Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: gNlbw0GNX9O0WuZs/uY6i05QSciAxWMgPCINY0OrcJ8=
Subject key identifier: 24:A2:F0:8F:07:F3:3A:5A:C9:6A:6B:51:DC:B8:F6:3C:1A:4C:79:11
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 01A10513426DA7250CCD9929DE7C31C5E2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 04:01:50 +0000
Manifest this update: Sun 04 Oct 2026 04:01:50 +0000
Manifest next update: Mon 05 Oct 2026 04:01:50 +0000
Files and hashes: 1: 8RsHlBc8_9duE_Lf5DgC64M1etk.roa (hash: DF5FyMDKMXu+fonfG+Ti+G0ljFoqfX8DD1a5FiSZO0E=)
2: S84INADK9hbzUCAynI1288S4OaU.crl (hash: J8ouh0g17otrCVfVpv893JING9kdiqiyuuSiLPzc9Iw=)
3: rCfZiz4VYjIBfKu68sLkrutitjY.asa (hash: Ybi387bthNpyIWhQISnJAR9yyGDzSsTDc5P3pmLLByQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:13:42:6d:a7:25:0c:cd:99:29:de:7c:31:c5:e2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Oct 4 04:01:50 2026 GMT
Not After : Oct 5 04:01:50 2026 GMT
Subject: CN=24a2f08f07f33a5ac96a6b51dcb8f63c1a4c7911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1c:4c:02:b1:51:46:5f:f7:e8:eb:4f:16:5c:
8d:a5:b7:c6:b4:7f:c1:4a:83:2a:4c:b6:75:9a:7d:
48:4a:16:8b:46:bd:fa:ce:af:ba:56:0c:ef:59:d4:
04:77:56:eb:45:29:3c:e8:39:6e:03:52:24:e3:de:
fb:38:cd:1f:16:6f:3e:e4:f6:a4:ac:57:05:87:9c:
69:68:c9:de:5b:b4:2b:25:c6:57:3a:8b:33:3b:6f:
9b:f3:9e:df:9d:88:c4:a7:3e:de:ea:3c:af:9d:fb:
4f:9f:5c:1e:17:00:80:68:60:a0:04:b8:8c:56:19:
fc:d4:d8:93:66:b9:f3:76:46:60:54:ec:f2:4a:34:
d9:93:5d:ef:f4:ad:2c:08:e9:fc:76:bc:68:fd:a5:
88:e6:45:4a:e6:e3:de:dd:30:05:31:7d:71:36:49:
f6:23:5c:9c:07:11:3b:f6:ad:ba:d1:c5:22:b6:4a:
73:d8:e2:bd:78:f1:0d:88:30:4c:7b:4e:cb:58:74:
5a:c9:cc:55:6e:56:37:6a:82:77:f3:21:09:58:fb:
04:1f:b5:5f:51:8e:ff:ce:46:e8:a8:5d:65:7b:1f:
bd:7c:65:46:41:b8:d2:5b:cf:93:2c:f3:56:c2:49:
e3:e7:ad:f7:f3:b3:a2:0f:9b:53:bf:e2:7c:23:c1:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A2:F0:8F:07:F3:3A:5A:C9:6A:6B:51:DC:B8:F6:3C:1A:4C:79:11
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5d:7e:6c:c3:72:ef:8a:82:ed:41:65:8f:e6:e7:86:be:94:
af:d4:7b:d0:7f:fe:5c:62:7c:d9:da:32:56:0f:7c:ad:df:55:
e6:53:0d:1e:40:04:ab:d5:db:12:79:01:7d:3d:20:b1:48:7b:
18:b1:03:5d:ee:58:68:22:bc:75:da:99:ff:e8:00:36:56:de:
21:f6:3e:89:f2:6b:45:45:52:8c:2b:78:b0:c6:76:7c:09:b6:
28:ca:2a:18:04:b0:db:2f:32:26:3b:bc:5e:04:13:7d:56:60:
1e:41:e8:35:6f:81:d3:fe:ec:f6:95:e8:39:e9:ae:c2:33:bb:
db:97:39:02:c4:4d:f4:38:e3:43:2e:77:ec:6d:0e:88:2e:7d:
e4:e7:29:01:b1:c7:a8:79:31:20:5e:cc:ab:79:eb:76:f4:01:
f3:2a:53:c1:7c:b6:b4:2b:1b:b7:7b:c0:14:8f:fb:bd:61:69:
da:e0:d9:65:6b:cb:6e:09:c3:7c:6b:f5:63:90:da:0a:73:a9:
e4:08:d7:64:90:22:e7:29:59:7b:73:21:32:2b:95:d9:6c:2b:
5c:d6:73:a4:e6:db:c4:36:07:42:ed:55:4f:ed:06:da:76:3f:
84:4b:5d:b8:2b:9e:3d:06:b9:d2:cf:e4:a8:da:47:80:0e:23:
21:52:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:25 2026 by rpki-client