Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: mDBo71eUDVYjVKwl5WzXu6ZZkDo33+mcOwb7MWm1y+c=
Subject key identifier: C2:5C:95:4C:AD:89:6D:38:DC:93:AC:E2:9B:F2:BF:ED:AD:15:C5:4F
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 01A08CB1E6769D8CA214ED2CC9ECF873934A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0B75
Signing time: Thu 10 Sep 2026 19:01:04 +0000
Manifest this update: Thu 10 Sep 2026 19:01:04 +0000
Manifest next update: Fri 11 Sep 2026 19:01:04 +0000
Files and hashes: 1: 9AXdr3e6UEFu17mXtu9Tr_SHrU0.roa (hash: HOLT/uX07DZotEdYvRZ0JcT8iyC7/R6c7JRLNLUWdZM=)
2: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: uyI3iq5p4FRepG72O0iHaX7vjW+DXuo+G2xh3vO5UVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:e6:76:9d:8c:a2:14:ed:2c:c9:ec:f8:73:93:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Sep 10 19:01:04 2026 GMT
Not After : Sep 11 19:01:04 2026 GMT
Subject: CN=c25c954cad896d38dc93ace29bf2bfedad15c54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:82:b1:6b:f1:43:4d:0e:88:95:6d:85:97:
44:ca:49:36:f9:8a:20:42:22:af:34:8d:18:95:77:
72:4c:fb:d7:cd:5b:e2:4e:f6:5b:6f:d1:39:1e:66:
42:bd:47:10:61:e2:e7:f4:a2:d5:93:e7:1a:19:d6:
66:c9:05:c3:ea:a8:fc:66:b2:69:a7:1a:84:ba:09:
c5:08:ce:d9:26:8e:46:ee:f1:ea:b0:e2:6c:b2:60:
e5:6c:ad:b1:12:fe:9a:9a:23:7c:f8:75:d5:9a:89:
32:7b:d3:bd:d3:3b:84:70:44:f4:b4:ef:be:63:4d:
e6:51:df:84:75:da:a5:26:94:e3:b3:07:55:7f:5c:
68:40:b2:a2:d2:7d:83:fc:7b:58:7c:09:1b:be:8b:
54:f8:d8:e5:78:33:d0:63:71:8d:e8:fd:3b:1c:48:
07:e9:7c:a6:5d:6b:ea:fd:fd:6c:7c:ae:65:27:2a:
56:e2:3a:86:a7:53:c8:7d:80:6e:05:3a:29:58:3e:
4c:68:01:88:1a:23:56:3d:9f:25:f5:30:3d:20:51:
e8:dc:6e:88:24:9b:02:bc:82:64:d4:fe:7e:e9:1f:
5c:5a:97:62:68:4f:ab:98:24:b8:8d:9e:07:ed:1c:
81:bf:be:d2:a0:05:14:9b:c4:a9:70:1c:f4:f5:a2:
69:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5C:95:4C:AD:89:6D:38:DC:93:AC:E2:9B:F2:BF:ED:AD:15:C5:4F
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:7f:b6:60:b5:9c:d3:0a:7e:34:27:f3:aa:22:c5:14:82:74:
5a:68:24:17:7e:b5:8f:56:7b:10:e8:2a:63:a3:d8:3a:17:c7:
98:ec:f7:85:ad:f0:7f:25:7c:e5:8a:3d:4d:70:16:62:b0:46:
5a:c1:b6:47:da:be:47:70:7b:74:bf:40:37:27:e5:40:f7:54:
77:ff:0b:fc:a9:f0:ec:a8:36:75:db:ee:4c:b1:c5:52:f5:e7:
a6:40:cd:d1:29:28:70:b7:ad:a0:e3:c9:41:82:9a:db:e2:11:
0b:90:56:28:db:60:51:12:25:ca:aa:57:b4:5e:36:70:92:85:
e9:a2:47:34:4c:44:36:ea:58:27:cc:6b:99:a8:a3:8e:3b:86:
56:95:d5:2a:5e:ae:8d:5f:ca:a2:33:a5:ba:4e:bb:60:c5:4e:
d3:f4:fa:ec:fa:35:0e:44:f9:d3:ef:11:76:94:c2:13:5a:db:
9c:5c:39:3c:70:56:e8:43:7c:46:16:b4:36:73:10:cc:50:6d:
bc:e7:f7:c6:ef:66:37:7d:e7:84:1a:b8:62:63:77:06:c7:b3:
c2:ef:6e:01:e0:4f:36:dd:07:fb:e2:77:26:66:05:2a:31:9b:
53:ac:f9:21:ae:29:e5:8b:77:01:02:88:9b:d4:1a:bd:8a:1f:
bc:ca:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:12:12 2026 by rpki-client