtfvO4pe5rEllZFKpxs/BCwmD8=
Subject key identifier: 4D:D5:3E:E0:08:5E:34:5F:C5:88:B3:81:B9:6C:77:B3:CE:EA:6F:C9
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 019FA116514140C49AD3EF1F0AE24491DDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0AFB
Signing time: Mon 27 Jul 2026 01:00:22 +0000
Manifest this update: Mon 27 Jul 2026 01:00:22 +0000
Manifest next update: Tue 28 Jul 2026 01:00:22 +0000
Files and hashes: 1: 9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa (hash: HOLT/uX07DZotEdYvRZ0JcT8iyC7/R6c7JRLNLUWdZM=)
2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: kBieU8X0+zbUzYwvfUTq+UYKdYvVdoFS050csfd/vt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:51:41:40:c4:9a:d3:ef:1f:0a:e2:44:91:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Jul 27 01:00:22 2026 GMT
Not After : Jul 28 01:00:22 2026 GMT
Subject: CN=4dd53ee0085e345fc588b381b96c77b3ceea6fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:c2:ff:21:2a:b3:4a:d5:7c:94:49:36:59:
50:56:6d:69:42:79:62:8e:47:d7:77:7a:79:32:3d:
4f:e1:0e:0b:4c:1f:c4:94:2b:79:76:a2:0f:8a:ef:
d5:c2:ba:b1:00:61:3f:58:c5:0e:eb:40:1a:bc:e0:
10:b9:ae:6e:d7:9e:70:c9:46:92:15:8d:6f:5f:b2:
7d:2d:a4:81:43:7d:86:da:81:ae:f3:bf:3a:42:f3:
8a:26:8b:99:55:44:49:bc:e3:7e:09:5b:07:53:ab:
15:b7:47:9c:89:a3:65:d5:2c:1a:c7:8f:97:15:ba:
a7:3d:c2:9e:16:05:20:15:64:39:a9:24:3f:8e:1a:
ac:aa:da:8b:2f:22:f0:d6:2e:89:e7:5c:65:d3:92:
e2:f2:c2:72:ba:69:db:3d:b8:a0:9a:2b:a1:cf:31:
94:e9:81:87:24:71:db:02:0c:08:b1:a0:38:a1:be:
7d:ca:87:46:20:d6:83:54:78:3e:ee:52:80:65:8d:
bd:6d:38:a8:f6:69:fe:a9:d8:48:74:20:9c:97:f2:
e4:79:7c:00:57:83:11:45:96:4c:ae:25:81:29:0f:
47:4c:6a:a9:70:dc:da:98:94:26:1b:a8:9a:10:40:
57:dd:f4:9c:72:df:b1:22:b5:ab:6f:c0:11:c1:1a:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D5:3E:E0:08:5E:34:5F:C5:88:B3:81:B9:6C:77:B3:CE:EA:6F:C9
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:eb:e1:e9:e5:96:12:f9:d9:a6:af:92:90:b3:0d:9c:79:5a:
61:c3:29:66:84:6e:a5:68:13:69:29:e3:8c:34:2f:04:28:7f:
d2:c7:e0:8e:7c:1a:c3:68:8d:8c:88:12:8e:20:13:25:0c:bc:
4d:59:01:37:de:60:39:42:f6:9e:83:38:c6:8b:93:f5:f4:4d:
bc:6f:05:69:54:e0:f4:a6:2d:d6:80:ef:72:f8:48:cf:55:bf:
1c:3a:c7:64:42:85:f0:78:9b:06:cc:f4:34:88:63:2e:10:4e:
4a:52:d3:c2:92:fb:83:3d:9d:a0:31:de:f4:da:23:79:61:bb:
2e:57:ea:b0:bc:2d:78:02:91:c5:ae:3d:40:3c:81:4b:96:0e:
e3:6e:91:25:51:12:ff:c2:dd:b3:09:a1:b8:a8:47:7e:9b:34:
5f:0f:7b:8c:2b:af:bb:4f:86:8b:4b:4b:ff:63:8e:1f:7e:e5:
32:49:9c:c2:8b:c3:7b:07:0a:af:ba:7b:8b:a6:98:4e:7b:ec:
0e:a2:13:8c:61:85:f8:37:d9:86:6e:7a:2c:8d:82:dc:e3:d8:
97:51:d7:b0:ad:5a:e7:87:cd:b3:6e:2c:5b:6e:8b:9c:75:93:
91:e6:73:99:5c:0c:8a:22:8b:06:38:5c:16:45:57:ff:0e:ea:
f8:2a:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:29:56 2026 by rpki-client