Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: 0H8m9GHUaSm0rrhjeX/iuwZZzR77tJHQfH3qVvE5tSM=
Subject key identifier: 8A:B3:9E:96:32:7D:6F:C8:A2:D8:29:B3:E8:4E:E4:7F:38:BF:CC:F9
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 019FF94893B02046592EB9959305D01DF31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 19FF
Signing time: Thu 13 Aug 2026 04:01:50 +0000
Manifest this update: Thu 13 Aug 2026 04:01:50 +0000
Manifest next update: Fri 14 Aug 2026 04:01:50 +0000
Files and hashes: 1: 1j-cndh73up45TjcJHDMi8wQ8Xc.roa (hash: KpN3w6f7/yCpGmCh1vdlXsD6GVlxoKm9AQfV9ZcUMXk=)
2: 44Nps6a4A0iJ-S5FNbgCYPVDl-g.roa (hash: +egeaF2cFoduaGGr7Icg4ElpBQ+dGnmrC99v7y4WFaA=)
3: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: 2+lI7tixqJTSfUyekMgRBOTBqhUJPF9h50di/3aPjDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:48:93:b0:20:46:59:2e:b9:95:93:05:d0:1d:f3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Aug 13 04:01:50 2026 GMT
Not After : Aug 14 04:01:50 2026 GMT
Subject: CN=8ab39e96327d6fc8a2d829b3e84ee47f38bfccf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:75:44:ad:ac:3b:f6:e5:e6:41:05:67:de:
b4:ed:e7:bd:e9:17:8f:e7:8c:a0:3e:86:38:fb:9b:
28:5d:9c:db:73:99:a6:58:d7:d1:e5:c4:6a:97:56:
ac:de:85:42:32:eb:8b:74:8e:10:80:59:fc:1a:03:
06:74:4f:c5:5f:0d:ea:b5:0f:77:d0:37:03:fc:dc:
38:cb:ab:82:8a:9e:da:ab:99:da:d9:55:17:80:84:
01:42:be:50:fd:9d:10:31:7c:1c:e0:d6:97:d2:95:
af:17:37:60:e5:b5:a7:e8:fc:79:47:9e:00:65:06:
8b:72:17:59:a0:3d:ba:ab:4c:82:e3:76:d3:03:aa:
93:41:c1:be:c0:67:6c:7f:8d:48:9a:ac:df:31:ca:
30:2a:ba:54:9b:f7:ca:7f:0e:39:0a:ac:06:07:58:
e8:83:c7:a6:a6:dc:e6:ae:91:14:69:88:1d:4a:87:
cf:ce:6e:05:d0:a3:2f:fe:24:96:88:4c:27:91:2b:
e2:e2:0b:4f:a6:3d:ca:74:8e:21:3f:b3:0c:23:ca:
34:ee:d5:98:dd:33:a4:fb:3b:f9:7e:c0:8b:7c:85:
3a:f7:9b:e6:3a:f4:b0:b9:1a:c8:4b:ec:fb:fa:75:
99:9e:ba:f9:c6:8b:2b:b6:52:3a:27:17:06:dd:0b:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B3:9E:96:32:7D:6F:C8:A2:D8:29:B3:E8:4E:E4:7F:38:BF:CC:F9
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2f:8a:43:87:db:7a:90:2c:a4:a2:99:7a:4f:a0:a8:60:c7:
d2:0a:90:90:2b:4a:1e:a3:80:bb:98:0d:3d:69:04:05:2b:e8:
51:04:63:6a:33:8f:42:4e:a3:4d:a8:9c:b2:79:8e:fd:a0:f7:
f5:a8:d0:c2:84:ef:f8:f7:f0:59:75:26:25:ed:ef:94:0c:bf:
00:8e:a7:69:b7:83:80:6a:f3:f6:90:1d:2f:17:f7:f7:86:e5:
2b:30:90:17:01:a4:e6:ca:f5:8d:9a:ed:13:19:18:2c:bb:93:
ba:c5:f9:59:f5:26:97:35:1b:ae:9d:c8:0f:58:57:4f:56:ab:
e2:56:80:b5:09:cb:a5:f0:2c:cb:2f:98:05:f0:97:86:3d:26:
4a:9a:a4:f4:ae:d6:4a:9c:7d:51:86:42:fb:3a:36:74:de:28:
b3:cd:87:1e:33:75:12:12:45:2c:65:d3:6e:e1:44:6d:76:ce:
aa:e0:e1:cf:b6:54:25:a6:a8:56:88:59:77:9a:dc:dd:a6:4c:
34:29:71:d6:c1:6b:ba:0e:e9:f3:62:c1:6a:1b:40:b6:25:90:
cd:7a:85:ea:50:7d:5f:82:79:75:aa:39:0d:66:96:34:c4:f1:
1a:e0:fc:ec:e5:2e:1e:f5:01:14:c7:b9:3f:2d:e1:4d:5d:75:
d0:a2:bc:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/5SJOwIEZZLrmVkwXQHfMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjMyYTc1OGI1OTMwOWU4NjEwODlkNjU1M2FlZTA2N2E2
YjM1M2YwHhcNMjYwODEzMDQwMTUwWhcNMjYwODE0MDQwMTUwWjAzMTEwLwYDVQQD
Eyg4YWIzOWU5NjMyN2Q2ZmM4YTJkODI5YjNlODRlZTQ3ZjM4YmZjY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHN1RK2sO/bl5kEFZ9607ee96ReP
54ygPoY4+5soXZzbc5mmWNfR5cRql1as3oVCMuuLdI4QgFn8GgMGdE/FXw3qtQ93
0DcD/Nw4y6uCip7aq5na2VUXgIQBQr5Q/Z0QMXwc4NaX0pWvFzdg5bWn6Px5R54A
ZQaLchdZoD26q0yC43bTA6qTQcG+wGdsf41ImqzfMcowKrpUm/fKfw45CqwGB1jo
g8emptzmrpEUaYgdSofPzm4F0KMv/iSWiEwnkSvi4gtPpj3KdI4hP7MMI8o07tWY
3TOk+zv5fsCLfIU695vmOvSwuRrIS+z7+nWZnrr5xosrtlI6JxcG3QtNZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqznpYyfW/Iotgps+hO5H84v8z5MB8GA1UdIwQY
MBaAFEtjKnWLWTCehhCJ1lU67gZ6azU/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMt
OTRjMGIwYjc2MDI5LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yMTNhOTUtYWFjZi00MGE5LTk3NTMtOTRjMGIwYjc2MDI5
LzEvUzJNcWRZdFpNSjZHRUluV1ZUcnVCbnByTlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARS+KQ4fb
epAspKKZek+gqGDH0gqQkCtKHqOAu5gNPWkEBSvoUQRjajOPQk6jTaicsnmO/aD3
9ajQwoTv+PfwWXUmJe3vlAy/AI6nabeDgGrz9pAdLxf394blKzCQFwGk5sr1jZrt
ExkYLLuTusX5WfUmlzUbrp3ID1hXT1ar4laAtQnLpfAsyy+YBfCXhj0mSpqk9K7W
Spx9UYZC+zo2dN4os82HHjN1EhJFLGXTbuFEbXbOquDhz7ZUJaaoVohZd5rc3aZM
NClx1sFrug7p82LBahtAtiWQzXqF6lB9X4J5dao5DWaWNMTxGuD87OUuHvUBFMe5
Py3hTV110KK8tw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:27:08 2026 by rpki-client