Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
File: S0g59fGdvV8HCyEzK1HblgDs_x4.mft (raw, json)
Hash identifier: ISruHj55MnDigWbpLZwoj0IzyJwQ/l8ZbKGEIyXPZZI=
Subject key identifier: 9E:F2:54:17:4C:7F:41:FE:A1:A7:CC:D5:B8:13:16:0E:D4:D6:8B:95
Authority key identifier: 4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
Certificate issuer: /CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Certificate serial: 01A05A443117F6FB715CB22CFCC10D317BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
Manifest number: A8
Signing time: Tue 01 Sep 2026 00:00:13 +0000
Manifest this update: Tue 01 Sep 2026 00:00:13 +0000
Manifest next update: Wed 02 Sep 2026 00:00:13 +0000
Files and hashes: 1: 03A6YBfJkmNjrLUvdDmy_7iV3Ko.roa (hash: VqgoLuy2vs3Aqndad7HT8djT9h+8QRfwiwp+Z6UCQlM=)
2: S0g59fGdvV8HCyEzK1HblgDs_x4.crl (hash: 495MX9rhKpcCVkD1hiiFCdiGvgeM6hHKjhkDOETuBqM=)
3: ZFi-VF-nsRadbtFze21Z8_HjAMk.roa (hash: Yk/ofossI179okCkrA1xAfMSkH76UYS/s2OiRTVcCg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:44:31:17:f6:fb:71:5c:b2:2c:fc:c1:0d:31:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4839f5f19dbd5f070b21332b51db9600ecff1e
Validity
Not Before: Sep 1 00:00:13 2026 GMT
Not After : Sep 2 00:00:13 2026 GMT
Subject: CN=9ef254174c7f41fea1a7ccd5b813160ed4d68b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:4d:c2:13:19:d7:72:87:6d:44:75:0c:7c:
52:d3:3c:93:3d:12:8d:46:59:ad:94:9c:94:11:0c:
39:b9:7f:39:be:0a:64:aa:20:9f:64:09:6e:b0:ba:
fe:b0:c7:17:0b:37:16:c0:5d:2e:78:92:0f:6a:dd:
f2:d7:45:df:73:66:fb:84:c7:ca:9f:98:d5:47:28:
70:ae:52:35:d2:0f:1c:20:8a:c7:75:3d:23:20:38:
62:12:a7:c0:48:cf:a1:85:e2:4c:23:42:77:d0:b2:
df:47:01:8d:0f:f5:a7:58:22:97:d1:7d:a2:6d:f4:
06:9b:6e:7c:39:02:77:db:62:ce:74:26:31:82:ee:
f9:f4:bd:a7:48:32:15:46:bf:d6:2d:ae:16:16:76:
ab:dd:14:c1:1b:97:06:20:73:0b:8e:26:de:16:4c:
9a:e9:b8:43:90:e9:73:0f:db:48:7c:a3:6a:c3:e6:
57:38:25:47:e7:b0:b4:d2:a0:80:72:5e:1d:bd:a7:
0f:d3:0d:74:d1:5b:19:2b:fc:8c:be:36:c6:af:74:
64:4b:ae:69:a7:80:d8:a6:8c:b9:52:9f:1b:93:3b:
6c:69:ea:c8:0c:76:bd:4e:cd:b0:7c:3b:cf:e9:30:
df:b0:ef:2d:e3:12:57:dc:a9:7c:d3:b6:b4:8b:5a:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:54:17:4C:7F:41:FE:A1:A7:CC:D5:B8:13:16:0E:D4:D6:8B:95
X509v3 Authority Key Identifier:
keyid:4B:48:39:F5:F1:9D:BD:5F:07:0B:21:33:2B:51:DB:96:00:EC:FF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0g59fGdvV8HCyEzK1HblgDs_x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/S0g59fGdvV8HCyEzK1HblgDs_x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8a:be:42:6b:1d:0c:4b:de:34:9d:32:f0:14:e8:cf:b3:4b:
80:8d:0c:50:d0:5b:a2:e4:b9:cb:bc:01:6c:bc:71:f4:f0:ae:
a5:c7:1f:cf:3a:f0:c4:2e:66:8d:f5:4c:44:01:15:37:77:8c:
3a:21:ec:5c:7a:dc:ba:96:0c:cf:c0:a1:c0:5d:21:3e:d4:41:
ae:31:64:71:83:22:c7:97:01:21:49:45:00:6a:75:70:5f:75:
7a:b3:95:24:92:a8:3b:5b:a8:12:ba:54:18:e7:f8:db:a1:46:
b5:05:ed:2f:a7:24:a0:6e:0d:63:71:c0:fd:55:25:0b:ff:e7:
62:9b:cb:81:56:60:5e:9f:96:6e:74:ec:0e:39:24:5e:0a:e7:
ec:50:86:90:c7:0a:ca:67:4a:0b:8e:76:b0:4c:6a:27:3d:01:
65:16:5b:e6:bd:a4:eb:64:ae:0d:cb:2d:c7:23:bb:25:f7:04:
dd:d0:23:c6:98:8d:4e:c9:d6:67:91:c2:b5:d3:9c:f9:27:3b:
62:4a:af:c0:2d:3e:5c:20:1a:55:9c:cb:df:81:3d:17:fa:3b:
8e:e5:c5:40:33:ca:4f:fc:94:79:51:c6:37:17:07:0d:1e:f5:
08:28:5c:84:49:a4:bd:a8:f8:8c:48:5d:63:5b:09:f1:13:85:
62:73:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:58:22 2026 by rpki-client