Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: qNYm9V88YnmcH++xeLX+f2g/7R0SoiabRxdxeI1SC18=
Subject key identifier: 65:0B:EB:14:4B:93:70:F7:6C:71:E6:C4:6F:7C:25:CE:40:49:19:4D
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 01A17E866C4ED8BC43C1495551903FB0D573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 1AE8
Signing time: Tue 27 Oct 2026 18:01:41 +0000
Manifest this update: Tue 27 Oct 2026 18:01:41 +0000
Manifest next update: Wed 28 Oct 2026 18:01:41 +0000
Files and hashes: 1: 3Vx1cnLpiAfNCzWy0I3_nXPcC9M.roa (hash: p+noQvGX+yQD2XLqg2x5Tru3ct/yVQ6G5E/ulPipjjA=)
2: H-3bQ-7Lc-BNSgANmO6MHSsPLSs.roa (hash: F2USW61FAReCMbWyEgVR2l80hK+ZfBgaE66ET3G7sBk=)
3: PQkXJQC844XrblWqXSwmAqWUi64.roa (hash: 2cLFr6U2XYR9sr+N19r2/hYJ/Yi/7BSVRT7pLcifiQg=)
4: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: tSMjNRNhWLsTK8kGFa04NAHxfE7H1l5e6r+JMJH80d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:6c:4e:d8:bc:43:c1:49:55:51:90:3f:b0:d5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Oct 27 18:01:41 2026 GMT
Not After : Oct 28 18:01:41 2026 GMT
Subject: CN=650beb144b9370f76c71e6c46f7c25ce4049194d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:c1:aa:cd:9d:e2:b3:95:b4:ae:6c:e1:d5:
cd:1c:d3:56:6b:fb:6d:77:23:ed:fb:58:51:3f:b5:
e0:d2:64:67:a5:be:b6:3f:b6:f0:67:76:a3:e6:54:
0c:c8:e7:04:0d:a7:dd:7a:32:ea:9c:1a:c2:e4:b9:
be:ad:c2:9a:3b:28:0b:dd:e5:c3:a8:63:b2:75:eb:
4a:f4:4e:ef:85:50:6f:a4:a1:ff:70:a2:c8:db:0c:
4d:ba:66:73:ec:73:39:69:2e:6a:66:3a:56:a1:65:
75:7e:73:ed:48:41:e3:f2:79:25:10:c1:29:07:9b:
49:1f:a7:19:42:fe:1b:3c:a3:76:94:36:62:21:6e:
09:39:41:9a:7c:d7:75:84:0e:46:51:57:9d:45:62:
74:87:d8:21:b4:a0:cd:f5:c4:e5:61:e2:07:a5:8c:
70:c1:21:a6:86:73:b9:db:bd:e1:d3:b4:fe:f6:74:
d4:48:ea:24:5f:70:d0:01:49:6c:a2:34:55:16:f8:
c2:d3:b7:d5:49:05:b8:cd:27:8d:f6:80:eb:97:c2:
15:4e:f5:5a:fe:56:f1:e8:70:40:4f:89:f1:cc:f1:
71:d6:64:62:9e:92:15:39:a4:a8:48:5c:0f:c0:93:
54:c4:0f:b4:52:8c:d3:00:b3:dd:4e:5e:31:7e:6d:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0B:EB:14:4B:93:70:F7:6C:71:E6:C4:6F:7C:25:CE:40:49:19:4D
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bf:4c:32:3e:1a:72:2e:d9:87:8d:68:e3:8e:ee:50:82:e3:
9b:51:f8:d6:cb:63:7e:5e:c3:ef:5a:49:d3:19:18:0c:e1:a7:
6b:e9:5b:79:3b:0f:62:0d:33:5e:5b:e1:f2:1e:57:9f:71:0f:
01:21:b5:45:c7:3f:b4:f8:df:b6:d5:2c:02:e9:c1:37:7c:98:
69:86:be:5f:20:d5:84:ad:48:ea:a8:f3:37:1f:1d:54:92:81:
b2:ea:7e:a0:85:29:fa:58:36:c6:c5:c3:2e:94:77:97:cc:8c:
02:e2:db:64:10:47:dc:05:64:45:e2:ec:e9:a1:00:c6:18:12:
75:d2:1e:f8:33:c8:5d:60:d2:04:b9:83:ce:3f:1d:aa:ed:85:
08:3e:97:37:d2:ba:c6:59:c4:b2:aa:76:5d:f3:b4:9c:b2:47:
4e:07:74:fd:5c:97:42:e0:2b:9e:53:f1:4e:35:7a:26:69:1b:
aa:59:08:03:37:b0:0f:c4:8f:8e:12:64:38:cf:75:ee:22:27:
87:00:d4:ed:52:88:fd:6a:fc:2a:c3:ba:13:ff:89:18:6b:23:
05:bf:f5:92:63:cc:57:f9:f4:33:69:37:15:7a:a8:ab:78:f9:
a0:f8:ca:0a:68:8e:e6:43:8a:6d:29:bf:ec:3b:af:ce:da:88:
01:37:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:37:37 2026 by rpki-client