Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
File: S0g59fGdvV8HCyEzK1HblgDs_x4.mft (raw, json)
Hash identifier: FiQNmSt0NMrZJL6SquOW5/DWrFW1YnJ0aw0vXQsgdoY=
Subject key identifier: 4C:92:84:E1:A9:AA:F3:41:98:A2:6C:3A:39:31:53:3E:9D:65:CF:98
Authority key identifier: 4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
Certificate issuer: /CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Certificate serial: 01A145E0587E2F766BC48E6147C99C19E21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
Manifest number: 0122
Signing time: Fri 16 Oct 2026 18:01:32 +0000
Manifest this update: Fri 16 Oct 2026 18:01:32 +0000
Manifest next update: Sat 17 Oct 2026 18:01:32 +0000
Files and hashes: 1: 03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa (hash: VqgoLuy2vs3Aqndad7HT8djT9h+8QRfwiwp+Z6UCQlM=)
2: S0g59fGdvV8HCyEzK1HblgDs_x4.crl (hash: Z3c3FdPKEyQZC8XpYvXWthnNVJ9MI7WDJdhzPhxwpEM=)
3: ZFi-VF-nsRadbtFze21Z8_HjAMk.roa (hash: Yk/ofossI179okCkrA1xAfMSkH76UYS/s2OiRTVcCg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:e0:58:7e:2f:76:6b:c4:8e:61:47:c9:9c:19:e2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Validity
Not Before: Oct 16 18:01:32 2026 GMT
Not After : Oct 17 18:01:32 2026 GMT
Subject: CN=4c9284e1a9aaf34198a26c3a3931533e9d65cf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:aa:8d:02:c5:02:62:40:ed:e9:c3:d4:12:
aa:75:90:75:73:dc:c0:ee:06:5f:e4:24:bf:de:95:
07:72:b5:61:a3:63:be:b0:24:c6:0e:cf:55:bd:3a:
19:34:b2:74:09:dd:63:71:b4:00:fc:9f:e5:7a:68:
e6:30:bd:d6:89:66:e2:f9:4b:ff:ff:51:13:70:5c:
4d:50:d4:5e:9a:21:0d:fe:b0:75:88:b5:48:57:5f:
c7:8f:34:79:df:ea:51:53:f1:7b:bf:22:b3:a8:23:
71:08:2a:0e:31:30:6f:cf:d8:e9:c8:06:76:c9:7f:
fb:ea:8e:c7:75:64:e4:53:8f:5b:ae:b5:7e:e2:38:
40:de:ab:25:e6:78:3a:86:97:69:ed:e8:fe:ec:14:
10:04:79:bd:ba:c7:99:14:9a:54:2f:dd:e6:d2:08:
ac:73:12:d5:f1:00:c7:f1:fc:7e:31:8a:30:43:b0:
99:1b:18:30:4f:76:25:f8:82:ac:06:d0:b8:e9:1f:
8e:75:89:5f:8d:c9:24:85:dd:f4:69:6a:57:9c:b8:
8e:90:0d:4f:0a:91:e0:5f:5c:83:8c:fc:21:0f:66:
b4:a7:95:e6:9f:30:79:23:72:fb:19:dc:d2:27:c5:
b0:cb:ea:d5:7d:76:14:5a:91:35:fa:35:83:ef:56:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:92:84:E1:A9:AA:F3:41:98:A2:6C:3A:39:31:53:3E:9D:65:CF:98
X509v3 Authority Key Identifier:
keyid:4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:05:25:9b:ed:ef:68:0c:96:a9:4e:09:10:09:91:64:f3:50:
73:e9:8d:47:45:e8:87:bd:da:65:35:0a:d5:57:66:7b:f7:00:
7d:fc:37:9e:9d:b9:f7:e5:a0:0f:09:9a:77:85:1e:72:c0:1b:
aa:60:45:5d:c5:93:1e:eb:f7:5c:7f:e4:80:2c:0f:8d:7e:f9:
2f:5d:27:c8:03:ba:75:ad:7a:cf:c6:2b:29:b7:73:bb:25:de:
6f:8e:e4:45:7d:a5:35:9b:56:0d:be:cb:13:78:e0:ed:36:57:
47:eb:4c:51:4f:92:d1:63:87:59:d7:99:41:8e:34:f1:d9:4f:
76:3e:66:cc:b6:7e:98:ad:d7:1f:43:ed:93:9a:bf:ee:e4:c1:
22:21:a0:29:51:24:30:8d:8b:2a:77:95:77:86:c3:f5:e3:b9:
9c:fa:87:30:49:d3:ed:3f:f1:bb:07:c4:54:fe:ec:a0:f4:ff:
97:04:29:58:e5:b2:51:13:f3:7f:2e:0f:93:9c:ff:55:62:f2:
25:d9:1a:b8:f1:70:c3:e2:5f:48:22:cb:49:32:26:38:4b:45:
f0:d4:f2:2b:10:b9:33:16:d2:42:91:0d:29:ea:f1:ee:74:c8:
61:c5:9d:7f:50:c6:38:e1:ce:3d:49:67:0a:ad:d8:c9:68:22:
b9:43:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:50:19 2026 by rpki-client