Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json)
Hash identifier: eRITOHFpVNV9slNVJwK0lePkREtfLTEyyHh4AuzroL8=
Subject key identifier: 22:C0:2C:44:46:CD:C9:2D:E0:4A:13:3D:F7:10:EB:81:B9:B6:1E:F4
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 01A08AF9E31CC84FC1A24A4ED7964FBF93C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
Manifest number: 1A4F
Signing time: Thu 10 Sep 2026 11:00:27 +0000
Manifest this update: Thu 10 Sep 2026 11:00:27 +0000
Manifest next update: Fri 11 Sep 2026 11:00:27 +0000
Files and hashes: 1: 5ey037UD9ZyYntlcFPrPEvGuXaE.roa (hash: bBm6Afecvoirc2fsYnSFihOCiwl7vHE/59eznix//pI=)
2: OFptjkhuAwnfpoG-xdeEpSFSkSk.roa (hash: 6I2xymsY2TCct0aRUnTx8wlYXR4RX1DMF26nGce7+SI=)
3: RARY0MBtXzXjlSGHoFlRPn0hCiQ.roa (hash: ZrgOfCyXMwUf2+1ETktXAnh/PpEp/4OLHDdKnDuqBVM=)
4: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: dfCMKcg/xNWCDFZSEO3wTGqp1/K4Fo+QZyeqfAmNHWI=)
5: WeUArxTgJYE5pEvu8y3WAy8KECw.roa (hash: tVOg/TmoGx0sGC0wMVKhvr2pse+I41GeAtkpqDVblPU=)
6: YdySQzRwzr1x9j_7okaVtbW95io.roa (hash: F6lZddnRD5RuaNTuiMFziYuB8G6ouBIr6dnEC4YuELs=)
7: b8Oq_Ep9sqtIpwsplH5dCJ8wBZQ.roa (hash: yip/O7IDuP+Zo5hNsAUSiWY1IjYOk73/VabwL0sOW0w=)
8: wgdfAkaNvBR-uQC-IHQic08CysM.roa (hash: Vy405aDprfo7kbIXKA3M0G30Bc5FdKZ0ssGRoDwVjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:e3:1c:c8:4f:c1:a2:4a:4e:d7:96:4f:bf:93:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Sep 10 11:00:27 2026 GMT
Not After : Sep 11 11:00:27 2026 GMT
Subject: CN=22c02c4446cdc92de04a133df710eb81b9b61ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:23:1f:b6:00:7d:05:05:b2:13:47:f7:26:
57:21:06:e0:fb:42:4c:af:36:09:d3:de:87:20:66:
15:07:4d:25:0f:ab:38:bb:4f:93:0c:68:3b:78:96:
13:d7:04:15:38:f9:36:18:b6:6b:c6:3a:89:3c:a8:
92:56:a8:d6:65:89:1a:4d:c8:2e:10:a5:48:f8:10:
cb:f1:8b:09:09:b5:29:11:2b:d7:0b:d1:51:f3:8d:
c5:06:8c:27:e5:b3:05:5c:a0:bd:92:71:3b:f1:dc:
b7:dc:6b:b1:78:0f:a8:26:d4:4e:a1:31:59:e5:c6:
7b:89:ac:df:40:98:1d:5c:45:98:0c:69:85:e0:d1:
db:9e:09:83:d6:a0:5b:0d:e4:2f:2b:52:a1:e9:97:
5f:b9:93:98:93:aa:42:43:1d:f5:8e:b8:ca:4e:22:
cd:c5:7a:b4:c0:91:ef:4e:90:86:34:87:03:52:5f:
72:56:08:b4:55:b9:91:57:b4:23:dd:91:fa:a1:09:
74:c9:16:95:1e:de:bc:a3:1e:d7:2c:9c:26:78:69:
99:7d:58:84:b5:29:45:d6:93:e3:46:33:fd:cb:e9:
a7:1f:4a:5b:54:a3:64:9d:3d:3f:c6:47:65:ce:d3:
d2:18:0a:c6:23:bd:81:55:ef:74:b7:0a:e6:2b:c4:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C0:2C:44:46:CD:C9:2D:E0:4A:13:3D:F7:10:EB:81:B9:B6:1E:F4
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:d6:f7:46:96:4f:42:b9:53:13:03:bc:3b:58:88:33:34:
da:f6:d0:a4:3a:49:e9:7b:fc:cd:34:4b:84:13:d2:a1:dd:2d:
36:26:65:8c:54:d7:33:b9:cc:0c:a6:20:71:bc:c5:57:54:cc:
76:ea:7b:fb:83:7a:8b:15:16:51:73:ba:6a:d5:a3:f0:34:0b:
d3:37:cf:d3:61:cd:1c:10:d2:b1:87:5b:06:c1:b0:57:2b:4a:
fc:98:8f:e1:98:24:51:a8:f6:7c:8b:3b:39:91:87:26:eb:b6:
af:36:aa:e5:ad:79:6f:5f:98:b8:4f:6a:46:6e:dc:5b:ba:f2:
37:19:18:69:67:7b:28:8b:66:55:8c:25:41:39:34:0d:98:39:
6a:b5:c0:fe:2d:2d:e8:5e:dc:bb:ba:bd:61:9c:cd:aa:36:5d:
af:23:e0:33:4d:e5:d4:32:11:13:ff:01:42:da:a5:2e:c2:d2:
8f:05:dc:d1:6c:69:d2:44:97:b5:c9:af:67:0a:f2:73:c2:22:
ae:c4:82:0d:58:1e:31:e6:b1:de:73:f2:15:72:91:a8:9c:da:
b8:63:4a:84:43:99:72:b9:3a:65:c1:ec:c7:6a:87:ed:ef:51:
f0:59:d8:68:61:2c:19:c0:18:8c:b3:ca:89:72:90:0b:07:78:
96:bf:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:09:58 2026 by rpki-client