Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: US1O0rUy6C0MCAMEzyyqjXofqvTxO23WyFPjgWzGt10=
Subject key identifier: 4F:B1:4B:21:43:1E:5C:BE:68:EC:D2:D0:74:40:25:C5:99:57:B2:5F
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 01A0E5879EC8B555DB4DAA109A2285BED087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 1A8B
Signing time: Mon 28 Sep 2026 01:01:05 +0000
Manifest this update: Mon 28 Sep 2026 01:01:05 +0000
Manifest next update: Tue 29 Sep 2026 01:01:05 +0000
Files and hashes: 1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: EGkmsgWP8wbSIW5FelkyY+rjaXZM9QOAhBbNkvbUxpI=)
4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:87:9e:c8:b5:55:db:4d:aa:10:9a:22:85:be:d0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Sep 28 01:01:05 2026 GMT
Not After : Sep 29 01:01:05 2026 GMT
Subject: CN=4fb14b21431e5cbe68ecd2d0744025c59957b25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:5b:8b:13:f4:7d:6b:6e:2d:8f:36:ea:f0:
70:5b:a0:33:3b:03:e2:17:51:d5:43:c6:a7:46:bd:
5b:1c:86:82:e9:ba:f9:88:28:9e:27:56:be:31:8c:
b8:9c:7a:95:4f:9e:31:d5:fa:69:18:33:f4:09:c0:
0a:62:ae:cf:32:ed:2d:06:48:e9:cc:ad:b7:55:3e:
a3:8f:10:0a:d9:24:ff:5b:a5:de:9e:91:d7:4d:65:
f7:c6:61:6c:84:4b:bf:0d:fa:33:ca:7c:ef:3d:5b:
23:05:c5:58:55:9f:77:81:a6:28:cc:c3:89:ca:f7:
1c:5f:b5:f4:97:10:10:b8:b4:32:7b:32:19:ef:12:
ed:c7:fe:a5:35:32:83:bb:18:56:34:fa:88:f1:03:
43:66:52:83:0f:42:09:84:62:ef:cb:f0:e0:95:67:
02:49:e2:b6:49:15:0f:6d:81:07:1d:62:6d:d8:cf:
02:c5:21:db:4b:1a:b1:7b:67:be:09:33:fb:5c:45:
23:a0:dd:7a:08:76:0a:99:f0:6b:ea:b9:5a:02:03:
e0:61:79:68:25:23:d8:82:b3:17:3c:fc:45:df:1e:
c2:f6:e9:3a:d8:b5:9f:e9:fa:9e:46:36:a4:62:d5:
5e:60:47:4e:b7:f3:63:77:73:f7:f1:46:b2:0f:4d:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:4B:21:43:1E:5C:BE:68:EC:D2:D0:74:40:25:C5:99:57:B2:5F
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:78:5f:cf:3f:5d:ae:bd:a0:94:dd:15:aa:d9:18:95:be:7d:
8a:74:98:cb:94:47:e8:0c:a3:f2:ca:45:15:4e:1a:0b:ea:f1:
c0:ec:5e:a9:00:42:29:60:0b:9b:e0:db:2f:22:79:23:3b:a0:
5a:67:1f:4e:7f:0f:3a:10:2b:75:65:c4:e6:6c:c1:a2:b3:ba:
ef:6e:2d:61:98:5b:21:d7:84:36:21:8a:0a:b9:f0:6c:5f:25:
cc:d5:01:29:15:b7:c9:b7:e8:fb:04:0b:d8:84:44:89:a1:a7:
df:f3:45:4c:28:98:0c:0d:13:48:56:14:b1:ab:1d:8b:23:c5:
c8:5e:68:e5:d9:2d:6c:51:46:14:f4:82:43:52:7e:2a:3e:fa:
5a:73:fa:13:6a:fb:be:e9:25:a8:c9:00:54:4a:08:ad:de:00:
61:71:62:e2:3f:f4:32:81:20:c3:08:7c:c2:4d:01:0a:b8:26:
a3:3b:53:1c:6f:17:8f:b9:2e:78:98:92:7d:4b:2c:6c:4b:66:
5e:58:26:a6:1e:9f:aa:7f:1e:be:96:3c:02:e4:08:12:d5:53:
3a:f6:7f:8a:7e:38:5d:f0:c2:cb:0c:3c:f7:49:74:d8:27:c4:
69:a5:13:5f:cd:e1:e1:2f:1d:4d:bd:5d:34:dc:51:42:3a:40:
cd:9a:91:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:13:34 2026 by rpki-client