Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json)
Hash identifier: fmabhTngeVTtP4MQ8mmqPkL5BPDI4qv52D7IjdkKLgk=
Subject key identifier: CA:DA:C0:EA:EB:F2:C4:53:96:51:54:97:AA:20:73:38:42:35:B9:42
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 01A17DE0D088F6DF33867ABC7DEE38316CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
Manifest number: 1AD0
Signing time: Tue 27 Oct 2026 15:00:47 +0000
Manifest this update: Tue 27 Oct 2026 15:00:47 +0000
Manifest next update: Wed 28 Oct 2026 15:00:47 +0000
Files and hashes: 1: 5ey037UD9ZyYntlcFPrPEvGuXaE.roa (hash: bBm6Afecvoirc2fsYnSFihOCiwl7vHE/59eznix//pI=)
2: OFptjkhuAwnfpoG-xdeEpSFSkSk.roa (hash: 6I2xymsY2TCct0aRUnTx8wlYXR4RX1DMF26nGce7+SI=)
3: RARY0MBtXzXjlSGHoFlRPn0hCiQ.roa (hash: ZrgOfCyXMwUf2+1ETktXAnh/PpEp/4OLHDdKnDuqBVM=)
4: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: FC1qkw2JORDUzrZW8KWcnH+B2JqFMalG4Wt3Klp+vSM=)
5: WeUArxTgJYE5pEvu8y3WAy8KECw.roa (hash: tVOg/TmoGx0sGC0wMVKhvr2pse+I41GeAtkpqDVblPU=)
6: YdySQzRwzr1x9j_7okaVtbW95io.roa (hash: F6lZddnRD5RuaNTuiMFziYuB8G6ouBIr6dnEC4YuELs=)
7: b8Oq_Ep9sqtIpwsplH5dCJ8wBZQ.roa (hash: yip/O7IDuP+Zo5hNsAUSiWY1IjYOk73/VabwL0sOW0w=)
8: iZ1VZ3dJo3aRzpfCl9n8rLd6jwY.roa (hash: fxhInoV7/31lfDcLsqNXI1yXIa8hAr1l9NosNoF8Wcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e0:d0:88:f6:df:33:86:7a:bc:7d:ee:38:31:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Oct 27 15:00:47 2026 GMT
Not After : Oct 28 15:00:47 2026 GMT
Subject: CN=cadac0eaebf2c45396515497aa2073384235b942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:78:ee:3a:fe:c3:66:3b:92:2b:35:3e:d3:
3a:11:8f:4e:0a:63:dd:b0:dc:0c:58:4d:0c:e7:34:
1d:21:66:89:13:9e:c4:01:27:07:08:ca:0d:5d:41:
b3:1a:dc:f0:12:81:96:86:85:f2:fd:f2:11:9c:81:
88:b3:d3:4a:91:41:aa:a1:f7:b3:3d:91:78:89:99:
c9:83:90:93:f3:d0:d8:91:d9:a4:c6:87:bb:c5:91:
85:e3:dd:8d:b4:71:7b:9e:7b:9d:7e:7b:c2:94:4d:
84:e4:e3:5b:3b:66:2e:19:dd:63:92:f2:54:d4:c8:
86:c4:07:15:9b:ce:99:33:ea:ac:af:b7:6c:9b:64:
8b:7f:55:11:1e:c2:ab:f4:90:b3:39:36:1a:36:2a:
aa:f2:90:39:db:df:dc:de:c2:fc:cc:d3:1a:98:2e:
44:18:0b:65:e7:2a:7d:f0:fb:50:39:83:7a:e3:be:
01:e5:05:c8:b1:ba:9a:b3:a9:fc:87:8a:94:7a:b2:
57:32:21:89:50:f4:48:99:f8:29:20:81:ff:16:37:
19:69:b6:50:5c:bd:68:5e:10:0e:aa:32:f5:d0:0d:
76:0a:2c:c2:c4:ab:d7:6c:cb:9b:4a:ff:85:69:65:
f5:a3:22:05:62:25:c8:13:c8:27:4d:42:e8:5e:c0:
b6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:C0:EA:EB:F2:C4:53:96:51:54:97:AA:20:73:38:42:35:B9:42
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cb:ef:bf:9c:8a:c1:b3:19:99:51:04:6a:57:6a:e5:59:26:
98:ed:8f:64:d2:9f:5a:97:ee:43:c3:da:1e:f7:e6:c1:0d:62:
50:ff:71:b8:66:fd:e6:61:f3:8d:13:8b:a5:fd:60:9c:a2:d1:
38:19:5e:94:53:5a:08:68:06:34:ca:9d:38:e6:5b:6a:63:7d:
05:98:80:8d:de:56:a4:9c:45:ef:93:9f:5c:6a:24:9d:3a:b9:
11:15:82:ed:0f:c5:c5:da:4f:fa:d5:34:7d:1e:7f:72:55:8d:
91:4b:bc:5a:e7:35:11:c3:33:b5:a2:3f:74:d3:4e:05:57:bb:
b7:c0:2a:7d:a4:3d:a3:8c:9d:71:66:c0:aa:e1:4f:1c:30:fa:
a2:3f:9f:af:3a:0a:3b:aa:71:2b:a5:ec:c6:ad:18:31:d5:44:
f4:db:ba:e3:c2:bb:d4:18:1c:f5:76:6a:c6:5d:07:00:e8:92:
e2:cf:cc:8c:93:7f:69:c0:63:8a:f6:3f:14:5e:07:0a:84:7c:
e3:5c:35:00:c9:68:c3:86:7c:67:ad:dd:f9:c2:37:73:d0:6e:
61:49:90:9c:64:ce:f9:99:77:ca:0d:d9:4a:3b:fb:d6:8e:fb:
1e:00:4a:1c:06:95:c0:e3:a5:e3:95:bf:d7:00:76:40:1e:33:
b5:5f:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:45:35 2026 by rpki-client