Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: RzI+K99YiI/X1qHah8ZD1mEpXOFDSPM9bNoQ4id4mWU=
Subject key identifier: CC:BA:CA:B6:3E:B3:16:A4:24:FF:90:E0:B7:61:72:90:F7:8B:E8:19
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 019EFBA85593260897AE435D200F41207375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 197B
Signing time: Wed 24 Jun 2026 22:02:53 +0000
Manifest this update: Wed 24 Jun 2026 22:02:53 +0000
Manifest next update: Thu 25 Jun 2026 22:02:53 +0000
Files and hashes: 1: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (hash: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E=)
2: S84INADK9hbzUCAynI1288S4OaU.crl (hash: vFdYGLRkvyOe2+L/YeyVLkog1FCcUU3ERdNkjTp+Sq4=)
3: rCfZiz4VYjIBfKu68sLkrutitjY.asa (hash: Ybi387bthNpyIWhQISnJAR9yyGDzSsTDc5P3pmLLByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 22:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:a8:55:93:26:08:97:ae:43:5d:20:0f:41:20:73:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Jun 24 22:02:53 2026 GMT
Not After : Jun 25 22:02:53 2026 GMT
Subject: CN=ccbacab63eb316a424ff90e0b7617290f78be819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:be:6d:0f:1f:74:66:16:cd:89:ad:61:d6:
b3:46:a5:94:ef:9f:db:d9:4b:5d:5a:1a:3f:88:51:
bb:82:0e:ed:00:19:8b:02:c8:bf:b1:e0:34:01:a1:
71:9c:c1:bd:3f:5b:ed:38:01:3b:3f:76:02:d9:e5:
ea:d3:9c:ff:70:d9:26:7a:aa:d2:dc:5b:f3:37:8a:
ae:64:22:03:bd:32:29:f7:0a:a4:e2:77:d2:c8:1b:
b0:67:88:de:99:b0:00:1d:c0:39:e0:41:9f:67:7f:
63:39:cc:47:26:bc:0a:cc:e6:2a:f4:3e:44:17:44:
4c:10:97:d6:21:df:5f:59:d8:8f:21:70:00:6b:95:
9a:09:28:2f:f4:88:fc:88:2c:1c:19:2e:67:34:0f:
16:9b:dc:1a:b5:51:d0:d7:36:45:f5:bc:08:bd:f7:
81:aa:19:48:16:f8:03:90:20:8d:0f:24:81:8e:58:
1a:64:c5:60:67:eb:d7:2b:bf:66:db:ce:3d:59:a1:
d1:09:bf:7f:c1:24:af:cf:0d:59:0c:07:83:1a:2e:
d6:ce:15:a5:b7:1b:fd:73:11:8d:c1:fe:73:bc:70:
ac:f0:05:62:9b:09:4f:a9:d2:b2:63:04:61:e8:0f:
c6:f6:7d:77:82:60:2d:8c:76:53:3e:18:42:c1:79:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:CA:B6:3E:B3:16:A4:24:FF:90:E0:B7:61:72:90:F7:8B:E8:19
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c2:ae:07:5f:18:53:38:6b:81:82:01:45:b2:7e:8a:99:37:
18:0d:aa:81:c9:0e:71:c5:5d:08:b0:61:e3:ee:6e:28:bc:1b:
0d:b6:cd:af:88:bf:9a:e3:fa:75:5f:a3:dd:10:61:5c:b3:a0:
d4:35:4c:6c:fe:8a:d2:dd:86:93:b2:05:1f:72:47:dd:69:4a:
d2:51:35:6e:37:75:b3:12:f1:33:40:d2:ff:05:f4:d5:80:4f:
aa:ca:81:ac:f1:9e:7e:d1:0d:ca:61:43:08:5f:9e:1a:62:85:
cf:9c:02:e6:32:3d:a6:52:cb:7d:a9:82:03:b0:78:cf:7a:18:
a1:28:75:38:b7:d5:a5:e5:44:f0:27:86:48:a2:c7:b1:e3:31:
ec:aa:a7:e5:cd:6c:c3:11:a6:32:fc:fa:d7:63:40:2f:f9:42:
2e:e0:40:eb:33:ac:e0:5a:e5:1d:7b:94:da:97:85:6a:b3:26:
d0:79:87:66:0d:40:b4:29:a2:cd:d6:87:6c:07:e4:15:46:d4:
00:02:7a:b0:11:65:a9:be:be:ca:35:0a:0d:fb:1f:6b:f2:9a:
3f:8d:b9:65:79:e2:58:65:ac:fd:ea:52:76:97:75:95:a3:43:
9f:91:73:88:5c:0a:f3:6c:5d:8f:06:ec:09:ba:13:89:02:6a:
2f:33:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:17 2026 by rpki-client