Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier: 6iy5w0cUcMg8fNYEyzuKGQ/8/caCEVimKvFDodlA2OI=
Subject key identifier: 95:2E:2F:E2:56:D9:E5:29:7B:D8:6C:FE:56:37:FF:1E:0A:A6:22:9E
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 01A180AB735FF51DF47718622104F713FD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number: 1AD2
Signing time: Wed 28 Oct 2026 04:01:22 +0000
Manifest this update: Wed 28 Oct 2026 04:01:22 +0000
Manifest next update: Thu 29 Oct 2026 04:01:22 +0000
Files and hashes: 1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
3: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
4: dw9DFWakqWyGOvPpVMr5LqWzzOU.roa (hash: vpyPXqpUatnsbNFIl69kvcHIfHdO0INTOAaGxcZLEhQ=)
5: kSkniVRVZqjXlp9BCZT6zQWlnDU.roa (hash: FfDKz/98X7m6YKQq0UNqzZ0ctHS3WQFyRiYlyLAtxCw=)
6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: dIGfNZ6XfwW9O56QbXmfRxAvq6pbdTwjkPzsw/4arOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:73:5f:f5:1d:f4:77:18:62:21:04:f7:13:fd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Oct 28 04:01:22 2026 GMT
Not After : Oct 29 04:01:22 2026 GMT
Subject: CN=952e2fe256d9e5297bd86cfe5637ff1e0aa6229e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:25:0d:97:52:e9:fc:20:14:5a:0f:8c:d4:
76:e9:41:e7:9c:62:c1:55:c4:89:c1:c5:4a:45:f8:
c0:39:e6:c9:11:5e:6d:4d:4f:af:58:1d:ed:53:10:
b6:90:d1:ba:09:1e:9f:0a:4d:ea:1d:c8:33:a6:e3:
32:6a:04:be:34:30:40:c5:89:75:1c:1f:ec:60:f4:
6c:1c:9e:98:0b:e2:f9:b4:d7:a2:4f:38:bd:97:5a:
78:c9:75:8e:82:b4:34:a5:9f:71:6d:a3:96:0b:fd:
32:4e:4a:71:03:d9:3c:92:4c:dd:e4:45:fa:8b:3b:
99:c3:cf:a1:8d:2f:f5:1f:34:08:1a:0d:c6:1e:98:
18:b1:c7:ef:0b:cd:8d:4f:0d:f6:c7:9a:c8:2a:03:
b5:01:fc:20:17:d2:fb:d6:25:79:c1:00:a8:e6:b9:
c9:77:44:c5:b2:1a:81:c9:1d:4c:9c:0d:13:ad:d2:
3c:93:21:9e:ed:1c:af:3f:7a:2f:2a:08:09:37:05:
d2:0b:6e:e2:48:a2:2f:b6:84:7f:54:3f:8f:e5:79:
aa:0c:77:e2:5f:4e:8d:ee:47:84:05:79:61:78:7d:
9d:de:d7:8e:be:dc:cd:c7:36:c2:78:47:f2:c5:33:
d7:2a:40:ff:d9:c8:ec:ff:b9:08:ad:4a:e8:75:3a:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2E:2F:E2:56:D9:E5:29:7B:D8:6C:FE:56:37:FF:1E:0A:A6:22:9E
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:89:68:b0:2c:23:b4:a6:97:cf:24:95:d5:34:8e:40:cb:3a:
7d:5b:2e:f4:a4:3d:f4:b1:24:b6:7c:99:62:99:02:38:f8:0a:
b6:4c:fa:a3:18:98:ed:1d:fe:a4:91:d6:1d:d1:f7:f9:aa:78:
95:3e:af:21:12:4b:f7:4e:02:25:52:38:5b:ea:b5:0d:6a:16:
48:07:73:89:4a:3d:0f:55:77:46:e5:2f:ca:df:3c:09:74:9d:
aa:af:9e:db:79:a4:46:bf:8c:4f:a0:e5:cc:19:47:01:03:5b:
09:53:9e:46:05:ce:40:7f:7f:80:0b:e1:6f:38:28:f6:0a:0e:
f3:0f:26:7d:52:0d:2f:3e:89:6f:e5:dc:41:c2:60:0e:47:04:
3a:d1:a0:8f:c2:15:5c:36:73:a7:d1:de:2c:3a:3d:07:c4:f6:
19:97:31:ba:0c:08:2f:9e:99:cd:26:1a:b4:31:d1:2b:57:60:
0b:a4:1b:34:86:62:59:c8:96:9c:e5:73:49:e4:0d:85:44:05:
65:14:96:bb:79:2d:9d:56:cc:b0:5a:5b:1f:f9:15:36:45:f2:
f6:77:6e:2b:74:0b:07:34:03:f1:a8:83:9a:31:b0:75:60:1e:
99:f6:99:86:82:7c:08:5a:df:a9:e1:0e:4c:96:aa:13:72:35:
f9:8f:39:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAq3Nf9R30dxhiIQT3E/1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3
NzdmMDYwHhcNMjYxMDI4MDQwMTIyWhcNMjYxMDI5MDQwMTIyWjAzMTEwLwYDVQQD
Eyg5NTJlMmZlMjU2ZDllNTI5N2JkODZjZmU1NjM3ZmYxZTBhYTYyMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA8lDZdS6fwgFFoPjNR26UHnnGLB
VcSJwcVKRfjAOebJEV5tTU+vWB3tUxC2kNG6CR6fCk3qHcgzpuMyagS+NDBAxYl1
HB/sYPRsHJ6YC+L5tNeiTzi9l1p4yXWOgrQ0pZ9xbaOWC/0yTkpxA9k8kkzd5EX6
izuZw8+hjS/1HzQIGg3GHpgYscfvC82NTw32x5rIKgO1AfwgF9L71iV5wQCo5rnJ
d0TFshqByR1MnA0TrdI8kyGe7RyvP3ovKggJNwXSC27iSKIvtoR/VD+P5XmqDHfi
X06N7keEBXlheH2d3teOvtzNxzbCeEfyxTPXKkD/2cjs/7kIrUrodTpavQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUuL+JW2eUpe9hs/lY3/x4KpiKeMB8GA1UdIwQY
MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt
MDYwNWMwODlmYzM4LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4
LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYlosCwj
tKaXzySV1TSOQMs6fVsu9KQ99LEktnyZYpkCOPgKtkz6oxiY7R3+pJHWHdH3+ap4
lT6vIRJL904CJVI4W+q1DWoWSAdziUo9D1V3RuUvyt88CXSdqq+e23mkRr+MT6Dl
zBlHAQNbCVOeRgXOQH9/gAvhbzgo9goO8w8mfVINLz6Jb+XcQcJgDkcEOtGgj8IV
XDZzp9HeLDo9B8T2GZcxugwIL56ZzSYatDHRK1dgC6QbNIZiWciWnOVzSeQNhUQF
ZRSWu3ktnVbMsFpbH/kVNkXy9nduK3QLBzQD8aiDmjGwdWAemfaZhoJ8CFrfqeEO
TJaqE3I1+Y85eQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:34 2026 by rpki-client