Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
File: S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft (raw, json)
Hash identifier: GUkAgkZ93qN5oKtEzv6w7lP8U8gDfXoS+EjaGUkuNt8=
Subject key identifier: A2:5C:D8:45:8D:E4:90:CC:A8:E8:1E:68:BE:A5:FE:EF:8D:C7:E5:70
Authority key identifier: 4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
Certificate issuer: /CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Certificate serial: 01A17DE169E1F892B42589C13C8D0F7E5481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:27 +0000
Manifest this update: Tue 27 Oct 2026 15:01:27 +0000
Manifest next update: Wed 28 Oct 2026 15:01:27 +0000
Files and hashes: 1: S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl (hash: oqfzwPZJ23aXLlMRd8Bgi1BVhPs8USMhpiUH/v3ejV4=)
2: X00WP5hL284UqAVGxLXaNNV_5EU.roa (hash: Qq8OZKKabuQ4bEnBcQSngOYJ+I2wL1Rk9O2ngy1HvwE=)
3: l-XkXuf9XggQYZxtWN0dMNbMQYA.roa (hash: VtVN/POmbvS7tbXroTKgBcOB9/D/3PdK83che1VmeOE=)
4: mT6v6jSgHIygycLQjCb9jIj1ZFo.roa (hash: 3STcbpvfvavXclx/IAHFXEuz539gDMyFZGfO/1xoJjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:69:e1:f8:92:b4:25:89:c1:3c:8d:0f:7e:54:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Validity
Not Before: Oct 27 15:01:27 2026 GMT
Not After : Oct 28 15:01:27 2026 GMT
Subject: CN=a25cd8458de490cca8e81e68bea5feef8dc7e570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:08:a4:19:86:d2:e9:81:e1:0a:a9:25:dc:
35:34:4a:df:56:c4:d6:d6:0e:57:df:32:e8:b4:72:
c2:bc:d6:f7:df:53:6a:b8:0d:f1:8f:d1:8e:06:8b:
61:20:08:83:fe:1f:58:08:99:af:e3:da:0f:b4:7c:
b5:f8:6c:1e:6a:35:ba:db:d1:45:36:db:f3:05:ab:
f9:7d:b4:c4:11:45:e5:95:cb:30:0e:d9:70:ad:d1:
38:d8:01:d1:5e:a4:51:e1:72:c4:85:39:39:6c:7f:
84:31:36:35:ec:85:26:e9:7e:0a:73:3f:8b:c8:46:
ce:ac:90:33:89:fc:86:0b:88:bf:ed:c3:b6:92:0f:
15:4c:1b:0c:e4:eb:0e:c5:8d:0c:6e:84:23:e2:d3:
16:8d:0b:5b:44:46:c1:e1:2c:d5:93:76:79:54:66:
3d:1c:96:46:9f:52:d6:ac:b0:51:1b:b3:3d:2d:19:
86:55:1a:4a:f9:56:44:ec:cc:3d:fe:cf:0b:a7:99:
21:c2:ec:5d:14:dd:e0:b7:db:e7:ef:45:bc:dd:d7:
37:6a:e1:99:2d:c8:8e:7b:d0:3b:ff:4b:f9:59:4f:
cc:94:06:44:7e:34:6b:ff:3c:d9:ba:de:24:eb:c4:
4d:cb:30:92:e4:a9:d6:99:27:db:db:e7:c7:f0:93:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5C:D8:45:8D:E4:90:CC:A8:E8:1E:68:BE:A5:FE:EF:8D:C7:E5:70
X509v3 Authority Key Identifier:
keyid:4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fe:cb:c3:46:ef:fc:8e:29:25:40:47:dd:6a:6a:56:e8:2d:
66:04:c2:32:0e:fe:a7:b2:85:50:5d:f1:53:10:d3:e7:f6:a6:
a3:c9:cd:0b:6c:14:7d:86:ba:18:8d:c0:85:32:43:e3:59:3b:
d4:34:e4:63:0f:d5:6e:1e:5c:0a:ae:fe:f9:bd:56:ef:99:cd:
fe:04:51:42:95:0a:6c:49:0a:c2:56:e9:71:57:52:a6:c6:b1:
6e:17:72:25:71:37:38:49:5c:70:43:3c:aa:d7:74:38:30:5f:
4b:49:cb:5e:fd:4e:6d:77:35:87:a8:01:aa:ca:ac:9d:51:bd:
a4:a9:bf:da:65:20:65:5a:02:93:96:92:74:e4:ce:42:a7:97:
76:d3:96:33:c7:73:eb:20:61:bb:66:28:00:24:85:66:9d:07:
64:80:bb:53:31:f2:63:69:79:f9:53:7c:25:82:32:90:dd:11:
aa:8f:34:1a:50:5b:74:2a:9f:f8:09:f7:73:eb:b7:60:e2:36:
f8:57:0c:25:1f:31:6a:80:a1:ea:a7:1b:07:a3:4d:7d:6c:9c:
a7:2f:75:aa:d8:4e:a8:db:e7:46:6a:39:be:e7:11:03:64:d7:
7c:8b:27:59:a0:1b:b0:17:ba:3e:b7:98:eb:7c:c7:08:0b:15:
02:7f:ac:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:23 2026 by rpki-client