Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
File: S2MqdYtZMJ6GEInWVTruBnprNT8.mft (raw, json)
Hash identifier: et86dsYO7nbiDojQeey7UyGIqVJmHxEQ3bD2mNHuSlc=
Subject key identifier: B6:07:3D:B0:00:22:AC:58:13:48:D3:50:88:77:26:7F:03:64:E3:AB
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 01A130342642D59BE042421D7D0C54F19DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
Manifest number: 1AA0
Signing time: Mon 12 Oct 2026 13:01:26 +0000
Manifest this update: Mon 12 Oct 2026 13:01:26 +0000
Manifest next update: Tue 13 Oct 2026 13:01:26 +0000
Files and hashes: 1: 1j-cndh73up45TjcJHDMi8wQ8Xc.roa (hash: KpN3w6f7/yCpGmCh1vdlXsD6GVlxoKm9AQfV9ZcUMXk=)
2: 44Nps6a4A0iJ-S5FNbgCYPVDl-g.roa (hash: +egeaF2cFoduaGGr7Icg4ElpBQ+dGnmrC99v7y4WFaA=)
3: S2MqdYtZMJ6GEInWVTruBnprNT8.crl (hash: 1WOC+tRKse+chAQYrh5g6swBTeoOUvDX07XaRft0qa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:34:26:42:d5:9b:e0:42:42:1d:7d:0c:54:f1:9d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Oct 12 13:01:26 2026 GMT
Not After : Oct 13 13:01:26 2026 GMT
Subject: CN=b6073db00022ac581348d3508877267f0364e3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:e6:87:d4:58:ab:0d:26:8f:8a:9c:15:ba:
32:11:96:20:35:13:3c:71:97:f2:6f:d9:2d:3a:70:
1a:1d:89:b1:a4:63:b7:fb:eb:87:a1:87:a3:f8:01:
d5:bc:be:3e:75:df:9c:ad:4d:00:c9:90:77:17:69:
b2:41:09:97:b7:ce:da:e4:a3:3e:64:c8:37:93:07:
5e:34:2b:b5:d0:3a:c8:5a:f0:27:d8:93:5e:70:c5:
d8:e7:a5:b6:32:59:b8:44:d1:e8:7c:3c:b4:77:31:
61:a4:dc:e1:43:bf:f9:c0:c2:d8:b7:82:3e:b5:81:
fc:91:af:90:bf:54:48:85:a6:99:e5:12:32:36:f5:
5f:f0:a1:f9:3e:5f:2f:67:26:ba:a5:8d:2b:fe:65:
cc:6e:f9:8a:d5:c2:9c:5b:f7:e1:7c:ac:de:07:60:
ae:8d:6d:12:74:0e:da:58:6f:a2:20:5a:c9:c4:81:
db:fd:e4:22:5e:ea:6f:19:a4:03:ba:e0:22:cb:ae:
06:fd:66:f0:09:5b:ad:34:20:ff:3d:80:d0:18:32:
4c:16:17:1c:d9:1c:47:d0:ce:f8:d9:e8:f3:a1:0f:
fc:6b:72:f4:2c:14:d4:4d:67:9e:f3:9c:97:e5:b2:
2f:49:7d:ad:c6:22:ba:89:8f:58:a9:8f:be:7d:a7:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:07:3D:B0:00:22:AC:58:13:48:D3:50:88:77:26:7F:03:64:E3:AB
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:dd:ce:6c:7e:52:4d:e6:ab:5a:0d:27:c3:a8:7b:d2:91:17:
d2:8e:82:5f:0c:2d:96:e5:69:e4:a8:2d:94:d0:ab:6f:f8:ed:
2b:52:0e:99:b0:b5:fb:4a:99:49:b2:78:d3:d8:8e:27:e8:0a:
f1:b5:82:eb:97:e0:f7:e8:c1:cd:ea:0d:e0:48:62:03:f0:83:
74:fd:15:47:a0:25:ed:71:0c:9f:f8:66:1b:b8:64:a1:3a:bc:
c9:30:ce:68:d1:3e:dd:f6:49:c6:45:a9:60:39:ec:a8:3d:8e:
b4:e6:66:fe:06:a5:28:2f:08:95:45:1c:be:66:c4:f9:9b:70:
e5:c8:34:ea:fb:e6:32:d7:47:45:66:a3:ae:9b:39:60:6c:8c:
a8:15:b7:14:66:cc:9b:64:99:1c:6a:ae:c4:16:24:46:b9:b4:
e8:39:72:7a:c9:a5:47:92:d0:35:61:f3:15:af:a8:f4:dd:4f:
b4:e0:6a:47:21:e2:8f:e4:03:30:17:27:e8:73:f3:6c:c0:4b:
3c:cc:79:2e:14:fb:61:68:6c:63:de:e0:f4:b8:7c:24:29:7c:
30:5f:03:00:a1:85:61:b3:22:32:b2:1a:c4:30:89:cc:ac:78:
d5:28:e6:7b:a8:8c:c7:02:36:db:7e:79:00:70:22:cb:75:42:
45:18:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:08:14 2026 by rpki-client