Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File: S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier: iATXH7SspVHKHqzYNx4CL0KyFwModEftWtIqba7Jqdw=
Subject key identifier: D8:FD:BD:78:2F:29:9D:BB:21:FD:FB:FD:4E:77:0A:06:CC:C9:9B:ED
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer: /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial: 01A0E852EFA13C7D85BCCB8DCABA3FD4E7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number: 0E1C
Signing time: Mon 28 Sep 2026 14:02:24 +0000
Manifest this update: Mon 28 Sep 2026 14:02:24 +0000
Manifest next update: Tue 29 Sep 2026 14:02:24 +0000
Files and hashes: 1: 3RKPC7OoCU6c5LmejYY-G_3_1G8.asa (hash: qh8DrXyDdtSiioYm6A0nGUFjKi214Icbt8p40Quuiek=)
2: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: WrWsVJfdO+Ho5X3Q7R4rtd7dbB0WapzmdvGyj9YrJJA=)
3: td_kUxw0-UhEBANN8l4IviQmVwM.asa (hash: udAkO9zwZL0tthPD/jB+pQZcIui5OWyPZIrEiXx8DsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:52:ef:a1:3c:7d:85:bc:cb:8d:ca:ba:3f:d4:e7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Validity
Not Before: Sep 28 14:02:24 2026 GMT
Not After : Sep 29 14:02:24 2026 GMT
Subject: CN=d8fdbd782f299dbb21fdfbfd4e770a06ccc99bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:35:fa:66:80:58:fc:42:b6:96:2c:a6:81:
40:43:f0:1a:e7:6a:a4:f5:30:02:13:3e:b7:43:76:
f1:b3:32:3d:29:1e:a2:14:b3:51:66:a6:a3:a4:6c:
10:f5:8f:2a:8f:3d:86:f9:86:f4:48:10:74:89:cd:
b8:8f:da:9f:1e:90:6e:78:9b:92:a4:22:0d:e5:b6:
d4:f1:b2:5f:64:99:74:32:fe:ba:df:3c:ab:62:94:
e4:af:74:29:f0:45:c0:e9:60:9c:c9:ec:0e:65:d5:
0d:15:4d:75:3a:a9:66:62:66:c8:d0:2e:76:6a:9a:
7d:ab:89:ff:ea:3e:29:da:70:f4:0b:d1:8a:dc:53:
06:2f:37:bb:ae:03:91:63:40:7b:44:2d:6f:c3:9a:
88:51:ee:b0:91:a3:f9:4f:04:4d:67:a3:0d:21:1f:
e6:88:bf:20:cd:ad:f8:94:28:17:7f:6b:b0:a0:d8:
2b:ae:38:8d:42:f2:0c:6e:96:ed:2d:60:de:2f:9b:
47:2b:03:7e:00:32:c1:dc:f4:57:62:de:0a:40:47:
56:a4:e2:07:7f:66:3b:1e:bd:f1:1e:4e:1e:24:7d:
a2:67:ea:ce:cb:47:07:18:b8:10:68:41:d1:fe:0e:
2e:19:03:58:8e:43:d3:c8:d2:44:19:e5:d3:e8:5d:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FD:BD:78:2F:29:9D:BB:21:FD:FB:FD:4E:77:0A:06:CC:C9:9B:ED
X509v3 Authority Key Identifier:
keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:38:17:ea:d8:09:a7:0c:e2:7d:49:29:7a:c2:5f:ab:95:22:
9b:55:df:e1:91:1c:3d:d3:05:b5:f2:03:ff:5c:94:a6:26:a9:
a0:a0:f3:bc:e8:ef:8e:00:84:54:ec:48:40:ba:b5:c4:ae:85:
51:57:4b:5e:f6:80:a8:b2:bc:34:da:a2:2d:42:d3:d3:19:4b:
c5:01:07:46:b2:e8:3a:d5:a3:4a:93:74:b8:82:ba:a3:fa:ee:
dd:66:3c:d4:a2:7b:48:71:07:fc:b0:ca:a0:b0:02:a2:50:17:
61:c7:86:a3:84:9f:24:ed:13:52:b2:61:16:a4:cf:3f:2a:26:
b1:fc:f2:2b:2d:06:65:ab:3a:61:3c:84:44:44:db:75:b3:1e:
7c:13:c2:be:03:c7:97:84:06:e0:bd:b3:21:46:07:34:8e:b0:
a4:e9:9c:2f:05:b0:59:bf:4b:e9:f3:cf:5a:ae:f5:a9:75:0a:
01:ac:d6:72:bc:62:44:ad:dd:82:31:e0:b2:ed:a2:36:34:2c:
da:a9:3c:98:f3:70:26:30:7a:4b:ba:48:24:02:f9:e9:25:1e:
d5:2d:d3:21:e5:9e:4d:85:41:d1:fe:08:c9:81:20:2d:7b:bd:
c7:61:78:02:73:89:94:4a:40:cf:43:da:67:97:df:48:a3:5f:
cf:20:a6:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoUu+hPH2FvMuNyro/1OfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTRkMTBkYWFlM2M5MmRhN2QyZWU5NzNiNzQ4Y2IxZjk0
OTIyZTkwHhcNMjYwOTI4MTQwMjI0WhcNMjYwOTI5MTQwMjI0WjAzMTEwLwYDVQQD
EyhkOGZkYmQ3ODJmMjk5ZGJiMjFmZGZiZmQ0ZTc3MGEwNmNjYzk5YmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIE1+maAWPxCtpYspoFAQ/Aa52qk
9TACEz63Q3bxszI9KR6iFLNRZqajpGwQ9Y8qjz2G+Yb0SBB0ic24j9qfHpBueJuS
pCIN5bbU8bJfZJl0Mv663zyrYpTkr3Qp8EXA6WCcyewOZdUNFU11OqlmYmbI0C52
app9q4n/6j4p2nD0C9GK3FMGLze7rgORY0B7RC1vw5qIUe6wkaP5TwRNZ6MNIR/m
iL8gza34lCgXf2uwoNgrrjiNQvIMbpbtLWDeL5tHKwN+ADLB3PRXYt4KQEdWpOIH
f2Y7Hr3xHk4eJH2iZ+rOy0cHGLgQaEHR/g4uGQNYjkPTyNJEGeXT6F3QwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj9vXgvKZ27If37/U53CgbMyZvtMB8GA1UdIwQY
MBaAFEuk0Q2q48ktp9Lulzt0jLH5SSLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZUUkRhcmp5UzJuMHU2WE8zU01zZmxKSXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9hZDkwYTUtODk2YS00NTJlLWFjN2Qt
MDRjY2M4MGQxODc2LzEvUzZUUkRhcmp5UzJuMHU2WE8zU01zZmxKSXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9hZDkwYTUtODk2YS00NTJlLWFjN2QtMDRjY2M4MGQxODc2
LzEvUzZUUkRhcmp5UzJuMHU2WE8zU01zZmxKSXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDgX6tgJ
pwzifUkpesJfq5Uim1Xf4ZEcPdMFtfID/1yUpiapoKDzvOjvjgCEVOxIQLq1xK6F
UVdLXvaAqLK8NNqiLULT0xlLxQEHRrLoOtWjSpN0uIK6o/ru3WY81KJ7SHEH/LDK
oLAColAXYceGo4SfJO0TUrJhFqTPPyomsfzyKy0GZas6YTyERETbdbMefBPCvgPH
l4QG4L2zIUYHNI6wpOmcLwWwWb9L6fPPWq71qXUKAazWcrxiRK3dgjHgsu2iNjQs
2qk8mPNwJjB6S7pIJAL56SUe1S3TIeWeTYVB0f4IyYEgLXu9x2F4AnOJlEpAz0Pa
Z5ffSKNfzyCm+A==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:17 2026 by rpki-client