Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: ASZUfcYVSxtCvo9iONIBjkOKCreYr0FhgVaRsmlT/us=
Subject key identifier: FC:9F:C9:F7:88:9C:17:18:6C:CF:2D:59:34:9A:C2:DF:49:2A:30:46
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 01A08B318E5EB4D5D5988A175F4CB4AC14A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 12:01:15 +0000
Manifest this update: Thu 10 Sep 2026 12:01:15 +0000
Manifest next update: Fri 11 Sep 2026 12:01:15 +0000
Files and hashes: 1: AmojMy3O0TzhYdnqQ_foiNeMfu0.roa (hash: NeSi6ZBMXloVln9cQN9LXVSt3sMQcF7jHdMdqk0HF3M=)
2: QxwdEpVgo81_-mwIpi91_VPBVXk.roa (hash: W+b58r8ZTGE9pnt5zsRnperhoba0alTWik9Mki5Rn8o=)
3: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: glAXpH5wsuPoNAu9fjkirTPrvDJSVQinuv9l9Cx3sFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:8e:5e:b4:d5:d5:98:8a:17:5f:4c:b4:ac:14:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Sep 10 12:01:15 2026 GMT
Not After : Sep 11 12:01:15 2026 GMT
Subject: CN=fc9fc9f7889c17186ccf2d59349ac2df492a3046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:d4:f0:62:e7:60:be:62:f0:ad:d2:92:85:
a0:6f:59:a1:3b:1b:92:df:c4:e0:9e:3f:98:f5:9b:
61:0a:bf:26:4a:de:6a:93:08:11:8d:a1:d1:73:50:
dc:30:67:76:8f:ab:80:f6:24:60:4f:70:92:60:38:
4c:28:8a:89:a6:a9:2c:91:f5:66:b0:0f:37:a5:46:
28:40:65:54:5a:2b:e4:50:50:4b:1d:01:84:2a:eb:
8f:ef:f1:9d:f6:46:6c:94:c1:e4:c3:8d:51:6c:f6:
9c:33:2e:5c:f8:7a:dd:b8:ae:6e:b7:d0:73:c0:d4:
80:91:63:af:dd:3d:66:72:de:64:99:14:88:b8:66:
4a:45:6b:0b:f4:5a:84:c6:0b:56:f8:15:31:f0:b7:
75:d8:c8:a1:a8:1c:0e:aa:60:17:b9:1f:24:ed:e1:
81:ad:ca:33:ad:c4:39:bd:82:d0:2b:3a:33:43:ed:
e3:9e:34:d1:16:f5:5a:01:7c:d2:77:5b:0c:ef:0e:
e0:61:bd:b2:54:7f:e1:c0:a3:11:38:cf:14:92:02:
61:5d:64:95:9d:80:0c:20:0b:53:73:1e:75:9f:8e:
02:9b:87:c1:5e:17:fe:d5:ea:5e:5b:26:75:44:96:
94:6d:9c:f9:e1:f6:e2:c0:f1:3f:85:04:70:fa:28:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9F:C9:F7:88:9C:17:18:6C:CF:2D:59:34:9A:C2:DF:49:2A:30:46
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:db:05:6d:f9:d7:9d:a3:13:8e:bb:6b:1d:16:67:ce:d0:26:
e2:53:8f:95:e3:58:1c:4f:92:32:5e:f2:53:fa:f7:09:d2:6d:
07:46:c6:6e:03:dc:ab:08:b6:b3:c7:ed:ca:99:0f:bf:5b:9f:
50:9e:d7:63:d9:6e:07:13:3b:e5:6c:cd:95:d0:95:58:e4:b2:
be:0d:3e:3f:65:f9:e7:1b:53:e8:56:78:ea:98:7f:43:4a:bf:
6c:de:55:c1:b7:ed:71:5f:34:a3:19:ed:9d:c8:a6:31:3e:c8:
7b:11:7c:3c:59:df:3f:bf:90:6f:3d:a3:5f:53:29:8c:7e:b2:
76:95:9c:42:48:99:b4:61:81:01:2c:03:bb:1c:85:8d:b2:6f:
0e:b9:34:c3:a6:98:12:16:21:53:f8:8e:87:a9:de:eb:05:a9:
ed:f6:3f:f5:57:27:89:92:39:bb:3a:fb:7f:fd:35:22:93:4f:
1f:69:0a:9f:5d:e8:29:84:80:4d:62:40:70:40:8e:6e:71:4e:
35:65:8e:dc:8e:ea:74:11:2b:70:de:4f:7b:3b:2b:65:c5:bd:
d3:48:a0:4c:6c:38:f4:82:5e:7f:1b:93:f5:de:14:63:a0:8c:
f6:76:00:67:ee:37:97:ca:88:45:ba:7b:cd:01:99:7d:88:96:
26:f3:a9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:43:17 2026 by rpki-client