Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: 3zmak46qIDh9d3KTCqOInStUhKtYvNqPI0JJgni9uso=
Subject key identifier: 86:86:3D:8B:25:F6:35:35:36:80:B3:E9:82:5E:F1:53:F4:8A:CA:1D
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 019FA787469D5F0F18DB0DE4904396B680DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 18B1
Signing time: Tue 28 Jul 2026 07:01:28 +0000
Manifest this update: Tue 28 Jul 2026 07:01:28 +0000
Manifest next update: Wed 29 Jul 2026 07:01:28 +0000
Files and hashes: 1: A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa (hash: 9eSIPzP882gnq+toY+f9OquYBfy9B8LbOEOMMknDFO4=)
2: ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa (hash: judBBvzLbMYur3XpExAgR3vsTfmpZxb1unhrGpyJGfs=)
3: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: ipOd5SM1z0T/aUIuCe1cyed1Vb4IPf6kdgv9+4+E2bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:87:46:9d:5f:0f:18:db:0d:e4:90:43:96:b6:80:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Jul 28 07:01:28 2026 GMT
Not After : Jul 29 07:01:28 2026 GMT
Subject: CN=86863d8b25f635353680b3e9825ef153f48aca1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:32:d8:94:35:0e:52:f8:4b:73:00:fe:7d:
32:a6:8e:de:1d:13:02:25:48:0c:a8:27:e0:e0:dc:
08:6c:64:b4:a7:4d:95:ce:01:1a:17:49:b1:a2:86:
87:c5:4f:63:f3:7e:e1:2a:35:21:2f:94:48:52:92:
4c:16:f7:d7:4a:09:7b:d9:33:cf:56:f1:0c:db:96:
ff:db:4d:ad:7c:30:da:bc:6f:9e:47:42:e5:1c:6d:
ea:00:fa:c1:cf:0c:75:f1:17:6a:2f:4a:63:ce:45:
cd:7c:2a:4e:16:34:d4:d2:f0:58:84:8c:96:f2:6b:
7c:6d:f5:2a:fc:2f:86:84:48:2f:52:79:05:ce:56:
0c:1d:bb:c7:0c:d1:db:f9:05:64:fb:23:ba:47:1e:
ef:3f:fd:fd:23:1e:4a:f8:02:94:63:47:fe:b4:c4:
b0:b8:6a:2e:af:4d:c0:2c:d2:36:07:23:ab:e2:a6:
ce:8b:60:09:4d:db:3b:00:bb:1e:cc:01:8e:9d:f4:
31:99:1c:34:1b:04:f4:a4:52:7a:30:18:ed:5a:f4:
84:e4:29:e0:46:24:c8:b4:39:20:d9:b5:df:4d:9b:
8f:66:59:26:fe:d1:21:9d:d0:a6:2d:33:89:5c:a5:
e4:da:73:6a:a8:a4:b9:16:f8:37:8e:de:e7:6e:bc:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:86:3D:8B:25:F6:35:35:36:80:B3:E9:82:5E:F1:53:F4:8A:CA:1D
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:80:a0:c5:a9:8f:47:83:00:63:4b:5f:75:d4:05:a9:90:25:
01:2f:b1:9b:5a:4e:8d:49:5f:fa:a0:67:7e:f4:3e:95:aa:5a:
5f:e9:a6:d6:c9:19:8f:99:a9:a6:ec:d9:49:83:29:9d:4b:5d:
97:54:a8:30:9a:53:97:53:7a:bd:82:b4:ea:f7:ea:a5:1b:0b:
2f:4e:43:aa:56:d7:13:36:3c:09:3b:57:3a:9a:c2:32:f8:31:
75:bf:a8:92:d7:e4:ca:b3:48:c9:dc:ed:16:f1:9d:38:99:9e:
b0:15:ec:ed:0e:4f:f6:e2:0a:c9:4f:46:46:3e:7e:8d:07:73:
b4:ac:a1:8d:80:2d:7c:c7:13:23:b3:e7:f5:13:eb:94:29:74:
3f:d4:b2:ed:41:44:bd:2b:1d:9d:83:68:d8:92:61:48:66:15:
e4:57:0f:f5:e3:2f:e7:77:82:6b:44:48:8e:a0:33:57:94:cb:
c1:c2:c8:60:65:05:3e:d7:f6:0e:62:49:9f:53:31:82:d2:c5:
7d:70:7a:e2:84:c5:72:2e:62:f4:7d:56:5d:13:76:34:52:07:
71:36:a0:ea:ab:2f:97:da:d8:2c:f6:56:88:b8:94:06:97:d7:
d7:55:52:0c:c7:d6:23:07:66:1d:cf:09:f1:74:a2:58:58:21:
78:f6:a2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 08:37:29 2026 by rpki-client