Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: e8sDvqX8iYanjgHWS7VtO0SNwPtPza3IKrQATz9pLiU=
Subject key identifier: E6:4B:0C:24:EE:CB:51:7C:1D:D7:1B:E2:F0:C7:D1:84:2B:22:47:12
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 01A17CCEEDCE9648E548AB1996BCA0B91BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 10:01:38 +0000
Manifest this update: Tue 27 Oct 2026 10:01:38 +0000
Manifest next update: Wed 28 Oct 2026 10:01:38 +0000
Files and hashes: 1: IMC5fjcQ_DWcsRbnT_lDAoFdkcM.roa (hash: A0aysdB2+Z1WaCKJ3yfflKSlHn0Wo7eICnmJ34jKbxA=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: TQi4I7OdGfz2oiYDzkiwWZWwyCIIwRABEtnP2pGg5+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:ed:ce:96:48:e5:48:ab:19:96:bc:a0:b9:1b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Oct 27 10:01:38 2026 GMT
Not After : Oct 28 10:01:38 2026 GMT
Subject: CN=e64b0c24eecb517c1dd71be2f0c7d1842b224712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:98:da:6d:10:4d:42:6b:aa:35:10:4f:91:
25:1a:87:45:0f:f4:ed:27:a6:74:34:cc:43:cc:a3:
3c:33:0b:1b:2f:8f:51:a8:a4:03:96:ef:db:8f:09:
6f:fe:74:2d:60:f7:4b:fc:75:f0:17:69:a2:a6:1f:
55:95:7f:ec:8d:2b:9d:30:a0:04:56:70:ea:5e:77:
00:5a:86:d7:e9:dd:00:dd:7a:f5:f1:af:63:c2:e8:
d5:94:2b:67:1c:2d:1a:0c:97:5a:17:90:6b:46:1d:
c7:fb:7d:be:80:59:ae:4e:66:c1:19:67:e0:c9:d4:
08:21:69:b4:7e:a6:58:23:30:e6:e9:d6:74:1a:b5:
56:eb:d0:dd:98:78:20:a8:e3:20:53:89:b8:b2:33:
a0:6e:6a:dd:0b:f7:9d:7d:72:4d:d0:06:8a:eb:89:
55:70:67:68:1b:ff:29:ea:ed:af:6e:90:c3:e4:36:
7c:6a:69:c8:17:54:cb:27:5e:0d:ed:49:04:23:20:
b8:c3:d4:b8:91:b5:5a:2a:69:fd:64:1e:09:89:b6:
49:22:ea:7e:d3:85:9f:a0:65:30:49:a3:6e:c7:60:
93:ff:b8:7f:56:48:37:05:58:49:07:2d:1d:d8:b7:
fc:d4:b4:4a:d6:49:2e:96:04:12:a7:33:99:ed:c1:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4B:0C:24:EE:CB:51:7C:1D:D7:1B:E2:F0:C7:D1:84:2B:22:47:12
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fe:1f:eb:c7:57:9b:ab:b3:a7:9d:77:18:78:1f:c1:2d:6e:
23:6a:f8:f1:6c:aa:47:90:e6:3a:0c:ed:36:48:32:2e:b0:ea:
ba:82:34:4f:61:6f:50:ab:9e:38:ad:8d:7f:6d:16:70:42:7d:
2c:fd:fc:b3:9b:1a:66:5b:2e:37:5d:ff:3b:15:59:6b:f4:a4:
6c:de:86:d8:eb:d9:f5:03:1b:6f:e6:ba:56:4b:91:d6:c6:74:
47:84:2d:b9:36:88:56:aa:16:2e:cd:05:68:56:ab:2d:2b:5b:
4d:e3:e8:0b:a1:32:31:99:39:55:e0:8b:b6:1d:2f:bc:06:c0:
fb:e2:28:71:d7:1b:19:c3:c5:a3:b4:bd:3f:3d:94:3f:7f:9d:
44:f8:00:d2:34:45:5e:6b:3e:4b:97:47:ca:ab:13:bf:5e:cd:
7d:4a:c5:57:a7:83:3c:31:50:74:89:d0:a9:2a:18:33:b4:9d:
a6:27:3a:0a:3e:0d:df:36:17:83:ab:ed:45:63:ca:a3:54:0f:
55:26:b2:d8:d6:01:11:99:31:8d:62:8a:f7:4d:14:1c:dd:f2:
62:11:55:55:54:a3:6c:64:19:ea:4e:40:06:75:0d:4b:78:26:
e2:c9:50:ed:da:67:2b:22:9e:75:c1:61:cb:fc:9c:65:c4:e4:
a5:94:2c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:15:32 2026 by rpki-client