Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File: S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier: YvQX/Ac8IhQt9GTiWJ6gHGcRe4KB6SeIZdmDRwIu808=
Subject key identifier: 60:8A:83:ED:8F:C0:B9:4B:DF:24:BC:4C:15:38:2A:0A:3D:3D:6B:B9
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer: /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial: 019F9F28265D6E7D7DCF24B7632A866B7D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number: 15FE
Signing time: Sun 26 Jul 2026 16:00:36 +0000
Manifest this update: Sun 26 Jul 2026 16:00:36 +0000
Manifest next update: Mon 27 Jul 2026 16:00:36 +0000
Files and hashes: 1: 4y1EBk6dbLscu7TuubVQpj3p-s8.roa (hash: TBvo1eP+imsTzppJhBpYDx8zDpINfxOs1/vehmwqpe0=)
2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: 9UBvVncsXegH7jiPz/hGgz71clFw/P4B30QrMcgx1vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:26:5d:6e:7d:7d:cf:24:b7:63:2a:86:6b:7d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Validity
Not Before: Jul 26 16:00:36 2026 GMT
Not After : Jul 27 16:00:36 2026 GMT
Subject: CN=608a83ed8fc0b94bdf24bc4c15382a0a3d3d6bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:8c:53:f2:1d:70:75:7d:ed:63:1e:0d:19:
57:63:59:ac:30:41:8e:66:e9:20:5e:26:ed:7e:a8:
37:ce:5c:0e:fc:15:77:ae:72:b2:70:0c:b7:cc:d2:
d0:3c:94:77:53:41:e7:b4:ef:10:3d:85:5d:62:88:
98:ed:aa:c7:68:db:10:0c:b2:cd:84:f7:b5:40:b3:
08:0d:1e:5e:fd:ce:c0:00:28:85:2f:43:a5:df:44:
e8:9a:d8:35:18:bd:5d:75:41:5a:8d:b1:d3:20:73:
6b:2f:ad:17:43:c7:8e:6e:95:35:d3:51:bf:a4:7c:
ee:2b:60:e7:7b:4c:6f:81:23:a0:74:9e:47:f9:1d:
98:a8:90:b4:8a:93:26:9b:a0:d9:e1:87:27:2a:89:
5f:8f:66:ab:08:94:25:9c:58:c6:51:cd:11:9b:84:
eb:2e:bf:f8:d5:37:6d:84:8d:1f:26:f5:27:e5:28:
db:ae:27:04:79:c2:d6:01:4c:c8:96:8c:02:6d:7c:
b5:28:4d:89:fe:a8:5e:76:89:42:7a:27:99:46:7a:
58:5d:1a:82:2b:21:3a:37:96:a4:68:c3:aa:85:77:
9c:21:ea:fb:a0:a2:7e:e3:19:c4:d2:ce:d8:63:7e:
70:29:bb:d8:e0:b8:38:91:ab:96:11:14:5f:df:c5:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8A:83:ED:8F:C0:B9:4B:DF:24:BC:4C:15:38:2A:0A:3D:3D:6B:B9
X509v3 Authority Key Identifier:
keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a0:fa:4f:db:89:30:b8:c6:2a:e3:a6:6e:f8:e5:05:37:88:
93:38:6b:95:b0:55:bd:23:55:13:ea:f6:4a:f4:e5:c3:7b:92:
12:eb:62:c1:e1:d5:bd:e3:d7:42:98:4d:6f:ec:58:e7:1a:c6:
4b:ea:d0:1c:1a:01:68:80:86:cc:8a:89:b8:eb:cd:27:41:4f:
3b:4c:31:02:6d:5c:2a:18:59:4e:e0:cc:ad:51:4a:2f:44:38:
e6:0f:ab:3a:dd:bb:75:9b:4d:8c:92:1e:04:07:bb:14:f0:69:
3e:57:d2:cd:b8:b3:5a:14:fa:98:9d:d9:9f:91:a7:8e:ed:77:
ee:dc:7c:49:5d:db:c7:fb:66:14:be:b2:47:ea:8b:e4:8e:e9:
be:85:97:78:40:31:80:cf:2a:28:4a:69:b9:f4:43:95:0f:a2:
01:ea:63:de:a5:23:df:82:57:17:aa:95:3d:57:e4:4c:d4:15:
33:a5:c6:41:c8:9e:94:80:1d:54:9a:51:fa:64:17:28:4a:a3:
96:ea:09:49:55:82:d2:ec:43:63:6e:b4:e7:ac:a8:19:80:ec:
f2:78:3b:77:ed:66:29:7a:de:34:af:86:f4:07:a3:f5:2d:02:
32:76:8a:71:c6:74:df:26:e1:84:05:85:69:46:3f:4b:70:52:
c2:48:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:15 2026 by rpki-client