Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: h+AL9NABiIJz4MkCcfUu+1ArpolE/ONY919z/6AbCHE=
Subject key identifier: E4:D9:F4:9F:35:56:47:2F:0E:77:E8:E0:7D:67:5A:77:DB:15:39:1E
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 019F1189A655B57BF6FB8E3B1F8540B18648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 04:01:01 +0000
Manifest this update: Mon 29 Jun 2026 04:01:01 +0000
Manifest next update: Tue 30 Jun 2026 04:01:01 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: 3+DGgbN9UL1GWYn5XU6c2dZdoSEvtnoPiqIMxMDM1Mg=)
2: oVwWnlXDmkKEJPwq_QTywUic6pg.asa (hash: vXDqor38fMbrJg0yNnP/TrAYe/tgp8ecmN/4akEFjw0=)
3: rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa (hash: RRythu0hdE7VczlwlFEUnLZKoxWCSbWPkOFFbdjDuKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:a6:55:b5:7b:f6:fb:8e:3b:1f:85:40:b1:86:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Jun 29 04:01:01 2026 GMT
Not After : Jun 30 04:01:01 2026 GMT
Subject: CN=e4d9f49f3556472f0e77e8e07d675a77db15391e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:12:3d:b0:88:e3:29:71:e5:0e:c0:8e:c8:
76:08:20:52:76:e4:14:58:61:64:26:bc:7a:3d:27:
b2:32:4e:df:6e:10:bc:ef:cb:45:cb:dd:5f:84:53:
ad:b7:fa:0d:24:ba:a8:53:38:2d:29:bd:12:01:0d:
93:dd:69:8a:98:4f:8f:95:31:99:9e:a1:b1:ac:88:
15:db:b2:9c:2c:3a:5c:fc:8d:03:20:71:ce:33:c7:
a3:80:59:03:01:13:8d:ae:26:60:5a:47:11:eb:ea:
c3:37:7f:93:86:47:bf:ad:f5:bc:e7:53:bc:1e:be:
3d:47:c1:23:fc:f9:d6:b8:a8:54:e1:94:97:f9:75:
d1:84:75:7c:7e:0f:d7:00:ee:85:aa:39:73:54:ee:
33:dc:31:84:33:c4:aa:12:37:81:90:ef:a4:5e:99:
1c:25:90:22:a3:8d:62:94:2e:d5:eb:93:27:13:3b:
d9:34:9b:14:57:e3:81:23:9d:26:01:e7:46:f9:34:
89:3c:86:52:6b:00:12:71:95:55:3a:9b:21:04:d6:
bf:d6:3e:90:58:78:66:8c:e1:b9:b9:20:6a:f5:11:
93:9a:3b:86:41:10:32:28:c6:5d:21:fc:51:67:81:
8b:0c:fe:70:1c:67:88:13:48:0f:a4:72:50:f7:7e:
14:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:F4:9F:35:56:47:2F:0E:77:E8:E0:7D:67:5A:77:DB:15:39:1E
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f8:97:59:c3:c3:8e:87:1c:c7:e9:bb:ec:27:10:26:11:71:
0a:d0:4f:f8:e6:c1:f1:10:f3:b0:f7:0c:b8:f7:29:a7:26:c0:
ba:a3:38:b9:59:66:7c:f1:ea:9d:e7:df:30:db:f1:f3:00:54:
51:b3:da:89:5e:0f:36:1a:9a:a0:e8:08:80:a8:38:90:d4:cd:
bd:3f:ab:0a:5b:7b:fa:fb:fe:ca:17:df:11:70:1e:b3:ef:32:
22:90:5f:25:a5:96:cf:e4:a8:88:54:f6:7a:e4:6e:60:02:f9:
3c:a0:84:99:c2:86:a7:83:6f:d5:35:67:33:6c:cd:24:b0:d6:
93:d1:06:97:b8:01:ed:1e:c1:b2:8a:ac:eb:f9:18:ea:68:c8:
97:a5:f1:5f:72:1d:a7:d0:2e:43:13:92:c9:71:ab:5b:9a:8e:
53:98:75:3f:1d:87:a9:6b:8d:3c:05:db:e2:f3:92:e0:9d:db:
29:c5:a4:18:19:34:b9:6b:ff:70:62:e4:08:1d:7a:74:ca:cb:
22:ff:3f:27:10:b1:c8:d0:3f:81:67:9a:89:7d:45:a8:5b:46:
49:03:ba:86:8c:a1:4d:7e:2a:01:53:8c:bb:9f:cc:ea:53:02:
29:0d:d8:ba:0b:39:a0:fa:cf:38:7f:cd:10:0e:0e:f1:73:f2:
ff:0f:11:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:43 2026 by rpki-client