Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: 6h0SrQSlKGfPUhKFZyLrovc4aQsJj5FpZuFv0a18b34=
Subject key identifier: C5:82:7A:7A:71:1D:19:51:70:F8:2C:DF:46:80:8F:C1:D7:4D:85:80
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 01A08B31018CFD5011455693C1CAE9ADF33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 1A6A
Signing time: Thu 10 Sep 2026 12:00:39 +0000
Manifest this update: Thu 10 Sep 2026 12:00:39 +0000
Manifest next update: Fri 11 Sep 2026 12:00:39 +0000
Files and hashes: 1: 3Vx1cnLpiAfNCzWy0I3_nXPcC9M.roa (hash: p+noQvGX+yQD2XLqg2x5Tru3ct/yVQ6G5E/ulPipjjA=)
2: H-3bQ-7Lc-BNSgANmO6MHSsPLSs.roa (hash: F2USW61FAReCMbWyEgVR2l80hK+ZfBgaE66ET3G7sBk=)
3: PQkXJQC844XrblWqXSwmAqWUi64.roa (hash: 2cLFr6U2XYR9sr+N19r2/hYJ/Yi/7BSVRT7pLcifiQg=)
4: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: GJhTq1rL1VmxiKIYqVrVxbNqvpWJpfdnAwHa3x9X3AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:01:8c:fd:50:11:45:56:93:c1:ca:e9:ad:f3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Sep 10 12:00:39 2026 GMT
Not After : Sep 11 12:00:39 2026 GMT
Subject: CN=c5827a7a711d195170f82cdf46808fc1d74d8580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5c:ab:fd:7d:9e:45:3e:88:05:06:dc:c5:99:
7f:ac:99:1c:54:6a:31:d4:c6:72:19:87:0c:30:1d:
cf:25:b7:aa:aa:1f:cc:51:db:9e:c5:bb:b9:6e:b9:
05:bf:d6:12:0b:49:f2:de:32:a4:22:cf:9f:45:56:
7c:08:62:22:de:ec:f1:72:e6:a4:e6:b2:cc:ef:96:
68:52:ba:21:e3:21:a6:a6:5f:a6:39:c1:65:39:39:
99:d4:04:e9:e9:61:7f:68:66:07:25:38:05:75:63:
a7:be:a5:ec:f7:3c:22:82:5e:29:7e:3f:05:c5:92:
e9:d9:1e:e5:b5:f1:ee:5b:9f:7b:02:33:e4:5b:63:
ff:a7:01:da:60:19:bd:3d:a9:a3:19:0f:ac:5f:03:
e1:06:08:ee:c5:38:d6:6c:ca:4d:66:9e:2b:4a:da:
da:c7:c3:02:12:13:f4:82:e4:0c:92:21:3f:56:86:
26:f0:44:3c:c6:b9:2f:29:9f:4e:50:4b:14:c6:50:
f0:f7:cc:89:7d:95:84:e5:77:17:5c:58:f6:e3:38:
db:f5:7b:f0:2e:87:d6:f1:76:12:26:77:61:72:aa:
9a:a6:fe:7a:a0:c2:94:4c:65:ba:48:d6:82:77:92:
29:b8:a4:bf:5b:fd:2f:48:5b:41:20:6e:95:c6:03:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:82:7A:7A:71:1D:19:51:70:F8:2C:DF:46:80:8F:C1:D7:4D:85:80
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0c:35:08:4e:e3:ea:d2:1d:d2:c2:e7:aa:ce:da:97:fb:1c:
d3:b2:21:ee:9b:96:18:c8:92:2f:0f:0d:dc:1c:05:43:24:f7:
bd:34:e4:bb:76:7a:eb:92:8a:3a:fe:1f:c7:af:43:aa:7a:9f:
50:27:e0:69:52:81:e9:72:5f:b0:27:18:46:9a:38:d4:74:77:
43:17:99:65:d8:7a:15:7b:08:ab:4f:ef:be:51:fb:d3:8b:6d:
42:36:e1:00:83:42:1d:be:52:2e:6c:7c:49:e4:5c:4f:e1:66:
34:bd:d0:67:30:a1:a8:fd:da:9a:a2:be:c3:f2:4d:f6:8c:53:
9b:95:ed:e9:6c:cd:c0:95:80:c9:03:a3:08:4d:6e:84:ba:0a:
71:1a:f9:5f:43:c8:9a:02:30:d3:4f:70:70:db:5c:0f:3c:2d:
e4:25:79:ee:e2:d9:38:26:c9:1f:ac:3d:94:c7:3e:08:1f:a0:
d3:85:11:42:d8:85:dd:af:18:1b:fd:8c:e6:08:79:1a:a0:4a:
92:cc:e0:92:01:8f:4a:ca:61:29:df:2f:b3:df:9a:74:60:59:
ee:80:34:5e:fc:b7:0c:8a:8b:31:31:d3:12:d7:ce:e6:07:7d:
38:bc:19:e1:a1:31:16:8d:82:f7:d2:ac:7d:ac:cc:7a:c0:af:
06:31:c1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:13 2026 by rpki-client