Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: KbO9GO/N9Qf4Fu72I4xZOpO938s7QnmDk1DWIqiay2w=
Subject key identifier: D8:64:7B:2F:7E:DF:5E:A6:2D:EF:40:3E:85:88:F4:AB:8C:48:D2:5D
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 01A0EBF9C2D77CA0B5C09BEAEBF0313CEFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 07:03:29 +0000
Manifest this update: Tue 29 Sep 2026 07:03:29 +0000
Manifest next update: Wed 30 Sep 2026 07:03:29 +0000
Files and hashes: 1: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (hash: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E=)
2: S84INADK9hbzUCAynI1288S4OaU.crl (hash: cPFbkRdgLQ2JkqBndZoqWvSXU0h2PHC4aBYt11NRki0=)
3: rCfZiz4VYjIBfKu68sLkrutitjY.asa (hash: Ybi387bthNpyIWhQISnJAR9yyGDzSsTDc5P3pmLLByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:c2:d7:7c:a0:b5:c0:9b:ea:eb:f0:31:3c:ef:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Sep 29 07:03:29 2026 GMT
Not After : Sep 30 07:03:29 2026 GMT
Subject: CN=d8647b2f7edf5ea62def403e8588f4ab8c48d25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:81:ae:8e:c8:0f:40:03:88:66:2f:55:c2:
0d:44:7a:82:76:54:26:14:43:6f:3b:d3:aa:e3:ca:
95:86:04:34:8b:0f:a4:fa:db:1d:d5:0f:d2:19:98:
4b:2b:09:a0:db:c6:7d:4f:37:61:90:a9:20:2c:6b:
a4:e4:59:c5:86:ee:c1:15:e6:f3:89:ce:1d:23:b4:
f1:89:dc:ac:ac:55:d5:c2:62:f0:11:30:98:ba:4f:
0b:d9:fe:1b:fa:62:d1:55:41:1c:29:26:f6:a1:b1:
ca:2f:be:6d:b6:8c:a3:cc:17:32:29:4e:d8:91:d6:
6d:37:51:ff:d0:ad:9e:f3:17:0c:5b:61:c4:0c:d5:
8b:b6:00:04:af:46:03:87:bd:9f:18:14:c7:30:53:
01:43:8d:c1:1b:24:9c:f6:cd:c2:7b:96:2b:56:09:
ec:25:71:fa:45:30:08:89:bf:f3:6b:f2:e6:1f:72:
3a:49:48:8c:cd:83:b5:af:9c:94:12:48:c6:b0:0d:
57:05:16:a3:3e:a2:e0:f8:43:c3:c7:0c:f0:6e:19:
2e:2f:84:9f:7c:36:57:23:8d:20:b4:bf:55:61:d2:
9f:55:15:16:ae:e6:b7:85:a5:b1:a4:dd:bb:4d:69:
66:51:47:4f:cc:54:ef:4e:0d:a6:92:d1:48:3c:2b:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:64:7B:2F:7E:DF:5E:A6:2D:EF:40:3E:85:88:F4:AB:8C:48:D2:5D
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:68:66:aa:38:1a:dd:c7:0b:6e:49:fa:ac:97:fd:96:2c:d9:
fa:b3:cb:47:c0:96:f1:05:e0:49:69:8c:01:da:14:cc:5a:4a:
63:b1:35:61:34:30:de:24:db:ae:f0:e3:a6:9c:5a:e3:ad:ec:
b9:8d:bd:a0:3a:2f:f1:82:f9:1f:3a:de:8f:15:cf:25:5e:5e:
2d:1b:f9:3f:27:c2:35:03:94:18:3e:ea:57:7f:d4:ea:32:fe:
58:9a:5c:60:cd:db:54:79:14:6d:7a:1b:37:b1:81:73:da:af:
cd:47:bd:f5:5c:3a:70:fb:12:4b:83:e0:2c:f1:6e:ad:a0:2e:
89:2a:8a:fb:6b:81:43:3f:13:3f:76:77:b6:38:c0:ba:30:7e:
5c:a8:42:53:ca:08:5a:f0:05:0f:19:cf:4b:be:e0:b7:df:76:
2d:21:85:20:e3:76:b6:f2:f3:6b:e9:f8:28:2d:b0:f0:c7:83:
d4:b9:2e:99:52:0c:e9:74:e6:0a:c1:7d:d9:62:5e:5b:f9:78:
dc:30:66:b1:6f:30:7f:2c:3d:42:5a:99:b8:75:0e:d0:5e:b1:
bd:58:36:ae:0d:f5:63:43:44:ed:2a:38:c5:1c:03:cd:9f:fe:
16:a7:98:1f:1e:05:ff:5c:17:44:f6:27:16:e8:d2:45:89:0a:
bb:17:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:28:24 2026 by rpki-client