Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: Qc0RQvwxQVzU7S3TSz/zFFNNB18lHcKFV5WCMmOHTUI=
Subject key identifier: B0:DC:93:7D:32:8E:8C:72:6B:11:F3:FD:8F:F0:66:2A:B1:50:23:FE
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 019FF8A396BDB1A93261EBBCCE210E342E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 19FE
Signing time: Thu 13 Aug 2026 01:01:38 +0000
Manifest this update: Thu 13 Aug 2026 01:01:38 +0000
Manifest next update: Fri 14 Aug 2026 01:01:38 +0000
Files and hashes: 1: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (hash: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E=)
2: S84INADK9hbzUCAynI1288S4OaU.crl (hash: DvxJq01So0hKiT+O+wCRopabztzHPGru1R1PlwqyTSo=)
3: rCfZiz4VYjIBfKu68sLkrutitjY.asa (hash: Ybi387bthNpyIWhQISnJAR9yyGDzSsTDc5P3pmLLByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a3:96:bd:b1:a9:32:61:eb:bc:ce:21:0e:34:2e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Aug 13 01:01:38 2026 GMT
Not After : Aug 14 01:01:38 2026 GMT
Subject: CN=b0dc937d328e8c726b11f3fd8ff0662ab15023fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:96:b4:3b:65:69:c3:1c:46:20:0f:fd:50:
14:2f:75:f9:e5:a1:98:90:5c:59:c1:ca:ff:44:b5:
da:f3:48:06:e4:2a:3c:80:f7:b2:c1:fc:24:3b:f9:
dc:83:45:5b:31:78:e2:fe:5e:21:b1:a1:b4:48:9d:
c9:a5:2e:86:f5:a1:f0:9f:e1:fc:ae:59:67:c6:9d:
b3:72:79:ca:97:96:f9:2d:7b:5f:b7:50:fa:9d:61:
83:3a:f4:23:7f:b5:fb:6c:0b:03:b1:b4:ff:0e:5b:
f3:cb:91:ff:de:2d:25:c0:cc:02:73:9c:e9:ab:9f:
3e:d0:a3:e4:67:f1:85:f2:38:6d:ad:28:a1:5b:32:
a0:1d:42:23:6f:d4:48:11:ae:ed:0a:53:38:7c:54:
b4:6f:ad:87:9c:95:6f:c0:da:28:b1:79:60:e1:87:
3c:54:1c:45:7c:02:57:ac:7e:ba:1b:35:2f:cb:61:
16:c9:7f:fb:65:3c:13:cc:9e:e0:66:60:26:cf:4d:
76:dd:ba:b3:03:43:c8:34:63:23:90:19:44:c8:1f:
a0:bd:b0:91:39:32:0e:50:39:57:81:40:a1:14:6b:
05:7d:27:4b:77:9b:db:ee:0b:e6:6a:3e:1d:ce:ac:
eb:7a:fa:70:27:f5:35:23:1b:6e:11:0b:5e:55:91:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:93:7D:32:8E:8C:72:6B:11:F3:FD:8F:F0:66:2A:B1:50:23:FE
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9f:a1:9e:3c:c5:ce:37:9b:c7:db:5e:7f:45:fe:40:41:ab:
79:3e:96:e9:18:27:db:ab:5d:02:3a:ec:fb:ec:83:d2:38:a7:
45:87:2f:8d:a7:17:66:81:75:6f:7b:82:ec:00:7d:7c:e7:a0:
d5:8d:5b:f5:6a:0e:0a:af:a2:3f:a6:2d:c5:d4:4b:59:e6:33:
03:d6:f3:da:c7:16:b0:29:77:4b:c1:61:77:3d:9f:2d:b9:db:
19:af:ae:59:ee:db:1d:bc:7f:ed:e2:61:db:7c:32:4b:63:03:
fe:cf:6e:0d:50:22:1b:62:7d:ed:21:00:1d:f9:b7:59:a1:f5:
ac:75:b9:f7:79:96:2d:4c:79:ed:9c:e7:d1:d8:00:8a:b2:31:
f7:e0:0c:6b:03:98:78:d1:38:c7:42:35:7d:96:81:41:ff:44:
b0:f8:31:c3:ea:05:e6:91:da:97:a2:d9:c0:7a:4b:cd:2a:e8:
59:b4:5c:22:a4:73:56:73:3c:cc:4f:79:55:9f:ce:d4:77:6f:
2b:42:50:61:2e:63:eb:f7:c6:d5:c1:98:18:c4:b9:eb:07:b0:
21:80:ba:17:10:a4:f6:dc:0f:01:ae:0e:1f:d4:81:44:fe:31:
36:00:f8:c4:a6:ce:20:19:0b:75:35:14:83:98:26:d5:35:91:
52:95:cb:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4o5a9sakyYeu8ziEONC4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiY2UwODM0MDBjYWY2MTZmMzUwMjAzMjljOGQ3NmYzYzRi
ODM5YTUwHhcNMjYwODEzMDEwMTM4WhcNMjYwODE0MDEwMTM4WjAzMTEwLwYDVQQD
EyhiMGRjOTM3ZDMyOGU4YzcyNmIxMWYzZmQ4ZmYwNjYyYWIxNTAyM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmmWtDtlacMcRiAP/VAUL3X55aGY
kFxZwcr/RLXa80gG5Co8gPeywfwkO/ncg0VbMXji/l4hsaG0SJ3JpS6G9aHwn+H8
rllnxp2zcnnKl5b5LXtft1D6nWGDOvQjf7X7bAsDsbT/Dlvzy5H/3i0lwMwCc5zp
q58+0KPkZ/GF8jhtrSihWzKgHUIjb9RIEa7tClM4fFS0b62HnJVvwNoosXlg4Yc8
VBxFfAJXrH66GzUvy2EWyX/7ZTwTzJ7gZmAmz0123bqzA0PINGMjkBlEyB+gvbCR
OTIOUDlXgUChFGsFfSdLd5vb7gvmaj4dzqzrevpwJ/U1IxtuEQteVZHAwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDck30yjoxyaxHz/Y/wZiqxUCP+MB8GA1UdIwQY
MBaAFEvOCDQAyvYW81AgMpyNdvPEuDmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2Mt
ODBhN2ViYTZmOGU5LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2MtODBhN2ViYTZmOGU5
LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFp+hnjzF
zjebx9tef0X+QEGreT6W6Rgn26tdAjrs++yD0jinRYcvjacXZoF1b3uC7AB9fOeg
1Y1b9WoOCq+iP6YtxdRLWeYzA9bz2scWsCl3S8Fhdz2fLbnbGa+uWe7bHbx/7eJh
23wyS2MD/s9uDVAiG2J97SEAHfm3WaH1rHW593mWLUx57Zzn0dgAirIx9+AMawOY
eNE4x0I1fZaBQf9EsPgxw+oF5pHal6LZwHpLzSroWbRcIqRzVnM8zE95VZ/O1Hdv
K0JQYS5j6/fG1cGYGMS56wewIYC6FxCk9twPAa4OH9SBRP4xNgD4xKbOIBkLdTUU
g5gm1TWRUpXLjg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:59:17 2026 by rpki-client